This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier: GCuPQsAROvssVnQFaFgBpmG+CzviaXkhJYHPhHMQYes=
Subject key identifier: D0:E2:5F:B3:A3:C7:E3:E1:D7:A4:67:D4:0C:C1:FA:51:4E:5B:55:70
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 3129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number: 30BC
Signing time: Tue 20 Jan 2026 15:19:49 +0000
Manifest this update: Tue 20 Jan 2026 15:19:49 +0000
Manifest next update: Tue 27 Jan 2026 15:19:49 +0000
Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: Ht+OszNhRR6ixF+khe6EFyaNj3nO7K4lTVum81tJm+w=)
2: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=)
3: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=)
4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=)
5: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=)
6: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=)
7: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=)
8: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=)
9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=)
10: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=)
11: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=)
12: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=)
13: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=)
14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=)
15: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=)
16: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12585 (0x3129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Jan 20 15:19:49 2026 GMT
Not After : Jan 27 15:19:49 2026 GMT
Subject: CN=696f9d15-716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:94:21:de:4e:0c:03:9f:90:78:bb:aa:21:
6f:36:a2:44:4b:7b:86:be:94:7a:3d:ab:44:53:8e:
06:95:be:96:bb:a3:38:5b:38:f2:74:3c:67:0c:fc:
5f:50:75:20:ab:e0:79:25:3c:c3:1b:ae:57:93:45:
c6:b2:d0:e7:f6:b3:e4:27:51:fc:7d:14:9e:61:76:
71:cb:5d:61:44:77:5b:d8:0a:90:bd:aa:1e:cf:4b:
49:0e:58:e6:46:3a:e5:5d:1e:23:29:6c:1b:ef:ed:
44:73:87:ea:7d:37:7a:b9:14:66:96:d3:f0:1f:4f:
c5:80:ce:ec:77:38:d1:35:5f:c7:c5:d1:27:f8:dc:
b1:23:7c:63:9b:76:b2:a9:10:03:58:30:77:45:a6:
5c:77:9f:ef:57:b5:34:5f:3c:78:d3:53:2c:72:07:
fb:2f:f2:a2:be:88:a5:69:2b:0f:71:43:ee:25:d2:
f6:b0:a4:59:59:66:6f:13:30:5a:ef:b0:72:c8:ff:
e1:74:1b:3c:ac:06:7b:1f:01:f2:6a:46:d1:60:96:
0a:73:5d:20:41:da:3f:7b:38:35:06:e4:90:74:51:
b9:b0:87:4b:e9:14:80:b3:83:ab:89:c9:f6:76:c7:
05:f2:22:c9:73:bf:ba:e8:d5:28:08:8a:7c:85:10:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:5F:B3:A3:C7:E3:E1:D7:A4:67:D4:0C:C1:FA:51:4E:5B:55:70
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:07:2f:21:f1:1b:44:bf:b1:6c:fc:0f:28:02:fe:c4:f2:
30:5f:86:a7:0e:3e:82:9a:bd:1f:10:c5:71:0a:24:e6:38:74:
e8:99:38:48:61:52:16:e8:69:57:13:40:db:04:9a:1a:97:45:
d7:9d:ff:10:24:03:a3:b8:34:27:1d:39:de:df:c4:ef:2d:88:
21:fa:e5:52:46:d7:b5:92:16:80:c9:d5:7e:3c:b2:fd:3d:ac:
6c:bc:88:c3:f0:25:a3:ee:64:f5:9e:53:ab:d0:55:48:d8:c5:
29:30:d6:e0:a0:b4:de:0d:79:c7:dd:c0:33:03:b5:85:23:e5:
6f:cd:51:1c:1d:7d:f3:81:94:0f:77:75:ed:e0:8f:47:b6:be:
37:dd:ef:02:29:05:b0:e2:e9:19:63:88:c5:14:31:19:a4:8d:
aa:2a:18:ab:92:00:df:aa:ed:ca:37:85:da:1a:87:f3:cc:c4:
5d:e1:2e:80:38:3b:3f:cd:0a:48:32:d7:f4:da:ef:4a:0b:be:
84:3e:f7:57:01:2d:7d:72:18:f1:66:58:ae:58:d2:5d:f4:86:
04:8a:5d:04:eb:9c:99:06:f7:03:73:a4:bc:9f:21:75:13:16:
ab:9b:4a:15:2b:67:b8:d2:b5:8a:bb:21:b1:9e:2a:d1:b8:a9:
3b:ff:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:36:34 2026 by rpki-client