This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier: htwa/4D6TuuyPdOrhKOn8SXzDLgdXj6YC8Dj+FCVqyQ=
Subject key identifier: 68:CF:C2:5E:05:E3:2A:92:75:A0:0B:DE:C2:E5:7B:32:57:6F:86:14
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 197C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number: 16FF
Signing time: Sat 24 Jan 2026 16:36:42 +0000
Manifest this update: Sat 24 Jan 2026 16:36:42 +0000
Manifest next update: Sat 31 Jan 2026 16:36:42 +0000
Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: qFsR938FJwcQ21xVV6ROoIdIO4DqtH8JaqJpjOtYRek=)
2: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=)
3: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=)
4: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=)
5: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=)
6: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=)
7: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=)
8: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=)
9: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=)
10: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=)
11: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=)
12: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=)
13: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=)
14: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=)
15: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=)
16: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=)
17: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=)
18: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=)
19: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=)
20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=)
21: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: PhtIjk4F8qicxHCPa3M1pD7mYKM3aiiiB5qzhUq+7Z4=)
22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=)
23: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=)
24: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: p3V1TkPkOKZZRgKf9ScjW2MsPaj6aSrEqMXWPTT5ufg=)
25: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=)
26: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=)
27: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6524 (0x197c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Jan 24 16:36:42 2026 GMT
Not After : Jan 31 16:36:42 2026 GMT
Subject: CN=6974f51a-1bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:e9:ce:1e:72:77:ca:fa:f9:81:18:9e:58:
73:9c:60:e9:5f:8d:2a:ac:40:05:ea:8e:35:a0:38:
88:4c:4f:92:dc:a2:5d:fb:2a:a5:11:31:65:b1:fe:
ef:78:70:21:00:28:b1:d0:db:d3:68:4a:92:6a:d9:
be:7b:bc:1f:ed:97:fd:c6:43:74:9f:d3:e1:6b:e9:
40:c6:05:f3:25:4e:0b:40:86:a0:b7:a2:5b:07:22:
d2:ba:1a:54:cc:70:a1:27:ac:98:c5:bf:c6:86:b3:
57:76:60:97:e1:74:cf:60:ea:2a:93:79:65:66:8e:
e8:6e:77:71:96:8f:d4:bc:33:7d:76:96:f2:0f:02:
c1:c8:ce:8a:ed:be:e2:9c:41:90:66:13:a3:6f:a0:
f3:08:bc:9a:e7:48:cf:c4:c1:cc:f4:1d:cf:0e:9e:
58:f0:2b:b4:7f:39:f0:1d:c2:8c:4a:83:8a:f3:76:
44:fc:08:bd:be:03:9c:71:24:ec:b6:5c:48:f7:fb:
1c:f6:21:ad:c7:d3:d3:4c:82:98:44:04:de:c5:b5:
f9:23:63:33:76:34:e0:0a:c0:7a:23:e9:49:25:b4:
69:61:ee:ac:dc:70:d7:b3:47:d7:70:38:8d:56:e2:
30:3d:b7:d4:f9:2b:5c:c6:f3:01:4b:6a:8b:d0:48:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CF:C2:5E:05:E3:2A:92:75:A0:0B:DE:C2:E5:7B:32:57:6F:86:14
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:05:08:fc:bc:4b:f8:c5:35:17:3b:c4:c2:fd:33:72:25:
a6:9d:65:c7:fa:1a:63:a7:23:a9:30:0c:df:17:22:f1:ce:af:
17:65:0f:47:7f:a6:4d:2a:d9:38:f7:01:44:e2:1b:8a:ec:64:
3c:8c:7a:3e:fc:10:26:a4:23:a2:60:c5:dc:e3:c0:77:fb:30:
9d:bd:93:4e:a2:60:aa:d6:c9:af:e4:c2:d2:a7:f8:66:1e:2f:
e2:37:48:1f:09:24:b6:10:02:88:17:f0:95:da:0f:f2:7b:13:
b0:f2:74:4c:c3:d8:94:42:30:c8:f4:50:b4:fc:23:cf:88:f5:
d0:a1:bf:ec:0b:ae:e9:c5:52:4e:1f:49:d9:76:9a:e0:cf:d4:
8a:7f:d9:48:a9:0b:72:9d:1f:aa:ad:03:43:ea:cf:4b:b3:22:
4b:a5:7c:70:cc:a8:30:ad:e9:f3:81:1a:2d:52:13:3b:2e:1f:
44:2d:ed:17:93:8b:9a:5d:1c:a5:f2:20:78:e2:8c:f5:0f:2f:
6c:43:2c:8f:d9:f0:9c:ee:ac:42:85:eb:c8:b7:85:b0:db:24:
9f:15:df:5b:df:96:cd:7e:5f:3c:d4:ea:50:3b:1f:31:21:7d:
f7:16:03:52:6a:35:d5:d8:b0:81:7a:ba:7d:3e:f3:fa:62:fb:
d1:df:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:42 2026 by rpki-client