This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier: z98rCRc8HJoEh89tH2IRRM8nTcrp6exOHwDkvBEfAMk=
Subject key identifier: 38:6F:71:DA:09:8A:9A:50:3B:38:2F:69:75:F0:8D:C3:E2:CB:4F:F2
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number: 01AF
Signing time: Sun 25 Jan 2026 02:32:08 +0000
Manifest this update: Sun 25 Jan 2026 02:32:07 +0000
Manifest next update: Sun 01 Feb 2026 02:32:07 +0000
Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: 5bpMSVwGlrDRbbINttK1F9RLMLwc30l30aHDxcMJ+xI=)
2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: 0DjY0BlkVRPwB3NWf9zy3shKm/xu/h/zeurHbCub9hQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Validity
Not Before: Jan 25 02:32:07 2026 GMT
Not After : Feb 1 02:32:07 2026 GMT
Subject: CN=697580a8-51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:cb:85:5f:63:7c:1d:07:6d:69:17:29:cb:
9e:f9:3d:39:23:a1:aa:07:87:0a:4f:ba:e8:e2:a9:
18:c9:16:88:40:4b:ab:c7:0e:cd:ad:ec:d2:c6:f8:
4f:e9:f1:d7:c6:84:fe:32:57:66:e2:73:54:b6:84:
5f:9b:25:20:b9:32:9c:cc:27:31:10:97:17:13:61:
8f:ec:c3:7a:6a:81:a5:82:f0:22:c5:7f:33:ce:b7:
c4:5e:7a:57:43:7e:bb:42:b4:a3:ef:90:89:3d:4f:
1c:31:93:8e:4b:f8:56:89:ad:ae:b1:2b:a8:1c:68:
f2:43:1e:86:8b:9b:eb:93:8f:93:67:93:00:e3:47:
04:73:36:34:44:b2:71:50:ad:a6:d0:35:f2:82:06:
12:bd:2d:5d:54:c8:f9:e3:c3:ce:05:cc:1a:36:a1:
0a:12:d0:fe:35:cb:39:c7:d4:8e:54:a4:9b:f2:2c:
d6:e3:60:60:66:74:15:8d:95:f0:24:d6:3f:49:f4:
79:4e:a1:d9:94:fd:39:74:c1:54:c5:ee:14:36:22:
99:e9:9e:da:f1:fb:dd:65:01:96:a3:3a:c8:43:b5:
52:d5:d1:71:3f:02:59:b3:d5:04:63:10:64:0c:5b:
3a:88:68:96:a8:e0:67:08:bb:3f:7f:86:0a:14:31:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:71:DA:09:8A:9A:50:3B:38:2F:69:75:F0:8D:C3:E2:CB:4F:F2
X509v3 Authority Key Identifier:
keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:c3:57:21:0e:4b:6a:65:33:9e:cb:5b:31:5b:2d:cc:cc:
ba:6f:56:83:79:64:13:b6:07:b6:ed:75:fb:59:69:e2:39:14:
37:ad:8d:c9:f6:ad:31:f8:42:8f:af:25:d3:16:d6:a4:dc:93:
3c:d2:d0:42:2b:ca:af:28:82:d2:6b:04:40:cc:a6:19:57:f0:
5d:71:96:e3:ed:67:ef:46:4c:1b:34:f2:ae:3b:09:47:23:a5:
1e:a9:55:07:15:c3:39:d3:15:91:eb:93:62:7e:c4:ac:de:3b:
45:18:b2:e4:0c:94:5b:78:da:8f:32:f0:29:8b:7e:3b:01:e4:
94:73:53:60:2d:9a:e5:35:85:92:81:33:48:56:ae:dc:16:81:
8b:6e:26:1c:de:69:39:8e:e7:5d:b8:85:ad:27:cc:31:a7:ef:
89:ae:7d:13:9f:12:6d:f8:50:45:ba:8d:d7:2f:e0:77:47:08:
96:ba:1a:5c:e9:1a:1e:d7:10:f5:61:c4:9d:06:2e:75:d5:c1:
f6:45:be:95:a3:3b:e7:f8:3d:16:8a:21:2c:7a:33:86:48:a0:
aa:4c:a7:3a:54:0e:cd:2e:b1:89:cd:1c:70:77:d0:93:b2:1f:
b9:1d:9d:e8:8a:20:7a:ae:7b:01:3d:7d:ae:5a:8a:14:b8:ab:
48:05:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:25 2026 by rpki-client