This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier: ZMNN2gcKB0SJGx27X59DnEixfOEEZvWevqEsKVL3nV4=
Subject key identifier: 70:CC:F4:31:19:19:B3:D8:96:F9:89:87:4C:CA:B1:AD:A6:16:E1:8F
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number: 01E3
Signing time: Wed 21 Jan 2026 02:02:41 +0000
Manifest this update: Wed 21 Jan 2026 02:02:40 +0000
Manifest next update: Wed 28 Jan 2026 02:02:40 +0000
Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: 6+8So3rG7HEIxEoNLpnnwXfvsRCRoRTe0GgRZDCRwgE=)
2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=)
3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=)
4: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=)
5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: Jan 21 02:02:40 2026 GMT
Not After : Jan 28 02:02:40 2026 GMT
Subject: CN=697033c1-2af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:4a:68:c2:a2:4d:67:9d:a6:d7:20:4c:44:
5a:7c:35:ce:e6:82:c0:2d:f9:17:13:26:7f:6d:be:
72:d6:ed:6d:f2:d5:25:82:eb:c9:59:65:fa:8b:b3:
b6:21:84:21:ad:8f:4f:7d:0c:a3:e7:f0:c8:5a:a0:
a0:b1:b8:c3:cd:06:9c:4f:fe:54:a0:49:44:59:0e:
8d:fd:b2:69:67:c5:95:e3:9f:e8:5c:ef:a8:1e:07:
51:89:78:f1:43:36:fa:14:f3:8f:69:8d:7f:ab:27:
a2:32:ff:0d:35:68:77:27:3f:b4:81:80:4d:9c:b2:
68:27:4c:c7:d4:4e:d5:a1:89:2b:85:02:13:53:41:
ed:97:f7:f4:30:24:6e:ba:f4:97:7b:b9:2d:ed:d4:
9b:54:c5:30:e6:d5:eb:73:70:93:e0:14:c8:8f:b4:
f9:f9:27:f6:10:31:41:2e:a7:67:e8:34:7b:e9:64:
1d:ac:1b:0e:10:76:df:62:b8:00:7e:3c:cb:21:36:
b3:45:80:d1:1b:51:72:0e:a1:fa:57:9f:3d:46:fe:
70:0f:c7:5e:6e:a5:d1:d1:9c:ae:50:b1:76:f9:78:
2d:df:8e:e5:1c:80:cf:05:e2:41:79:6e:c7:09:0e:
63:53:69:14:16:c0:78:78:37:10:dc:d5:ca:83:24:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:F4:31:19:19:B3:D8:96:F9:89:87:4C:CA:B1:AD:A6:16:E1:8F
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:5d:0e:b3:32:49:13:4a:b1:88:a1:c3:20:54:c7:25:da:a6:
97:23:4e:a2:87:eb:d6:33:b8:9e:00:b1:65:82:08:82:ae:60:
2f:92:9f:13:d2:67:f6:58:87:20:6a:43:c0:37:46:f9:48:b2:
de:c0:d7:10:23:00:d0:72:30:9f:9c:5d:3c:29:66:3c:72:7b:
20:f9:56:44:ea:04:f7:ea:7d:85:5e:f9:e4:88:9d:cc:cd:cb:
93:fc:48:d6:49:31:c3:55:70:b0:bc:d8:34:d6:56:33:7e:38:
44:a2:c2:38:2e:79:a2:34:65:97:7c:bb:89:8e:70:18:58:8b:
79:cf:63:a5:db:f7:70:bf:66:5a:49:02:ad:95:90:6e:47:58:
78:ff:64:24:d0:8a:20:ab:6f:ca:0b:9d:fb:55:34:4c:dc:bd:
4b:60:e7:f2:57:00:cf:7f:9a:57:f1:07:9b:6c:0b:ce:17:d7:
cc:12:43:fa:85:48:88:6f:b1:1b:7c:29:fc:90:35:e3:24:81:
df:81:a9:f3:06:02:07:07:52:d4:ac:39:ee:68:74:32:f2:2b:
e6:33:b0:0a:a1:3d:a2:b9:e9:b0:4b:bc:1b:f0:8d:5a:cb:68:
6e:f3:1a:ee:74:9d:16:2e:31:5f:70:b7:27:ac:3d:5a:57:82:
22:80:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 02:37:43 2026 by rpki-client