This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json)
Hash identifier: HmNOrFVE81/ckC8uPPUbm55Eucp/hdV0DDqqlXmdWYg=
Subject key identifier: C6:FF:72:2B:D9:20:20:BE:C6:BD:3D:A5:C1:0A:B5:F0:CC:0B:4E:04
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial: 09F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
Manifest number: 09E0
Signing time: Sat 10 Jan 2026 19:22:35 +0000
Manifest this update: Sat 10 Jan 2026 19:22:35 +0000
Manifest next update: Sat 17 Jan 2026 19:22:35 +0000
Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: +SEuCj5Z4SHq9/qgUwkGECTPdYmmrZwfIhAhDpc9sPY=)
2: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: Qe2k4Rmt8cYvrQ25NjhCj6HgTDQ2LTBczeZdX5NMi1Q=)
3: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: 1xpqucRPj2sGGfUlw/hjqGcWw2RAvQEPEvj1/o7DLww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Validity
Not Before: Jan 10 19:22:35 2026 GMT
Not After : Jan 17 19:22:35 2026 GMT
Subject: CN=6962a6fb-0cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:3d:43:c3:99:7b:b3:51:b1:3f:d6:41:77:
94:ca:06:47:51:0b:ad:2b:c0:0f:e5:2f:37:87:d6:
64:51:2f:e2:32:79:dc:c5:4e:bc:e3:5e:4c:bc:60:
95:0d:b8:22:2a:7b:a8:59:bd:42:d8:6d:63:ec:19:
be:5c:aa:2c:8c:15:5b:18:3b:07:d3:97:cb:f6:b7:
ef:da:e0:42:8c:b7:fd:0f:9c:b9:c8:ab:54:51:89:
2c:57:52:44:6f:ef:60:f5:ea:92:cd:bc:ad:c8:92:
90:59:4e:df:14:26:98:1b:ad:d0:9b:59:c1:6c:e4:
36:31:d3:e6:66:b5:08:93:f1:72:54:57:09:f4:c2:
3c:c7:2f:94:e2:5f:6d:82:9d:63:28:dd:74:d9:7c:
58:d1:59:ae:7d:b9:72:41:96:dd:a7:6b:fc:03:73:
f4:51:69:0d:96:04:e7:9d:bb:bb:f4:c2:1e:be:25:
a6:d6:fe:6f:cd:49:61:74:36:d7:d0:cd:0d:50:a4:
36:d1:47:fa:5c:02:6e:d3:e2:b3:58:eb:e3:4d:c6:
7a:52:ec:1d:60:9f:f5:4d:8e:44:8a:27:66:67:a7:
4d:1d:99:07:9c:45:fb:15:87:0e:ea:74:3b:2e:dc:
3a:02:0c:ed:7e:2d:a1:77:4f:aa:b9:98:53:c0:fb:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:72:2B:D9:20:20:BE:C6:BD:3D:A5:C1:0A:B5:F0:CC:0B:4E:04
X509v3 Authority Key Identifier:
keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:1a:97:f3:93:0f:cf:bb:78:f6:af:10:0f:7d:e9:37:77:
73:13:10:3b:c1:35:f3:a9:a9:73:45:93:22:ab:9d:2f:3a:76:
16:7c:a2:f4:d3:db:0a:c1:7f:a0:e1:74:6e:86:81:2f:18:4a:
29:2b:9f:03:c4:ae:4a:5c:fe:92:23:78:64:9e:c7:61:89:d0:
07:a9:b6:71:d7:96:45:8b:c6:d6:3a:06:3b:a7:10:b0:40:1a:
9d:45:56:17:e6:bc:f6:63:af:3d:97:e0:94:e5:a4:67:34:3a:
e3:51:a6:18:48:c4:1e:83:9e:84:a0:c1:7b:af:7c:6e:ca:28:
cd:2b:3c:10:b4:e1:5a:02:b6:52:03:ed:cf:88:a2:c3:58:66:
cf:65:db:89:6e:5e:d8:12:d1:f4:55:c4:2d:03:66:3c:d4:f7:
19:c0:39:f5:25:a5:57:ad:79:99:5e:85:26:97:f2:cc:b7:da:
28:57:90:b1:b0:62:17:18:76:94:64:f4:5a:3a:be:7a:03:9f:
fc:e4:be:49:4e:5d:35:5d:b8:6a:88:44:c4:fc:c6:89:59:e2:
59:f6:00:b0:71:67:28:47:a8:52:8a:95:86:c1:49:5b:6c:cb:
37:04:4f:40:69:bb:27:bc:93:13:a2:25:24:93:33:8d:51:56:
30:b8:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:38:15 2026 by rpki-client