This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier: JYRjoO5nGjBvrcUU/PG43/P9JOv2FrdQUroEr/fEhUw=
Subject key identifier: 9C:68:02:AF:78:58:B5:1A:B0:D6:2E:DA:F8:AB:01:14:93:84:6B:EF
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number: 3A
Signing time: Sun 25 Jan 2026 06:32:28 +0000
Manifest this update: Sun 25 Jan 2026 06:32:28 +0000
Manifest next update: Sun 01 Feb 2026 06:32:28 +0000
Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: DMfmVpZTa+O+wvSLFjsZ8eXZ9hedWO1qAMcb4pBPUhQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Validity
Not Before: Jan 25 06:32:28 2026 GMT
Not After : Feb 1 06:32:28 2026 GMT
Subject: CN=6975b8fc-3e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:4e:9f:dc:3b:78:18:52:87:69:07:61:3c:
7d:da:dd:ff:f5:6d:31:aa:68:f2:67:fc:de:94:24:
79:4d:79:94:d4:44:f1:26:37:23:b2:4f:d4:54:87:
98:02:3b:0c:25:73:33:52:2e:5d:7e:1b:5a:85:3c:
08:97:5b:82:c1:cd:61:55:4b:ca:0e:e9:7d:6a:67:
19:b8:05:14:6e:0c:49:77:03:59:ce:6b:cb:46:6e:
b1:97:a9:56:90:f8:e9:6e:a9:59:66:80:29:41:36:
7e:ce:8b:72:0e:27:61:e0:0c:e0:a4:64:5d:e0:1f:
eb:98:c8:f3:f1:92:ff:46:41:c5:ce:78:48:13:55:
43:12:33:da:1d:c9:c0:90:a0:b5:f2:c8:8c:74:f5:
45:d1:74:c4:02:68:e2:49:db:f1:74:8e:20:1a:17:
80:4c:cd:ea:69:94:c8:3b:e6:eb:48:a3:ba:ba:d0:
9b:a3:95:51:c9:2b:10:be:3c:7a:b2:0d:f1:d4:ad:
02:4d:f0:c0:12:19:b0:28:5a:f0:51:d3:70:cc:c3:
21:e5:fc:28:6f:5c:1b:43:39:ea:1a:e7:79:cf:f0:
3b:3e:a1:3d:81:73:10:80:c1:e5:55:f6:10:06:25:
89:d9:a4:93:87:b8:5d:56:c3:f5:e9:9d:f3:b3:b4:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:02:AF:78:58:B5:1A:B0:D6:2E:DA:F8:AB:01:14:93:84:6B:EF
X509v3 Authority Key Identifier:
keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:81:10:d9:d9:f8:0e:ca:9e:af:92:bd:58:ae:14:68:fe:69:
43:24:45:bb:8d:67:c3:96:61:1e:54:29:c5:19:3c:70:97:fd:
66:a0:90:41:5e:0f:00:99:d2:e1:4e:b0:27:bd:3d:ae:44:08:
2a:d1:6b:26:a0:ca:c4:59:b3:cd:16:b1:9e:96:04:b2:8e:e3:
c7:8b:e6:d0:e5:a7:c3:ae:2a:f0:bc:0c:c3:c8:18:5d:1e:1e:
ce:c8:bc:73:99:76:c1:5f:91:1b:9c:79:f0:12:5e:3d:0c:ef:
11:32:0d:46:a2:86:2d:48:c3:fc:68:a9:ba:39:29:fa:1c:b6:
66:d7:f4:3e:c7:50:49:e3:51:26:9f:43:1d:c1:12:e7:60:64:
c2:81:76:96:37:36:39:a2:85:6e:eb:2b:54:aa:8d:40:cc:cc:
28:4e:46:a2:00:48:9a:26:b7:15:89:56:7c:2b:7d:50:35:29:
30:8b:51:59:5f:3c:72:8b:94:fb:d9:13:65:2d:d0:d6:4c:e8:
b5:bc:89:1e:31:dd:a2:84:dd:76:f2:8e:b9:43:91:92:93:53:
3f:4f:9e:14:40:18:f6:a5:83:17:d0:c7:62:0f:3b:42:85:c5:
6c:2e:85:fc:ef:bf:49:d7:8f:67:2e:46:a6:65:c0:68:4f:d5:
93:18:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:42:44 2026 by rpki-client