This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier: +OqPCEkswPsLmE5SKN6qRBCDlgBilMX+WAYveNDHA1c=
Subject key identifier: 59:B5:B4:07:1F:5C:21:C0:4F:5D:4F:0E:FF:45:72:24:B5:31:DD:BF
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial: 1BA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number: 1BA2
Signing time: Sat 24 Jan 2026 16:02:36 +0000
Manifest this update: Sat 24 Jan 2026 16:02:35 +0000
Manifest next update: Sat 31 Jan 2026 16:02:35 +0000
Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: xV3iRmvzClLWPOo/qCir4AxwRQYSJ2sHyzTT5QkOPz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7075 (0x1ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Validity
Not Before: Jan 24 16:02:35 2026 GMT
Not After : Jan 31 16:02:35 2026 GMT
Subject: CN=6974ed1c-8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:e5:31:87:68:3d:47:8b:87:27:4d:4d:20:
af:ca:c6:26:18:67:36:b6:19:37:9d:71:f8:01:4e:
1b:a1:d2:d8:b5:6a:2d:2a:bb:ca:52:b2:3f:87:e8:
60:d3:1c:a4:ff:2e:f6:44:e4:d3:6f:0f:e0:0f:cf:
83:94:00:25:ce:da:b2:49:6c:1f:1b:4d:8b:90:10:
28:59:83:82:54:1e:55:17:f0:97:d7:33:40:6d:0c:
bc:8e:c4:49:b2:19:17:07:fa:28:f1:25:9a:e5:62:
9d:33:62:32:6f:42:da:fc:d7:86:89:09:36:e1:c0:
bb:4b:4c:6b:de:83:d6:86:e2:6d:eb:05:3d:5e:91:
e1:c5:ba:35:62:27:f7:5e:21:8c:2e:fe:a9:bf:5d:
00:a7:d7:eb:43:b8:c1:ed:f2:a6:ec:36:d3:83:03:
d6:de:07:a8:0d:30:12:e1:d0:4f:94:38:6d:58:c9:
ee:e3:2c:74:38:3b:91:a6:51:5b:0a:87:a4:18:1f:
c0:2d:f1:38:d1:12:2c:63:15:cc:83:7a:93:f0:5a:
98:f7:73:27:89:c6:52:3e:ec:39:6f:05:3f:a5:ee:
ea:92:e5:70:37:e9:08:0e:05:fd:b1:f0:58:c4:7e:
99:c5:6b:09:ad:34:78:35:65:83:1c:46:4e:25:5a:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:B4:07:1F:5C:21:C0:4F:5D:4F:0E:FF:45:72:24:B5:31:DD:BF
X509v3 Authority Key Identifier:
keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:35:74:a5:34:fc:93:2d:6a:cb:1e:5d:78:8c:22:eb:b2:
f4:a2:ab:1e:ef:46:b8:ca:00:f0:a4:5c:a4:eb:83:5f:d5:df:
51:2c:4d:7f:93:3f:eb:d2:f2:9f:41:c0:26:83:52:b4:38:4b:
d9:36:3a:1c:d8:8b:98:53:3d:65:e4:a6:f0:59:51:23:4b:1e:
52:da:55:44:f1:ca:10:4a:68:84:f1:49:e2:4d:ba:94:3b:2d:
91:73:df:6e:6f:5a:66:78:e9:1b:e7:e7:e7:a2:42:cf:9e:c3:
ca:02:c5:e8:61:7b:1c:e8:36:d7:1c:a1:5d:36:8a:12:c7:f0:
51:c5:dd:e6:a6:4d:5a:5b:a8:6e:0a:ca:22:20:8f:f6:f7:a7:
65:ae:3f:6b:4e:7c:8b:29:10:18:72:b1:0f:b2:ee:b4:bd:ae:
0c:bd:06:d6:fd:0e:47:a2:99:23:15:f9:72:51:7f:37:fb:a2:
a9:f0:06:1f:0b:e3:7d:92:c8:52:ee:ad:34:23:04:14:62:16:
86:a9:6b:df:38:59:9c:02:eb:4c:0d:d9:c3:f2:8d:2b:bc:11:
08:7d:76:97:d7:5e:0a:04:28:ad:7b:16:c0:3d:6d:86:57:9e:
63:15:8e:76:c6:52:20:45:2d:4c:88:fc:d3:92:e5:d0:c8:ba:
ff:63:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:27:26 2026 by rpki-client