This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: BzV7O7OtshO7TP1gjDExI5yCgdH8CYpPOqvVLytcHGc=
Subject key identifier: 05:96:7B:24:86:5F:E5:B3:9C:36:86:57:D6:6B:32:98:18:29:77:67
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0F80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0F6F
Signing time: Sat 24 Jan 2026 17:15:46 +0000
Manifest this update: Sat 24 Jan 2026 17:15:46 +0000
Manifest next update: Sat 31 Jan 2026 17:15:46 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: jtEfO4NqzE63THN+v8dmfQjZBPSiJTjz6bRDDlSKbZs=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Jan 24 17:15:46 2026 GMT
Not After : Jan 31 17:15:46 2026 GMT
Subject: CN=6974fe42-0bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:85:3d:4f:d8:3a:12:04:6c:d2:2e:93:2a:
04:7a:5c:1d:15:ea:3a:68:5a:ad:83:78:b4:d1:ed:
78:91:d4:6f:fd:60:74:d9:ac:d9:da:7b:84:55:22:
11:76:b1:8a:8a:9a:0d:7a:ea:43:30:cd:40:6d:0c:
83:8e:48:52:02:60:76:0c:a9:f1:46:f5:3e:d0:63:
df:4c:2c:e0:67:63:56:90:fe:14:8e:00:45:86:7c:
b7:09:16:be:4f:7d:3f:2b:b9:cc:97:35:b2:af:47:
98:23:fb:d2:7e:0c:a4:10:86:e5:93:33:d2:80:5f:
35:45:00:a4:e5:a6:db:60:3e:91:f5:cb:b6:07:0e:
7c:70:78:81:d8:22:6e:ab:b5:96:5d:64:18:61:1b:
e6:b6:1f:96:c1:a2:05:0d:19:4f:3e:b7:26:11:05:
4b:37:4e:f7:7b:d4:02:b8:1b:3a:0e:ec:50:19:ff:
df:f8:a7:f1:bc:db:65:04:f2:4c:65:d2:45:1b:bb:
d0:7e:f0:af:21:78:92:e5:32:ce:05:db:ca:89:5c:
25:f7:9e:6c:0e:14:35:e5:4d:d8:d9:a7:43:4a:7c:
ce:4b:ce:ed:76:71:31:db:5d:3f:ae:52:bf:44:46:
f7:fc:42:2f:1c:e7:12:7f:ab:05:87:9f:58:fe:cd:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:7B:24:86:5F:E5:B3:9C:36:86:57:D6:6B:32:98:18:29:77:67
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:8b:47:d1:57:0c:c2:38:d8:e8:73:0d:54:f5:99:2f:d8:27:
8b:e0:4b:7f:95:dc:b9:b8:40:38:4c:8c:6b:90:4d:cc:69:a4:
64:88:46:b7:d5:1f:9d:74:1f:20:0b:ed:61:5b:58:99:6f:73:
23:ef:ba:b5:b8:66:e2:ed:bd:ca:f5:6e:06:87:6a:76:9b:8d:
43:99:d8:be:a2:56:d3:48:a7:dd:6d:8b:86:93:8b:46:1d:4b:
ae:f8:a5:e0:ec:3e:81:4c:df:fa:39:1d:c8:6e:7f:1a:ff:b0:
07:ef:ad:c9:bd:c0:d2:2d:ba:e2:08:4b:56:aa:13:94:6d:3e:
d9:bd:f6:fc:c7:04:a2:fc:ae:30:47:4a:7c:b8:a4:2c:0e:2e:
ff:05:61:e3:14:3d:0a:53:c4:46:0f:f7:28:de:68:aa:d6:26:
bb:9a:0a:9f:1e:09:23:ee:9b:c3:15:42:5c:a6:ab:ae:46:c1:
0b:35:ea:97:ae:c2:11:05:32:94:b5:e9:43:e3:66:33:72:97:
17:22:d3:3f:b0:5e:06:db:3d:6e:84:69:98:c2:1b:84:c3:e9:
73:17:2b:f4:98:24:e7:77:b7:12:b9:b9:c8:3c:9b:f0:1f:b6:
7d:a9:b7:42:dd:9c:2f:6b:56:0d:df:de:53:ae:f8:c2:38:95:
8b:cc:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:17 2026 by rpki-client