This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: KmV2RSAfVml5faR+jo1Kk9S+J5Mfr4EOr6VvM3V1TCk=
Subject key identifier: 99:2F:B6:60:47:D7:95:D6:A3:8F:78:91:A7:2F:43:F6:E6:CF:AC:8F
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0922
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 08C1
Signing time: Mon 26 Jan 2026 20:08:36 +0000
Manifest this update: Mon 26 Jan 2026 20:08:35 +0000
Manifest next update: Mon 02 Feb 2026 20:08:35 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: 2bh5g2KzcQYmp5MBb1ftIDqHLRjhClXKME3rrI7xUr4=)
2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 20:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jan 26 20:08:35 2026 GMT
Not After : Feb 2 20:08:35 2026 GMT
Subject: CN=6977c9c4-c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:26:c6:db:2a:f4:4a:5f:4c:70:c6:2b:a8:
b7:02:8d:59:10:45:6a:f2:dc:17:e8:61:50:9f:49:
5b:bb:3e:e8:ae:f8:dd:ed:7a:f2:76:5d:f5:f6:80:
e7:3a:3d:6c:44:2a:40:a1:72:a1:3e:1a:88:de:48:
33:3b:7b:e5:d8:37:29:fb:d1:33:b8:87:4a:ce:14:
40:16:c1:0e:8b:e5:2f:6c:1f:49:1e:ac:a0:05:0c:
23:5c:29:54:58:84:f2:f1:ae:cc:8d:18:b4:dd:c9:
bd:a8:44:eb:fe:ea:04:ab:c0:86:97:cd:f5:a2:f5:
a2:ec:b4:76:f6:5e:20:a7:b2:fe:91:70:57:3f:89:
dc:c4:99:78:c7:40:c3:65:87:8c:a9:e0:f8:19:ce:
80:99:1c:ff:13:28:bd:67:38:10:61:e8:ad:55:70:
b0:ec:73:05:2d:90:45:41:4a:8b:b2:b4:ae:6c:81:
00:6d:0a:71:0e:2d:01:ea:ea:5e:18:94:74:4c:b9:
86:96:f9:4c:47:68:98:97:a5:3c:c4:fe:58:17:ec:
4f:95:aa:5d:8a:ae:3a:fd:0d:b4:5f:a1:1a:b1:c2:
02:00:2d:4d:bf:07:8f:1a:1f:31:cd:40:f9:8a:59:
8a:00:09:f9:65:b8:bf:ff:74:b4:6d:21:22:ea:d7:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:B6:60:47:D7:95:D6:A3:8F:78:91:A7:2F:43:F6:E6:CF:AC:8F
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0d:e7:81:da:90:47:cc:82:e0:9a:20:4b:bd:e9:3f:78:e2:
e2:59:ab:20:0d:66:09:bc:28:9d:4e:d5:51:6c:b5:ac:09:7e:
cf:55:a7:89:bb:e9:02:ef:12:ad:f4:29:46:59:a7:55:59:77:
14:57:e6:6d:61:e5:7c:c3:b3:6b:01:94:f3:3a:e4:62:fa:dd:
9d:7d:07:c1:67:3b:b7:0c:d2:f6:17:31:05:32:ff:df:67:3d:
eb:a5:d3:17:33:c9:32:97:28:f1:8e:83:bf:cf:b6:b5:11:de:
8f:5d:00:ed:e0:ab:24:49:b9:32:d5:ed:ec:68:c0:c5:30:82:
bb:cf:5c:11:55:f8:88:46:fc:e4:3e:1a:20:e8:65:bc:2e:ea:
5e:93:da:24:29:99:84:2a:12:ce:d2:53:a6:35:e8:00:9e:0c:
c6:c8:b1:80:ff:96:f8:39:f6:ed:3b:f5:54:25:eb:a9:ba:99:
96:6d:87:cf:41:7a:2c:25:c4:7e:70:30:08:8b:d7:65:ac:f6:
f5:1d:52:57:80:62:56:9d:02:dc:01:7d:dc:78:61:a6:b0:7e:
8e:40:db:0d:6c:da:19:fe:f8:43:12:76:e1:d6:76:f1:93:90:
28:4f:36:9e:ef:54:67:27:f2:1c:ac:cb:ae:84:54:7b:1d:d2:
f4:8b:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:36:03 2026 by rpki-client