This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: UQeoB8h4Q8X8IZ6FYuLrnr7XuRsRA20ePo4137x8w20=
Subject key identifier: AD:87:D8:F0:B9:1E:61:D1:41:C8:6B:69:95:B1:2A:33:E4:73:B5:DC
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 024E
Signing time: Sun 11 Jan 2026 00:58:47 +0000
Manifest this update: Sun 11 Jan 2026 00:58:47 +0000
Manifest next update: Sun 18 Jan 2026 00:58:47 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 29/klk38Lr3RMIdMkQOZixzoIlxClWa/oMN6Vx4xXoc=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: XoJZF9Jz8ZccwqIcrKIVr4/ZTC4E2cHCJSHMspLqgb4=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: j0KJtUAylCCCv7Fkk/Ws7qR9yBTk+ovFn0tv4R3Wr5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 00:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Jan 11 00:58:47 2026 GMT
Not After : Jan 18 00:58:47 2026 GMT
Subject: CN=6962f5c7-fad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:05:98:83:17:b4:8f:76:a6:4e:f8:43:4e:
77:b1:52:15:9b:9e:6c:f0:23:21:c8:dc:76:a1:05:
dd:df:88:4d:f8:aa:7d:37:4f:6e:44:b0:f9:f4:e3:
88:cc:f8:30:81:c5:22:ed:30:2a:1d:25:d5:32:4e:
44:7f:46:22:4e:42:9d:88:5e:60:4e:3d:46:8d:97:
64:81:6b:10:00:40:bf:ad:dd:64:76:45:91:f3:43:
6c:7f:27:1e:78:25:59:8b:e5:33:f9:ed:1a:bc:9a:
46:f7:5d:1b:b2:9d:01:bc:b7:ab:7b:f8:cd:5c:b8:
82:b7:aa:39:46:85:21:7d:84:39:fc:c1:21:82:ee:
24:2a:67:84:7a:a4:01:ac:d8:64:42:fd:5f:9a:d1:
5e:b8:bd:27:e5:05:60:28:5b:11:9b:fa:40:2f:b7:
b3:c0:a5:60:17:0b:3e:b3:49:0d:6f:13:cb:51:89:
7f:8e:73:1f:21:bc:e2:19:a2:59:9a:31:00:43:11:
5a:6b:c3:db:be:8b:99:99:8d:58:5b:27:91:cb:a2:
76:65:72:9c:dd:39:cf:d7:d7:b8:ce:1f:91:cd:1d:
cf:64:a4:15:44:bc:88:7b:ed:d7:24:16:cc:5c:50:
99:09:75:c1:14:58:a9:ca:c4:6f:ff:be:65:d7:d5:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:D8:F0:B9:1E:61:D1:41:C8:6B:69:95:B1:2A:33:E4:73:B5:DC
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:f8:49:8b:34:4c:58:05:75:86:d6:80:c8:de:34:ed:0b:
3b:12:c7:fd:4f:1b:27:5a:c4:25:3e:7a:ab:23:fc:ca:7c:25:
e0:3d:38:d7:dc:04:4f:a4:5c:0d:48:c2:e2:57:35:d6:0b:e8:
b0:bf:8f:e5:05:9c:f2:fa:40:38:11:2f:cd:f0:62:37:d3:e6:
48:8f:fe:f8:92:ec:85:e0:f8:98:96:5a:aa:06:48:b8:44:79:
60:4b:d5:df:79:14:d4:21:34:bf:76:57:81:83:40:4b:12:c9:
37:7b:17:70:06:e6:be:28:1e:b3:00:b9:25:cb:f6:af:57:31:
4f:da:61:ba:2f:b6:01:0f:b9:1b:41:1c:eb:f5:b9:20:f3:90:
b1:b2:d1:f0:d5:42:ba:da:76:5b:a2:98:a9:e1:78:a1:ca:a8:
e7:a8:a7:f9:47:cf:40:86:8f:3a:7b:6c:c0:00:d4:a6:71:69:
75:da:da:9c:fa:46:44:35:78:4a:b0:e2:7f:f0:5c:af:4a:5e:
6f:37:18:2e:88:f5:d6:4d:d4:c0:87:9b:fa:5d:a6:4e:31:8f:
ec:b8:58:1d:e9:df:15:d3:a3:61:ae:29:58:2e:a7:56:9e:42:
5b:04:1d:97:fb:e2:66:4d:ce:f3:c2:4c:99:7b:a9:af:80:82:
88:17:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:30:25 2026 by rpki-client