This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json)
Hash identifier: VJ2H+e01x8aBa8Ze1lOCa76hbgDXusTzT+Gnq5GgOJA=
Subject key identifier: D6:8F:0E:36:D3:80:85:43:ED:22:FF:81:AA:72:7F:FF:F5:53:F9:F9
Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
Manifest number: 24
Signing time: Sat 17 Jan 2026 06:43:50 +0000
Manifest this update: Sat 17 Jan 2026 06:43:49 +0000
Manifest next update: Sat 24 Jan 2026 06:43:49 +0000
Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: 3zbSN13tJxTLDthKwYXyr/d50E9bT3wfkYABcKQ5qnA=)
2: AF2E6AE2C03B11F09EE7012FC4F9AE02.roa (hash: 7K3qRA/N7rz2jfT0m6Hcbsd9SkfThsmVfXsBZYNY3Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Validity
Not Before: Jan 17 06:43:49 2026 GMT
Not After : Jan 24 06:43:49 2026 GMT
Subject: CN=696b2fa6-ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:d9:0c:03:2b:cf:db:bb:10:c4:f1:b7:51:
c5:2f:14:14:34:62:f0:00:ec:94:b5:c0:b7:9b:44:
47:80:85:0c:32:cc:49:30:7e:11:fc:ec:0d:ab:91:
6c:6e:fb:f9:44:7f:d2:ec:11:b9:4d:b0:24:ef:6a:
83:02:87:70:83:00:b2:2e:fe:d0:26:dd:58:97:55:
65:32:39:f4:8b:75:a0:69:c6:aa:2a:78:26:3e:d7:
2f:2b:ab:5e:31:a0:1f:30:e2:36:b5:0d:e8:90:6f:
89:29:b5:dc:ee:7e:b1:09:4a:f9:09:09:5f:81:6b:
59:2c:ff:03:e8:e8:5e:38:37:23:94:59:5e:41:51:
da:c3:4b:cf:04:87:a8:fd:4a:5c:fa:ae:40:85:47:
a9:99:16:2d:2e:01:57:8f:7e:58:f5:98:10:2e:5e:
89:c7:a5:e7:f4:b5:07:70:6e:99:7f:6e:5f:07:f5:
9b:71:e7:97:55:a6:54:f7:f8:c8:9f:cb:f0:d5:65:
79:d3:5d:8a:c9:c2:86:3f:29:37:51:43:d2:6a:b6:
83:f6:6b:9c:fe:90:d7:ae:d2:9b:f9:a1:f9:f0:ca:
d4:e8:61:58:ca:16:29:86:9e:ce:66:22:b5:dd:95:
77:73:47:88:be:ee:a6:34:f6:0b:3e:b5:df:9e:a4:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:0E:36:D3:80:85:43:ED:22:FF:81:AA:72:7F:FF:F5:53:F9:F9
X509v3 Authority Key Identifier:
keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:f3:41:56:3d:76:10:6d:5c:f5:76:4a:d0:c2:22:c4:73:
0b:b8:07:31:d1:c0:78:36:8f:40:9a:d2:a3:9b:a8:e0:0b:d8:
51:7e:f3:c0:ad:33:59:5e:ee:ae:33:55:69:a8:18:d0:9d:c0:
e2:85:7f:2b:7c:97:e2:2c:13:75:dd:8b:b4:b2:bb:27:65:b0:
17:30:33:ed:bb:48:03:96:f4:af:96:87:9e:d4:cc:15:6d:7b:
7e:ee:01:fb:2c:e7:8c:f3:af:46:0f:49:29:b9:21:24:e8:58:
36:40:b0:e2:cb:54:cb:b7:a0:a3:d2:ce:52:c1:2e:8e:9d:5d:
cc:78:04:56:d8:fa:31:c0:88:b5:9f:32:e9:bc:f9:e4:e8:54:
89:40:cb:a5:8a:99:b1:ba:46:63:8c:b0:d9:b4:b3:49:de:d1:
9d:34:c5:d9:56:15:40:d6:3d:1f:13:50:ed:fe:af:8b:07:5e:
19:b2:bf:5e:ca:55:45:ca:78:17:2d:78:15:38:b8:73:2c:08:
54:24:20:59:01:1b:ca:4e:de:c5:ef:d4:30:0e:7b:f6:b6:c3:
f5:4b:de:31:a1:fa:01:13:0c:fc:59:e3:1a:cd:71:0e:bf:3d:
15:f6:6c:b9:48:0c:98:d9:62:c0:64:a3:21:ae:1f:cd:51:b2:
cf:05:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:52 2026 by rpki-client