This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier: v9oM3r7lvpME7xwhC3lUhQeeClMrnfh2VixmLjnTKxo=
Subject key identifier: 90:AF:24:2B:23:6D:9A:E3:93:95:02:21:3B:59:C1:84:0A:79:2F:E7
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number: FE
Signing time: Sat 17 Jan 2026 04:18:20 +0000
Manifest this update: Sat 17 Jan 2026 04:18:19 +0000
Manifest next update: Sat 24 Jan 2026 04:18:19 +0000
Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: xaZwos3NvKtTrkG5RP1nzTFF+ZZDXJtrNxDyIiAG7a0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Validity
Not Before: Jan 17 04:18:19 2026 GMT
Not After : Jan 24 04:18:19 2026 GMT
Subject: CN=696b0d8c-d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:7d:9e:60:38:a0:fb:3e:51:bc:3c:34:6e:
8d:2b:67:fc:d1:0a:c8:ed:42:1b:c2:e8:25:2d:da:
5b:ce:51:3c:cf:74:28:ed:3d:b2:21:91:0c:82:30:
76:ac:1c:93:57:77:bf:a9:9c:14:36:bc:00:eb:46:
d5:f7:c5:20:0f:85:a2:e0:48:af:67:50:7f:71:12:
45:eb:8e:d6:44:33:0c:ac:d1:f5:30:2b:64:7f:ce:
68:a9:e4:8d:c5:8a:2e:c3:b4:ed:5f:db:ea:8d:d3:
89:b2:ed:d2:38:33:72:57:83:ce:48:a3:78:07:11:
08:3d:6b:79:99:15:31:76:e5:19:0e:b2:9f:78:eb:
0a:9f:cd:88:fb:10:e1:6c:50:70:46:27:19:9f:d5:
fb:b7:ea:17:d0:0b:e3:ef:1c:02:20:86:4f:24:52:
97:67:24:65:d4:f5:c3:a4:0a:f7:fb:6b:b3:91:57:
8f:3f:75:9d:cc:3e:58:13:57:81:0c:b6:49:c6:21:
35:83:75:d8:82:bf:da:4b:7a:de:e4:5a:20:7b:b7:
85:91:46:80:c3:c9:11:be:9f:61:12:89:5b:a4:1a:
de:7c:d4:50:c3:2d:eb:1b:70:5f:aa:de:b2:6b:3d:
5d:14:d3:82:93:a6:bb:76:e1:a3:bb:f3:b8:c7:8c:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:24:2B:23:6D:9A:E3:93:95:02:21:3B:59:C1:84:0A:79:2F:E7
X509v3 Authority Key Identifier:
keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:2b:98:4b:c3:0c:d0:c4:59:27:b7:2c:2a:f7:98:54:63:
db:8f:60:a3:82:b1:73:0d:66:4d:b5:06:14:5e:bb:1f:9d:7f:
87:53:e1:61:50:ca:09:00:2e:0f:30:3d:cb:a3:80:70:31:bb:
3d:60:31:1b:6a:4f:90:07:d6:c2:6e:44:28:11:d9:a4:10:36:
5a:8f:cd:ac:90:9b:fb:34:43:49:5c:b6:e8:2e:64:23:c7:f9:
d4:0d:47:13:95:45:8f:66:4d:eb:ac:99:54:8b:a6:ed:56:93:
9d:a0:6a:d0:90:2b:4f:ec:57:d8:d3:94:a1:e6:b9:86:d4:fa:
13:bf:b3:18:94:de:57:e0:dd:53:ae:cc:68:4c:2d:fe:22:5c:
7a:f4:50:6c:37:65:34:74:e9:f6:38:92:2e:27:d2:bb:4c:03:
24:26:30:43:41:a2:08:65:62:2c:bc:b4:f6:ed:ff:68:31:18:
d5:98:70:26:be:f5:25:2a:d1:cb:8b:cb:9f:76:a2:82:bc:2d:
2e:21:d5:97:09:c3:b6:58:ce:5e:3f:7f:70:2f:1d:10:f9:e1:
5e:87:c0:b5:d5:c8:b2:74:75:49:60:1a:b3:3e:b9:b4:a6:b8:
88:98:68:ae:fe:22:16:8f:f1:63:d3:01:4d:58:9a:d7:fe:d7:
43:e4:69:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5
REY0MTZCQjcwHhcNMjYwMTE3MDQxODE5WhcNMjYwMTI0MDQxODE5WjAYMRYwFAYD
VQQDDA02OTZiMGQ4Yy1kNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6yh9nmA4oPs+Ubw8NG6NK2f80QrI7UIbwuglLdpbzlE8z3Qo7T2yIZEMgjB2
rByTV3e/qZwUNrwA60bV98UgD4Wi4EivZ1B/cRJF647WRDMMrNH1MCtkf85oqeSN
xYouw7TtX9vqjdOJsu3SODNyV4POSKN4BxEIPWt5mRUxduUZDrKfeOsKn82I+xDh
bFBwRicZn9X7t+oX0Avj7xwCIIZPJFKXZyRl1PXDpAr3+2uzkVePP3WdzD5YE1eB
DLZJxiE1g3XYgr/aS3re5Foge7eFkUaAw8kRvp9hEolbpBrefNRQwy3rG3Bfqt6y
az1dFNOCk6a7duGju/O4x4wvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCvJCsj
bZrjk5UCITtZwYQKeS/nMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF
REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY
VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIziuYS8MM0MRZJ7csKveYVGPbj2CjgrFzDWZNtQYUXrsfnX+HU+Fh
UMoJAC4PMD3Lo4BwMbs9YDEbak+QB9bCbkQoEdmkEDZaj82skJv7NENJXLboLmQj
x/nUDUcTlUWPZk3rrJlUi6btVpOdoGrQkCtP7FfY05Sh5rmG1PoTv7MYlN5X4N1T
rsxoTC3+Ilx69FBsN2U0dOn2OJIuJ9K7TAMkJjBDQaIIZWIsvLT27f9oMRjVmHAm
vvUlKtHLi8ufdqKCvC0uIdWXCcO2WM5eP39wLx0Q+eFeh8C11ciydHVJYBqzPrm0
priImGiu/iIWj/Fj0wFNWJrX/tdD5Glr
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:21 2026 by rpki-client