This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier: L3Oc5ksMChM7EjeqqMyx603l8IaQ/Tq0Rui0bOfY0es=
Subject key identifier: 00:6F:AD:7B:FD:68:0C:56:01:92:3F:17:B9:E9:74:68:80:D5:F5:B1
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial: 0584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number: 0584
Signing time: Sat 24 Jan 2026 22:31:12 +0000
Manifest this update: Sat 24 Jan 2026 22:31:12 +0000
Manifest next update: Sat 31 Jan 2026 22:31:12 +0000
Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: YnHbCsEBXofHRmyNrW0TyRoOHVQx2tVNz3zsT9Zr1M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Validity
Not Before: Jan 24 22:31:12 2026 GMT
Not After : Jan 31 22:31:12 2026 GMT
Subject: CN=69754830-12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:1a:ce:10:4b:c4:73:32:c1:3b:22:2c:f6:
13:6f:30:06:3d:0b:8a:fa:e6:e2:bc:c5:78:58:5c:
11:88:f6:39:68:85:e3:cb:56:09:0b:91:22:ad:b3:
54:73:5c:02:a6:65:af:fa:ae:e5:45:20:45:fa:2a:
7c:f4:78:df:8f:29:31:f7:6d:05:f7:39:c3:2c:fc:
50:93:6d:6c:65:08:3c:f8:d2:03:b7:0b:09:dc:cb:
7d:a3:67:56:57:03:ba:19:0a:05:5e:ab:3d:d9:26:
da:22:ed:a5:bc:80:7f:85:8b:2f:e4:34:7f:2e:23:
b7:ac:82:b0:8e:d4:cc:da:51:98:0c:61:6c:34:27:
78:49:1b:d8:fd:d8:d5:30:5d:20:e1:aa:5a:c5:ec:
f3:0f:d9:b4:9e:e9:25:c1:b2:eb:c2:6f:e2:f8:5f:
5a:15:39:10:b4:98:96:2b:23:59:02:7a:65:ca:6c:
36:b3:65:e5:3c:d4:7a:4c:ab:7d:f9:fa:50:62:48:
ec:fc:6a:75:a7:16:30:6d:ff:09:cd:89:a9:cc:e2:
46:3c:ca:31:cc:5e:ab:2a:a5:a9:11:cc:22:2b:e7:
7a:9a:34:d8:b0:85:13:e3:3b:a0:29:63:d7:2c:17:
97:98:91:cc:6e:3c:c4:e7:cd:dc:c2:4b:f9:43:6e:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:AD:7B:FD:68:0C:56:01:92:3F:17:B9:E9:74:68:80:D5:F5:B1
X509v3 Authority Key Identifier:
keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6c:9a:dd:5f:ba:f0:fc:b7:b9:76:95:be:cd:1a:f2:1b:78:
e8:0c:9c:19:72:43:09:9b:62:49:26:58:2e:38:2d:49:69:6b:
f6:10:de:00:4d:c3:e7:a0:cc:5c:dd:5f:9a:4e:a7:8d:65:b4:
a4:1f:31:39:20:7a:af:de:f5:b4:59:59:9a:6d:23:58:d6:11:
45:8b:a5:4f:67:45:b8:1e:b0:33:0d:d0:8e:fd:3d:0a:0d:42:
0b:15:3a:6d:b2:59:1a:e5:fc:b2:da:95:9e:25:5e:5b:05:57:
88:8d:3b:7c:2e:67:58:21:92:71:90:6b:86:68:d4:f9:a1:0a:
13:e5:f3:e0:06:20:f1:79:47:34:7f:a1:8f:30:22:07:9e:4b:
85:91:42:0a:f8:81:73:a9:90:11:f1:f0:ce:51:86:86:7f:46:
37:d3:67:70:7c:05:ef:22:01:c0:e6:8a:9f:89:b7:78:d5:cb:
66:7b:e7:57:bb:9f:7d:cf:8b:bf:28:d3:15:e6:e9:4b:4a:bd:
f5:67:fe:9c:9c:c4:d3:ea:ad:82:9f:12:a9:d2:b1:5c:3b:46:
29:27:f0:18:9a:88:5b:a2:c3:bb:94:7a:b6:3d:b5:22:8b:15:
75:62:70:22:f4:e8:4c:ff:22:25:00:40:e4:24:a9:ec:ef:62:
54:1a:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:35 2026 by rpki-client