This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: ojBdmbdHdK6y1Za9P882VjGy3F/wtPiBNs3Vegoys3Y=
Subject key identifier: 13:63:B3:7A:4C:9E:26:B4:89:7D:67:D4:B9:15:0C:79:BE:79:3C:94
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: 01AD
Signing time: Sun 25 Jan 2026 02:31:16 +0000
Manifest this update: Sun 25 Jan 2026 02:31:16 +0000
Manifest next update: Sun 01 Feb 2026 02:31:16 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: azKSHSlp2xcJ7Ilsky3wPAUF2ES1x+MZvlpRoK/Zfvk=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Jan 25 02:31:16 2026 GMT
Not After : Feb 1 02:31:16 2026 GMT
Subject: CN=69758074-074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:67:32:33:27:20:4b:b3:fe:51:bd:af:c5:
4f:93:d3:6a:f9:fc:5c:a2:b6:7f:54:2d:f7:44:42:
6f:5e:ff:df:84:7c:e5:23:be:91:54:7d:de:b6:2c:
a6:ad:f5:e4:7d:34:57:8f:71:d4:75:80:e1:1f:64:
05:9a:53:1d:3c:c0:28:26:22:dd:c7:3e:ca:21:3b:
94:a9:3f:9d:19:8e:cf:21:0e:5a:87:c6:f7:0f:5d:
85:bf:f7:c1:08:5e:88:e0:07:c5:c3:97:a3:d9:04:
1d:1e:93:a9:4e:31:f9:24:e6:5d:6d:8a:ef:23:ec:
7d:d3:ee:9e:bc:38:e6:a8:44:e3:43:bd:d1:d6:a0:
19:6b:38:5c:55:fb:f4:25:e8:1c:7c:79:51:0e:09:
0d:44:de:31:c9:6a:36:a5:ca:c8:e8:9a:b3:b3:58:
1f:1a:06:3e:dd:60:66:83:db:47:1f:2f:6d:c0:dc:
b5:7a:04:ac:b1:3d:89:55:b4:69:85:d2:54:e1:95:
65:72:9c:b3:0a:48:1a:c2:26:01:20:0e:9f:c3:5d:
8c:93:ec:a0:a1:dc:b9:df:0b:7c:69:d8:70:0f:6b:
7d:98:f5:29:d9:40:f5:82:f1:c3:d9:ed:1b:97:4b:
95:05:0b:1d:b6:55:1a:26:a4:58:2e:61:41:e2:09:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:B3:7A:4C:9E:26:B4:89:7D:67:D4:B9:15:0C:79:BE:79:3C:94
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b9:2a:ab:69:56:8f:55:e3:12:98:f9:86:ef:12:03:d9:3d:
19:d8:11:16:cf:6d:e0:f7:52:4c:91:35:c7:c8:44:ea:f6:a3:
99:7d:6e:14:4b:2f:75:a4:ca:ad:6a:2d:07:2a:c8:8d:95:a0:
97:80:61:a8:f3:74:23:15:2a:e6:b0:88:1c:5c:bb:12:e2:3c:
50:3d:03:72:f9:29:95:f3:cf:c9:71:c7:de:51:4c:62:84:c5:
5f:70:d9:b7:df:9d:1d:73:96:87:38:bf:c3:73:38:83:ac:ec:
a7:82:d5:2e:b0:1e:88:84:5f:2c:25:a4:f3:2f:d3:cd:d1:2f:
20:ae:7c:db:26:79:89:70:44:64:5a:c9:50:96:2c:15:15:21:
77:a1:d1:b5:de:20:cc:5e:4c:e4:c1:79:d2:df:08:ea:58:08:
35:3e:35:c3:42:48:36:35:1e:2c:1a:5e:8c:ad:98:d4:48:68:
8c:94:ec:6c:ed:7c:3b:b6:56:f0:1c:9b:e5:a4:49:4e:a6:76:
d1:5d:64:ab:48:92:a3:f7:4f:03:6d:e4:8c:f3:d8:43:2d:4f:
ac:03:7c:a5:e4:22:86:18:f7:8f:6e:b5:cc:eb:3c:2e:58:42:
a3:25:d4:03:38:09:56:87:0f:a1:1f:b7:25:94:30:d4:96:28:
0e:fd:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:21 2026 by rpki-client