This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: a50rVgg0TSeEog2vUYVATiuepQaPzYN0o8pfa2bNjmg=
Subject key identifier: 26:FD:65:6D:71:31:16:B1:94:3A:D4:4A:CB:1E:B7:8A:43:44:A0:7F
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: 016A
Signing time: Sat 17 Jan 2026 01:37:33 +0000
Manifest this update: Sat 17 Jan 2026 01:37:33 +0000
Manifest next update: Sat 24 Jan 2026 01:37:33 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 2x5jF3it8Y0WvdsC1UeW7whxxHNWPls0+q26QtbEH8U=)
2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: rMIYciZYzQpQ3or6eVOdlG8b1B7jrOe8q89C97qwQ6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 01:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Jan 17 01:37:33 2026 GMT
Not After : Jan 24 01:37:33 2026 GMT
Subject: CN=696ae7dd-5b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:e7:63:b1:09:72:cf:db:48:ff:d9:e8:e4:
da:b9:45:3f:16:f5:17:fa:db:5b:c4:b0:e6:7a:37:
25:b9:e0:d6:e9:0c:82:ef:85:33:db:44:d5:3b:5c:
3d:91:38:b9:3a:50:23:c6:8e:52:0a:2a:ff:4b:43:
74:64:30:a7:00:48:52:57:6f:7e:01:79:45:4c:4e:
f7:5f:53:b5:9c:2d:34:a1:69:08:1f:c6:60:5e:fa:
c4:c1:fd:cb:69:87:d9:c7:b9:ab:92:07:8f:62:95:
03:a8:22:a5:6c:d6:08:2d:05:fa:5a:e3:3e:20:bb:
6b:a2:44:52:63:ae:6a:2e:57:3d:0a:7a:4c:75:6b:
0e:fb:31:88:9d:b0:ac:ab:64:6e:95:0e:fa:f8:00:
f5:dd:46:76:e2:d9:f2:e9:0a:25:df:67:92:70:c9:
9a:42:06:54:df:32:23:c0:8f:3e:11:d6:45:9f:ff:
62:84:4e:75:a2:24:48:78:43:0c:8b:44:f0:26:b1:
d2:05:59:01:04:2e:6c:4e:9c:14:90:18:09:60:49:
58:79:cc:00:51:fc:00:28:e3:9f:bf:fe:d0:36:a5:
af:41:6e:1a:55:40:13:ae:1a:99:08:83:07:9f:7f:
a6:1b:53:9f:29:f4:fa:73:ff:09:59:26:19:7c:66:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:65:6D:71:31:16:B1:94:3A:D4:4A:CB:1E:B7:8A:43:44:A0:7F
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:f9:e2:7a:13:6c:cf:1e:11:52:a1:20:70:8d:ff:57:ee:
8e:3e:17:d7:82:fc:c5:97:4d:cf:a8:87:eb:a8:96:2c:05:65:
49:6a:6e:e9:f6:0a:81:91:16:c5:7d:a1:bb:85:67:01:ee:2a:
08:03:17:ef:eb:ce:d5:08:5c:82:3a:c9:a9:10:59:b2:53:df:
22:2a:93:23:ef:ec:94:40:8a:61:56:0b:1b:e7:b2:21:90:3b:
8f:35:43:b5:59:6a:2f:b6:51:76:d7:22:ba:23:36:04:41:5a:
70:ce:2f:4f:1f:12:be:cf:48:1e:ed:28:12:1e:5c:90:20:ec:
52:cd:0e:3e:17:ce:d9:d0:f0:75:fa:fb:22:4f:8f:71:3a:aa:
eb:f2:40:b8:3f:f1:4f:c9:d4:0a:95:d3:55:aa:77:62:15:cf:
9a:c8:05:49:dc:d0:fb:58:56:6a:e7:6e:7c:71:3f:47:c6:fb:
43:2a:49:44:be:bb:ef:17:5e:73:96:98:4e:2b:fa:a8:39:2a:
5e:0f:c2:80:bd:b4:a2:de:00:16:63:bc:65:c2:d4:f4:9b:1f:
8b:98:82:f5:39:35:75:26:03:fd:46:4e:ad:3c:15:38:21:4b:
06:03:05:63:cc:db:57:c0:0b:26:bd:de:48:df:0c:cd:d3:96:
1e:0e:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:27 2026 by rpki-client