This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: jLPQ+uRzR7G+7s9cWv8Pea3qXRBGjySFfe92nWBjmqo=
Subject key identifier: B1:7A:49:01:8E:D5:01:84:E4:A8:3C:D1:F8:E8:64:B9:25:96:6E:EC
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 0129
Signing time: Sun 25 Jan 2026 03:57:18 +0000
Manifest this update: Sun 25 Jan 2026 03:57:17 +0000
Manifest next update: Sun 01 Feb 2026 03:57:17 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: I9nrca5gxxk1VPBSUnopu0V4BDn4/YAG30LGWHhh2BA=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: n1rSG6+YrBdrpyC7jAy4PT81hFwvfJMiF3pinZ5UvAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Jan 25 03:57:17 2026 GMT
Not After : Feb 1 03:57:17 2026 GMT
Subject: CN=6975949d-2ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:1d:d1:a0:2a:d8:4e:70:ae:12:8e:95:04:
b0:e5:58:d8:75:25:bc:dd:be:d3:d1:9c:61:88:dc:
32:e3:60:53:e9:8f:34:ac:fb:78:bd:8e:8c:f3:60:
c4:50:10:41:59:f3:24:4b:02:ee:30:f4:7a:85:4f:
30:20:d0:d1:c0:3e:79:6c:6c:d7:ed:56:66:ca:ce:
a1:ed:67:f5:58:d4:9f:e4:bd:38:12:2f:fe:77:6f:
ae:8b:c6:5c:e3:2c:c8:7b:32:b3:0e:88:0a:62:e4:
a4:89:ee:7d:6d:3a:98:06:92:3e:d8:75:e8:d9:64:
84:78:e7:ee:96:d6:07:62:ee:fe:26:f7:8f:5f:12:
8d:ff:cb:b8:57:11:26:d2:f1:28:a8:2a:92:07:ca:
2a:34:fa:11:3d:0d:a0:9c:ee:c3:31:81:dd:a6:f5:
81:32:b6:bc:50:3f:b9:f6:a2:ae:9c:72:bf:a9:08:
50:da:84:42:c1:1a:2d:f6:27:64:2e:ed:69:ce:04:
91:bc:36:86:66:5e:c7:77:24:bd:9e:44:01:2b:82:
0c:02:2a:f5:08:ca:9a:8d:1f:79:a8:0a:13:7a:1a:
12:07:4a:c7:bb:22:ce:19:0e:9c:6c:36:0b:27:1e:
97:11:1c:e3:66:a6:86:a5:5c:b9:a8:0d:f6:e8:cc:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:49:01:8E:D5:01:84:E4:A8:3C:D1:F8:E8:64:B9:25:96:6E:EC
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:56:b0:a7:07:e4:11:7b:3e:30:bb:a7:1a:05:60:28:3f:
64:e9:64:c2:8b:84:27:47:7b:5f:a7:41:19:f0:20:8a:b5:10:
98:15:e5:b4:52:a2:82:c1:17:d0:01:ac:68:a5:80:e0:bd:88:
88:1a:b5:77:64:13:2d:ba:14:4d:0b:24:8f:79:d9:0d:17:f6:
ef:52:74:5f:af:e4:b4:df:b5:23:f7:38:b7:3b:eb:ff:80:0b:
fc:b8:73:f9:07:f2:83:11:18:5b:8c:5f:b2:9c:bc:9d:31:f4:
e3:93:e0:c3:73:58:33:b9:ac:5c:69:fd:73:63:ce:62:91:0e:
3b:e0:3e:18:3f:a5:6d:ef:3e:73:27:7c:38:fb:79:34:4b:d1:
3a:b0:2f:db:62:d9:1c:b5:83:31:05:02:09:1a:ac:ed:0c:6e:
e5:95:65:27:91:de:cf:6e:5d:9a:13:bf:af:bd:ee:23:41:8c:
12:59:99:c2:5c:4e:02:98:6f:57:a4:7f:42:81:80:cd:52:8a:
ed:6f:6c:49:64:12:0e:69:a5:67:d9:4d:99:12:da:26:04:bf:
9d:4c:14:16:76:d0:6e:1b:41:e6:a7:bb:6b:ac:ae:76:74:9a:
7e:01:ee:d4:6c:e2:b6:f2:5f:31:cb:f4:cf:3c:70:c0:e4:2d:
56:67:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:52 2026 by rpki-client