This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier: 3Ll4qoVAkIAaKlV66Pz4qUUH/qeo1d+wACWDvQIHnCg=
Subject key identifier: BC:0C:F8:5A:F5:F0:76:4B:02:76:02:93:C4:93:F2:1A:7C:0B:A8:F5
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial: 0329
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number: 0324
Signing time: Sun 11 Jan 2026 00:15:22 +0000
Manifest this update: Sun 11 Jan 2026 00:15:22 +0000
Manifest next update: Sun 18 Jan 2026 00:15:22 +0000
Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: 1EvAY2/xxyzqwMQoX+He6XyLLqg0Cky1gepu6t3Y1ZM=)
2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: caDwJbItaMkMbYRFf35kercOFxduC/QaXG95XjbXJ4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 00:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Validity
Not Before: Jan 11 00:15:22 2026 GMT
Not After : Jan 18 00:15:22 2026 GMT
Subject: CN=6962eb9a-1d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:7e:0e:68:1e:70:08:27:f8:28:0c:96:36:
ab:02:41:d0:85:ab:c5:4d:3f:a1:65:57:e1:dd:a8:
e2:de:83:2f:7c:57:c6:b1:12:b7:f4:6d:0e:1d:3a:
0f:83:b4:1f:15:28:80:6c:14:94:8e:19:2e:35:ba:
20:f6:f7:70:8d:20:79:bb:a2:44:97:f7:f6:3a:c1:
36:15:64:6a:cc:d5:39:45:1a:e5:79:56:a7:7e:76:
a3:e9:6f:fd:d3:74:e8:9c:44:bc:fc:14:0f:29:4d:
2e:3f:e5:cb:5f:2b:68:23:ed:8e:d0:9d:30:90:ed:
20:4b:b2:03:7e:de:80:c3:e4:89:d1:07:ad:1a:0a:
de:55:2c:a0:46:17:31:05:04:0e:e1:49:1d:f5:26:
23:e3:80:f6:30:f4:96:5b:3d:17:5d:f7:bf:0b:b0:
21:be:3d:43:c0:01:78:9e:cb:c6:65:ac:69:22:65:
70:77:54:86:fb:e1:db:12:4e:1a:8b:b1:a6:30:98:
13:e9:e3:6d:22:cc:80:63:48:7e:1a:d5:55:c5:8c:
e2:c8:4b:3a:30:41:55:0f:55:1f:8a:9f:68:ad:72:
cc:b2:6a:63:28:3a:35:c5:dd:66:c5:34:ae:e4:b5:
4c:0f:73:06:53:6c:ed:bc:9a:db:cf:90:05:66:50:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0C:F8:5A:F5:F0:76:4B:02:76:02:93:C4:93:F2:1A:7C:0B:A8:F5
X509v3 Authority Key Identifier:
keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:45:f0:bb:28:01:01:e8:8e:9c:30:90:4e:71:b7:0d:d9:bf:
87:07:85:47:17:eb:a5:cd:ef:a6:f2:a6:bf:d5:19:39:67:3f:
e1:53:2b:fa:9a:c7:b8:06:d4:a8:f5:6b:08:ad:82:2e:22:e2:
39:4f:71:2c:cb:c8:34:f5:9f:75:2a:23:bd:3d:3c:2a:eb:1e:
91:51:24:a8:cc:30:23:25:96:ec:de:4e:51:59:cd:75:01:a2:
e9:e3:28:01:eb:81:17:01:c8:f1:d4:2c:f7:ea:7e:3c:bd:9a:
99:d4:8f:2b:7b:e5:9d:57:fc:cc:28:e4:86:82:f8:40:c9:a8:
e3:bc:e5:d5:58:ef:3a:d1:cc:3a:df:18:b2:16:e6:f9:74:a4:
52:b3:a3:be:2d:5d:6f:41:92:e0:75:f2:f1:74:9c:29:af:cf:
96:5e:17:d3:cd:95:f7:cd:e8:21:3e:1a:46:e1:64:2b:02:b6:
d6:1a:2c:79:3f:aa:ca:b6:5e:d8:c4:35:88:f2:68:18:fb:72:
e5:29:8f:5a:ac:42:e5:7a:ef:86:51:82:d0:40:07:ed:b3:a2:
31:ca:7a:14:85:bb:ee:e3:25:b3:dd:17:6e:b5:3e:44:ed:3d:
10:94:95:d8:6c:25:53:c6:4d:82:50:88:75:1f:6d:b1:41:34:
82:3d:23:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC
RTdBMjM4QzUwHhcNMjYwMTExMDAxNTIyWhcNMjYwMTE4MDAxNTIyWjAYMRYwFAYD
VQQDDA02OTYyZWI5YS0xZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo79+DmgecAgn+CgMljarAkHQhavFTT+hZVfh3aji3oMvfFfGsRK39G0OHToP
g7QfFSiAbBSUjhkuNbog9vdwjSB5u6JEl/f2OsE2FWRqzNU5RRrleVanfnaj6W/9
03TonES8/BQPKU0uP+XLXytoI+2O0J0wkO0gS7IDft6Aw+SJ0QetGgreVSygRhcx
BQQO4Ukd9SYj44D2MPSWWz0XXfe/C7Ahvj1DwAF4nsvGZaxpImVwd1SG++HbEk4a
i7GmMJgT6eNtIsyAY0h+GtVVxYziyEs6MEFVD1Ufip9orXLMsmpjKDo1xd1mxTSu
5LVMD3MGU2ztvJrbz5AFZlD3wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwM+Fr1
8HZLAnYCk8ST8hp8C6j1MB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4
MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW
VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPRfC7KAEB6I6cMJBOcbcN2b+HB4VHF+ulze+m8qa/1Rk5Zz/hUyv6
mse4BtSo9WsIrYIuIuI5T3Esy8g09Z91KiO9PTwq6x6RUSSozDAjJZbs3k5RWc11
AaLp4ygB64EXAcjx1Cz36n48vZqZ1I8re+WdV/zMKOSGgvhAyajjvOXVWO860cw6
3xiyFub5dKRSs6O+LV1vQZLgdfLxdJwpr8+WXhfTzZX3zeghPhpG4WQrArbWGix5
P6rKtl7YxDWI8mgY+3LlKY9arELleu+GUYLQQAfts6IxynoUhbvu4yWz3RdutT5E
7T0QlJXYbCVTxk2CUIh1H22xQTSCPSN6
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:12:02 2026 by rpki-client