This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json)
Hash identifier: jxzgY8nA4qKNm0BFFZuy3d9m92Z8FkO+VIKiAORPokU=
Subject key identifier: 43:B5:30:1C:A2:E3:CE:1D:5E:49:75:F9:EA:37:7A:B5:A3:47:7D:3C
Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
Manifest number: 86
Signing time: Sun 25 Jan 2026 05:48:13 +0000
Manifest this update: Sun 25 Jan 2026 05:48:12 +0000
Manifest next update: Sun 01 Feb 2026 05:48:12 +0000
Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: KgPJswFrIC/qp5ESzTypPhVlIk9peJcalKFwMaQVls4=)
2: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=)
3: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: fjPDJiKju03AA8lU0D2QmcVCCtb0KyFe0fVSVd+RtbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
Validity
Not Before: Jan 25 05:48:12 2026 GMT
Not After : Feb 1 05:48:12 2026 GMT
Subject: CN=6975ae9d-d07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:ba:1b:f4:04:b2:b7:e6:48:e4:32:5e:9d:
83:52:03:50:74:f7:01:eb:78:f7:25:8a:9a:ef:74:
a0:db:48:6d:32:ec:10:24:e9:5a:4c:5d:19:49:f2:
42:69:48:d1:22:fe:7b:1e:99:4d:66:fd:6b:64:97:
8c:f5:a7:53:85:37:76:2e:e3:e7:c3:8c:4a:8c:40:
71:2f:58:e5:e7:f0:d0:a7:9f:18:cb:c2:08:6e:09:
3b:a9:9f:af:68:8e:56:a6:af:df:b2:05:b4:a7:8f:
02:a6:38:12:e4:01:07:98:05:a0:1a:f6:77:45:63:
9d:95:50:ff:61:b6:c5:9f:e8:15:9e:b4:df:01:1a:
f5:73:4e:a2:cd:c4:83:dc:a6:98:eb:3b:e5:75:6d:
88:de:b1:e4:59:73:5b:a8:44:04:6a:f4:40:2f:62:
a6:09:76:78:19:a0:98:6c:ba:63:63:ba:70:34:00:
60:25:ca:d7:27:47:4f:34:f5:b9:eb:12:04:52:8e:
c3:fd:88:5a:0d:4b:93:c1:2c:a9:ff:48:da:2b:a2:
03:b9:81:ef:1c:00:88:1a:b9:c8:ee:36:a3:8a:8f:
d5:ec:2a:4b:8d:cb:b8:af:5e:bb:7c:88:92:c5:f4:
0b:4a:c1:24:80:08:00:f7:02:64:7b:bc:1b:53:a3:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B5:30:1C:A2:E3:CE:1D:5E:49:75:F9:EA:37:7A:B5:A3:47:7D:3C
X509v3 Authority Key Identifier:
keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:58:39:c3:13:e3:d8:71:f2:df:0f:ac:98:93:b6:22:e4:
6a:98:d5:2d:80:24:9a:95:e3:e1:29:24:5c:5b:cf:03:f2:c4:
e3:df:ba:5c:bc:2c:9b:c5:2b:33:b5:3b:3c:5b:f1:a7:06:77:
82:38:3e:c7:fe:33:e0:48:c2:6e:a1:76:09:ec:c0:ba:64:ba:
44:9c:2c:2a:ca:d2:3e:ed:5f:fb:40:6f:ef:a4:4c:f9:8b:8b:
c5:58:42:25:fc:7e:81:82:84:f9:77:ad:75:7c:35:d6:a9:98:
1f:dc:05:fb:6b:7b:72:f6:78:a7:65:b6:af:d2:32:d0:0b:5a:
f2:d0:64:e1:80:98:23:7a:43:1c:4a:c4:f5:33:e4:cf:64:19:
92:02:f4:67:9f:b3:dd:53:ab:23:e0:43:0a:8d:20:ba:ab:b1:
4c:8e:99:f3:8e:6c:22:f7:dc:fc:2a:0f:03:36:57:ab:11:3c:
7a:b2:5c:f0:76:be:77:b2:c5:3f:07:5f:6b:3a:d9:1e:7c:87:
9c:ff:fc:58:b6:28:eb:0e:cb:3a:b7:a0:04:97:3b:1c:78:d1:
86:af:73:7c:b7:48:a6:77:26:37:6a:8c:7f:f9:47:61:33:7f:
b3:93:44:dc:0a:70:44:e4:8b:da:b5:29:8c:65:ff:16:fa:f5:
1d:33:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:16 2026 by rpki-client