This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier: dEpY344zit8YB669RmRzzGPNJwWL4NsIOboPPdqRLAo=
Subject key identifier: 27:9C:82:3D:31:B6:0E:0A:B6:1A:ED:35:B0:2F:07:D8:94:F8:D6:A8
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 107E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number: 1064
Signing time: Sat 24 Jan 2026 17:06:52 +0000
Manifest this update: Sat 24 Jan 2026 17:06:52 +0000
Manifest next update: Sat 31 Jan 2026 17:06:52 +0000
Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: 8J9HkbudgxIyGoX13CNJOoyCdWGj9pEeSpCS8oUR230=)
2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: ecuT0IGX2EMVTv9PMGbYKsjJSoNnc8HRgFbpWMYTJo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4222 (0x107e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: Jan 24 17:06:52 2026 GMT
Not After : Jan 31 17:06:52 2026 GMT
Subject: CN=6974fc2c-f93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:7b:c6:c2:a2:e1:4c:e9:cd:ff:86:25:13:
d0:d1:8a:4b:7b:8b:ed:69:35:bf:bc:47:88:45:80:
1f:83:97:7c:cf:af:76:72:c3:f2:e6:52:bb:02:69:
48:10:66:08:08:5e:37:e8:a7:69:9f:53:cf:b4:a3:
fe:f7:ca:85:d7:f1:08:0b:d3:27:90:66:87:e1:10:
9e:b7:3c:fe:32:79:1a:49:cd:e2:a0:39:bc:01:89:
0f:8d:00:c3:23:97:84:05:64:44:a6:c7:a8:db:29:
d7:e7:e3:4d:7d:60:cd:e8:18:16:2f:ea:02:63:ec:
21:f4:88:fd:ba:bd:3a:7f:19:ac:0f:71:09:9a:ba:
3d:69:cb:38:c6:55:5b:42:2c:37:dd:41:39:c0:94:
3d:8b:70:4d:8f:3d:2a:e4:19:24:87:77:17:10:df:
4a:c6:d6:07:83:e2:c1:f1:53:ff:a2:c7:ae:a1:b4:
88:8b:3a:7e:74:03:5d:16:67:19:3f:77:4f:54:4b:
66:db:9d:5b:b2:1b:f0:e9:e4:50:30:36:bd:7b:5f:
be:6a:96:ff:3d:17:0a:34:8f:57:44:59:b0:4d:3d:
53:ad:23:9f:5c:a3:4e:40:d8:71:4d:ea:e9:54:17:
fe:80:e3:79:29:41:16:86:20:ea:49:ba:98:0f:a9:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:82:3D:31:B6:0E:0A:B6:1A:ED:35:B0:2F:07:D8:94:F8:D6:A8
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:26:fb:a6:42:fd:b8:ba:df:ff:0d:89:46:b2:94:54:be:63:
6f:1b:a6:f2:20:4d:54:8e:39:01:d1:2e:77:b9:69:df:ee:bc:
0e:19:5b:08:6b:95:9c:47:13:80:ff:06:20:29:9d:76:83:53:
80:f5:e8:23:37:fd:98:95:cb:98:14:2f:a5:7a:9a:47:4f:4c:
55:64:06:db:82:4a:a1:4f:eb:4f:97:18:04:4b:fa:33:86:97:
c6:98:cd:c4:c6:ea:2d:c1:ad:75:58:15:68:ad:13:ae:d8:47:
1c:43:e4:8c:88:c6:f9:be:61:1e:21:d7:fb:2a:74:34:c4:93:
c1:35:44:8c:56:35:86:76:cc:60:43:e6:73:b2:37:44:5f:8f:
bb:bf:a5:1a:f3:00:88:77:9e:6d:c1:bf:cc:5f:de:a4:59:22:
0b:f7:c6:d6:31:d0:2b:b0:42:22:42:8a:44:60:d1:15:36:7f:
22:d5:5e:c3:e1:f8:0d:b9:09:31:cb:33:7f:ed:af:d3:3a:cd:
77:d3:e1:bb:02:17:57:aa:91:63:e4:80:85:41:89:c0:8b:de:
ae:be:b8:ad:2f:20:12:f6:02:84:3e:f5:e5:eb:34:32:c3:42:
ef:23:73:c2:5b:f1:d4:26:2b:55:55:94:d1:e8:04:0e:26:e0:
98:a0:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:57 2026 by rpki-client