This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: pTcF9BfQ//Gw1RDXvYo/MnGxT9Aiay4kRtxcaIx/jkk=
Subject key identifier: EA:8F:FF:94:C7:25:26:AF:47:69:05:39:F0:38:A1:35:52:E5:9C:5F
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: 017D
Signing time: Tue 27 Jan 2026 03:03:19 +0000
Manifest this update: Tue 27 Jan 2026 03:03:18 +0000
Manifest next update: Tue 03 Feb 2026 03:03:18 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: NePzDjX87Jfh1IyZGwZ2WAhmgLWmyaTdzlernN9mvUw=)
2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=)
3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 03:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Jan 27 03:03:18 2026 GMT
Not After : Feb 3 03:03:18 2026 GMT
Subject: CN=69782af7-7096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:d7:58:b3:3d:69:16:d1:7c:6e:66:b1:24:
45:45:ea:bb:33:9b:24:aa:21:93:6e:23:77:15:a3:
72:88:0c:0a:17:ec:65:39:97:49:50:b8:a7:59:db:
ca:5c:51:b5:38:e0:b8:90:ae:ac:85:80:8d:e8:a5:
6f:74:78:bd:f0:e4:c1:66:fb:9c:49:a2:fb:52:95:
50:8d:58:8c:9e:10:0f:83:49:d1:43:72:77:35:da:
1a:56:80:a1:e6:be:3d:c4:9e:5a:13:61:27:58:dd:
8c:56:e8:bc:d3:d5:29:01:74:0c:bf:d2:86:44:48:
af:f6:43:a9:20:73:c7:83:00:d4:e1:a4:10:e3:f1:
13:35:7f:5d:03:79:0a:8f:32:48:99:17:4f:3d:22:
ae:dc:d9:94:f5:4e:f5:a2:ae:dd:89:06:68:51:85:
de:6a:2c:ad:c6:91:1b:8b:fc:09:f1:4f:38:11:9c:
f0:93:88:1e:d7:4e:f9:9f:5a:76:14:03:a4:80:0e:
66:2b:ab:10:4e:94:95:3d:c1:54:15:07:17:56:54:
5c:d4:16:f6:7d:63:45:a5:d3:8d:1a:b1:9c:77:60:
9a:84:55:41:fd:c0:09:5e:6b:d9:c5:95:e3:a1:6b:
b9:bc:c2:d4:f2:04:38:ef:95:14:7c:62:88:fd:30:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:FF:94:C7:25:26:AF:47:69:05:39:F0:38:A1:35:52:E5:9C:5F
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:58:2c:a1:65:1e:10:68:be:d9:ee:cd:a2:86:6c:c6:ba:
4e:c6:10:f6:af:c7:2a:fb:36:3c:fc:ae:2a:09:2d:ea:b0:fd:
3d:b8:d7:80:41:d0:a8:45:83:12:fa:84:7a:ff:7c:af:fd:62:
f9:31:58:fb:d1:a9:1b:fd:7c:41:4f:d2:95:d6:6a:5c:d6:e1:
fa:00:f7:3b:2e:27:50:85:3a:bc:0e:6b:2c:d3:ed:ec:d1:90:
f4:70:1f:f7:56:dc:ca:9f:b5:b1:e6:e1:a5:0a:db:b3:d1:d6:
e8:2e:9f:f5:18:7f:27:69:2c:29:49:dc:70:fb:61:a6:c8:2a:
b6:40:aa:41:f2:e1:c1:a5:b6:ab:7e:47:2f:fa:c3:94:41:9c:
66:db:07:d1:bf:53:ec:23:d7:bc:10:e4:11:3a:e0:98:a2:66:
6b:cc:9f:f5:40:1a:e9:0d:d3:c5:27:7a:63:a4:7d:94:a6:8a:
ef:e8:77:87:06:2f:08:ee:d5:43:c9:23:ec:92:33:06:37:49:
23:89:f2:f8:95:5a:b6:fb:0f:a5:65:48:7a:c5:ee:8e:ac:c3:
fd:1b:46:86:ce:64:f7:14:01:9c:7b:e2:a2:ad:e4:73:9d:9d:
f4:26:c8:01:69:b9:e0:51:74:c3:9f:3f:6d:61:b1:09:79:28:
83:16:f3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:51 2026 by rpki-client