This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier: QrBwWD0QtiC/R+PGGDW1/zoIsU5c6V7GvnGwiTC22Fk=
Subject key identifier: 8A:45:44:9B:80:DF:C8:67:8E:34:0A:97:CB:F5:F5:B0:C8:E2:D2:15
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1EA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number: 1E83
Signing time: Thu 08 Jan 2026 15:54:26 +0000
Manifest this update: Thu 08 Jan 2026 15:54:25 +0000
Manifest next update: Thu 15 Jan 2026 15:54:25 +0000
Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: 0DRp/d4Hvx09jRtL9msaLJSMoTsw7naH5tkvwzgvQhg=)
2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 15:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7842 (0x1ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: Jan 8 15:54:25 2026 GMT
Not After : Jan 15 15:54:25 2026 GMT
Subject: CN=695fd331-c409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:40:a0:6f:1b:1c:77:2b:55:c1:97:66:96:
7b:84:4d:85:ae:64:1e:75:7f:8e:26:b5:0e:f5:3d:
c2:1f:74:70:d4:5b:36:43:3b:c4:52:8a:5c:35:97:
80:58:c5:3e:19:00:ce:65:c6:45:98:6c:b0:8c:58:
75:b1:d4:88:bb:c8:ef:4d:d4:46:cf:1c:3f:03:1c:
c3:80:ff:96:d7:4a:e5:7d:3c:d1:af:56:62:55:81:
0f:9d:41:73:a8:01:03:8d:6d:11:e1:15:a7:eb:61:
33:7d:53:90:e3:a3:56:6c:07:40:48:05:bc:a7:ea:
1a:e7:71:b1:6e:1e:0a:6b:52:be:f9:9b:28:ec:1c:
d4:13:05:76:d1:6f:e1:14:60:b1:dd:a0:3e:36:79:
11:75:6b:92:c3:02:cb:48:a1:22:82:5c:8e:fd:e2:
96:08:59:ef:8e:20:69:e4:ae:37:77:93:07:57:be:
ae:c4:61:f4:88:71:ca:9d:c3:b3:53:be:c2:05:6b:
bb:98:cf:c9:48:5a:47:cc:6a:25:3d:e2:d2:91:83:
b1:e3:12:81:31:4b:58:d4:82:e8:b0:d1:f3:b7:bd:
02:62:cd:c2:5c:bc:1c:d8:ef:2e:5c:bf:8c:22:40:
a7:26:a5:1b:c5:43:b2:61:68:8d:1a:53:f1:8a:9d:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:44:9B:80:DF:C8:67:8E:34:0A:97:CB:F5:F5:B0:C8:E2:D2:15
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:41:6f:c9:4c:40:84:70:67:dc:5e:4c:d5:6b:19:6c:0d:
c0:9e:99:4c:d6:91:fb:92:92:f7:04:94:71:49:86:5d:f5:d8:
16:9c:24:dd:00:2e:60:5e:82:cb:4c:a4:36:d8:93:89:7b:80:
2a:f3:fd:3d:62:53:79:1e:db:c6:7e:74:14:24:2a:c5:84:27:
5c:80:ef:9b:e2:cd:83:6f:37:04:09:59:98:4a:0e:dc:23:7d:
15:56:13:70:85:be:d1:4f:6c:08:49:f9:d8:b3:23:fe:c6:35:
6e:d9:ec:a5:4c:a2:d2:0f:5d:19:cd:a8:3b:35:bd:0a:06:65:
80:87:4c:44:f1:8b:16:8a:b0:d8:df:b7:75:cf:ef:6a:c5:d1:
c0:95:07:29:3e:bf:6b:30:b3:a5:9a:a2:a9:4b:80:c7:3f:97:
4d:70:2d:22:b3:15:57:67:70:cc:d7:4b:a1:d9:c2:a2:ca:88:
44:7d:b2:1b:66:23:77:b4:ac:49:47:cc:92:54:d0:23:88:2c:
29:7e:b1:f2:1a:fd:90:2c:21:9c:00:78:59:66:03:b4:eb:bb:
bf:b3:eb:2e:f1:06:9a:cc:bd:3a:64:0a:f2:bd:c0:b3:da:0f:
fc:72:e9:15:09:c2:ab:e1:3a:e9:d8:11:63:37:a5:d5:89:07:
61:91:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:25:38 2026 by rpki-client