This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json)
Hash identifier: WusFPMh8HafyZx9favCHsUwGvzfvfh9dlzUYwG6hwkQ=
Subject key identifier: 33:E1:B1:E8:CF:47:AA:EE:65:F1:62:25:13:0D:72:5D:C7:F0:2E:27
Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
Manifest number: 39
Signing time: Sat 17 Jan 2026 02:22:19 +0000
Manifest this update: Sat 17 Jan 2026 02:22:19 +0000
Manifest next update: Sat 24 Jan 2026 02:22:19 +0000
Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: i1bI83GIlU2nBOshUIpzUZOZx2tVWFuT2CAim5dusQg=)
2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: juPGvBgA6sd3e+25RSGNC1Y9ZQiQHWaS+pRIRJtHwEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 02:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Validity
Not Before: Jan 17 02:22:19 2026 GMT
Not After : Jan 24 02:22:19 2026 GMT
Subject: CN=696af25b-bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:bb:3e:53:7f:5c:ff:50:b1:8d:71:60:e7:
c8:3a:4d:db:f2:12:10:21:02:b1:c1:4c:fd:2a:c9:
db:69:32:e9:b8:aa:8c:92:e7:22:1e:91:c5:13:d4:
99:a8:c3:a6:8c:3f:c5:cd:d2:01:22:4e:22:f5:91:
db:81:e7:cc:82:1a:45:f7:6e:de:ab:54:bc:aa:3f:
e2:ff:a9:80:6e:c4:8c:1c:a4:d4:3d:b4:40:13:4d:
a2:60:53:74:b3:df:da:84:68:05:13:25:a9:85:aa:
47:8a:66:36:f9:f3:1a:71:37:63:1e:04:6e:61:ca:
86:c3:eb:b2:15:ec:d3:31:8e:78:9f:2a:13:7c:e1:
67:53:6c:ef:e2:67:80:b9:2b:30:f8:28:8f:5b:2a:
3c:da:cb:5b:c1:34:a0:9d:de:c2:cb:de:c7:a3:9c:
08:d0:6c:77:c4:1e:c4:01:2f:11:f7:aa:11:27:89:
87:46:fc:2c:70:be:f9:47:53:34:93:84:31:8f:a5:
16:39:1c:e7:ed:8e:52:c0:d6:a4:cb:42:f8:13:e6:
ca:e1:7f:6e:4b:42:35:8f:da:4a:37:ed:6e:63:b0:
a2:f6:19:85:00:b8:7b:68:5f:c3:27:66:be:eb:65:
18:ae:f2:6b:3b:80:e3:cb:ac:4b:27:80:4d:31:65:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:B1:E8:CF:47:AA:EE:65:F1:62:25:13:0D:72:5D:C7:F0:2E:27
X509v3 Authority Key Identifier:
keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:10:67:78:fa:3c:55:d5:ae:3b:d3:5c:8f:5c:05:ef:cc:bb:
b2:0b:82:90:5b:17:5f:06:11:b1:c9:97:7b:8b:e5:ca:a9:30:
45:db:51:eb:6f:6f:60:c9:78:51:7a:e2:ba:46:54:ac:c8:83:
e0:dc:a0:1f:d8:c1:a5:26:ff:eb:10:b6:83:81:d6:2f:d5:04:
3b:94:a5:5f:d6:ff:78:e7:87:34:63:51:5f:a4:2c:11:ef:39:
dc:a1:6d:cc:ec:e0:77:02:d4:36:a5:21:d5:b2:00:a2:3b:df:
01:54:a4:11:bb:fb:ec:f9:cf:06:77:d8:d0:37:48:62:59:1d:
be:98:81:64:a6:d6:24:c8:ae:41:d8:06:31:95:13:dc:ba:b1:
89:92:5f:ac:33:9f:82:73:4d:13:4b:fc:00:a9:2c:c0:0b:88:
2e:1a:de:c2:9e:46:a2:5a:20:59:50:5c:73:10:45:01:bc:a0:
4f:1b:ae:e6:87:f8:37:65:67:ef:58:ce:12:b3:49:9b:8a:ae:
f9:c0:ce:92:5a:a2:9a:4b:b3:4d:4e:3b:ec:b2:fe:d4:8a:17:
67:e8:ab:a3:66:99:a7:53:e7:eb:96:9b:5b:fe:af:90:dd:52:
4a:77:aa:43:ea:4b:cb:b1:4a:15:fd:2e:07:e3:5a:15:01:68:
3c:74:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:14 2026 by rpki-client