This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: +CyieVSHxBRj5ByncXFjOa18sQpGp+IrGssCFKaLA6c=
Subject key identifier: 95:87:AF:C3:66:22:CA:05:3A:43:FC:5A:FA:CC:FB:60:50:3A:F5:6E
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0101
Signing time: Sun 11 Jan 2026 00:50:58 +0000
Manifest this update: Sun 11 Jan 2026 00:50:58 +0000
Manifest next update: Sun 18 Jan 2026 00:50:58 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: kZfpH3ZQpwCW7/5hZYkk1Z9Y4rQ+ZGAuOJAKguco898=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 00:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Jan 11 00:50:58 2026 GMT
Not After : Jan 18 00:50:58 2026 GMT
Subject: CN=6962f3f2-1e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:f6:ed:1f:31:04:13:2a:f2:1e:bc:3e:6f:
b6:1d:a8:e8:e0:4c:ed:94:5b:dd:fe:91:3f:11:d1:
21:eb:fa:32:4e:c7:80:c5:21:26:06:a5:e9:09:0a:
3f:22:27:04:06:43:2f:44:30:4e:a6:f5:71:f7:a2:
11:6c:83:93:4c:84:11:7d:29:15:bf:a7:69:b8:6b:
2b:67:c2:38:85:30:c6:5d:62:21:5d:8c:59:11:ea:
09:27:d3:28:91:d0:13:15:b7:bd:9e:97:7a:17:97:
25:0e:d6:44:ca:14:af:21:f5:1a:d8:7a:6a:34:c0:
09:6a:34:f3:01:8f:f5:47:5a:f0:35:39:c2:84:30:
7d:28:ee:c0:52:9d:ab:12:89:20:2b:91:8e:dc:41:
a9:60:b0:55:57:5d:96:d6:83:4d:99:65:c1:1b:51:
89:5b:76:d9:42:a1:4f:56:be:8e:1f:8a:53:6a:45:
45:9c:b4:22:8a:65:53:f7:7a:72:e5:1d:be:5a:c7:
57:4c:20:b1:45:15:5f:5f:62:8d:d5:74:f5:64:fa:
c0:86:b0:c5:7e:9a:a6:4d:2b:62:ec:bd:6f:8f:b7:
3f:91:60:4d:5f:ea:ad:52:39:46:6f:8b:f9:4d:dd:
1d:27:ec:3c:8b:d2:0c:66:13:f2:f7:09:b6:8d:6d:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:87:AF:C3:66:22:CA:05:3A:43:FC:5A:FA:CC:FB:60:50:3A:F5:6E
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:da:6f:aa:95:d6:f8:dd:62:4f:d1:e6:07:fc:7e:0a:7b:7c:
f2:ab:8f:90:fc:8c:b7:62:22:b4:95:f1:51:31:25:49:d5:94:
70:ba:29:21:e1:bf:02:5c:87:f0:67:ef:a0:fb:83:ba:47:7d:
94:b9:14:72:69:3a:23:77:aa:8d:e4:6f:48:af:eb:86:0a:3b:
4c:5c:92:e2:54:76:e8:13:87:df:5c:8f:cd:73:14:02:3b:fc:
c4:9c:55:48:f9:09:5c:ae:fa:25:60:a9:cc:5e:10:17:51:11:
71:7d:00:14:5d:91:9b:cc:7d:09:ae:b6:13:a2:b0:6d:d9:9d:
55:07:ed:07:b3:e1:35:c4:63:c1:b6:2c:00:2d:08:c0:99:a0:
42:d0:87:80:fa:82:72:02:bf:f7:2f:fe:d1:75:7d:d9:13:b6:
73:a9:1c:10:1f:f1:6a:b0:5c:61:c3:64:27:2d:3f:43:d2:48:
1a:2d:f8:6d:63:20:41:92:4f:1d:3a:af:71:ed:e9:97:2e:15:
05:ce:b2:3c:ef:a8:f7:eb:0d:b3:0a:ee:5b:df:2e:63:68:85:
b3:2f:77:d7:b4:44:58:69:f0:f1:4e:f6:55:29:a9:0b:f2:18:
2e:00:df:c2:fb:f1:e4:ff:b3:b2:e3:c3:ac:b1:cb:ad:c8:8e:
0b:72:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:59:17 2026 by rpki-client