This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier: AriPYAqPscAw/BQvtPIQFC7fgmvNm6PmPFFmdkG81EY=
Subject key identifier: 91:B7:F1:29:3E:05:1E:91:3B:7B:30:32:60:10:69:A8:4B:CE:20:64
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number: 0877
Signing time: Sat 24 Jan 2026 20:00:54 +0000
Manifest this update: Sat 24 Jan 2026 20:00:53 +0000
Manifest next update: Sat 31 Jan 2026 20:00:53 +0000
Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: lqN0HXIqQHySvtM5qPS3dbNya3Tx6gbfakMosbuuM0o=)
2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: JfWtXQ7v0q/Bf9DtelFrM/qXaMYsqrJqCz9UQNMv2Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Validity
Not Before: Jan 24 20:00:53 2026 GMT
Not After : Jan 31 20:00:53 2026 GMT
Subject: CN=697524f6-2788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:e9:62:71:50:bd:be:91:3c:db:7e:e2:f0:
94:6b:f1:3b:8a:a1:5d:48:e5:fb:93:36:27:4c:d1:
c0:94:02:50:96:b3:15:36:f6:16:3b:f4:e4:7a:be:
4b:f6:15:45:17:1e:4b:f2:9b:26:ec:df:b2:c2:83:
59:f6:a5:39:af:7c:2d:22:19:7e:b5:11:58:ff:74:
dd:d4:24:20:25:db:90:a1:89:83:78:dd:20:77:76:
bb:bf:0c:09:86:35:28:b6:33:ac:38:73:e3:ce:45:
10:2c:50:0a:e8:76:3b:f7:67:98:0c:50:cf:12:87:
98:00:8b:e7:14:e3:b7:5a:a6:37:50:53:7f:90:35:
26:f2:fe:37:47:2e:44:c6:63:00:8f:17:a3:d4:0d:
35:6a:b1:46:28:6a:15:ad:e4:1a:7f:b1:ee:ea:7e:
ad:96:d8:3f:8c:0e:2e:bd:62:0b:39:4c:92:5a:bd:
dd:71:b1:b9:9e:22:c0:0a:90:86:00:3c:3a:98:32:
4d:16:c3:87:d5:2e:18:f5:06:1a:44:bf:c8:4e:7c:
bf:bf:dd:57:01:7e:02:52:43:c6:b4:da:af:2f:bd:
eb:3d:c9:2e:4a:fe:94:68:2e:cf:e4:2d:1e:3f:8b:
98:b5:b7:41:c2:21:61:4d:e2:64:e8:fb:3f:d4:97:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:F1:29:3E:05:1E:91:3B:7B:30:32:60:10:69:A8:4B:CE:20:64
X509v3 Authority Key Identifier:
keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:3b:8b:7d:f8:a4:4d:e5:e6:58:d0:cf:62:2d:ce:b5:fe:
7c:7d:ce:12:b6:2c:64:e2:3a:83:6b:1c:b7:24:b5:2f:af:b5:
72:05:aa:04:eb:95:db:f2:33:7e:63:1c:05:bb:c4:f5:9b:37:
93:64:9b:22:4f:f5:d3:65:aa:d2:7c:62:48:88:66:76:55:a1:
a1:e5:15:99:b8:56:5b:17:48:79:2f:d9:18:e9:5f:be:d5:40:
7f:90:29:be:11:7d:6e:8f:94:b1:30:47:93:77:67:fa:cf:d6:
3e:cf:c0:45:63:77:23:f5:bf:25:3f:fb:ab:39:c2:f3:c9:fb:
20:09:be:f4:b0:1f:ce:a0:49:b3:d2:e4:91:1f:00:cc:97:b1:
d7:83:f8:44:5e:77:c7:bf:8a:56:7d:aa:e5:01:a5:9a:a3:32:
45:40:da:fb:34:4a:f1:8b:36:c2:c7:09:e0:f6:f8:70:16:8b:
a5:81:dd:3d:08:d8:76:41:79:23:8f:47:b8:f6:e4:10:37:96:
aa:ee:15:3b:9a:67:a6:9d:53:56:6a:cb:61:e7:b3:6f:3a:13:
7d:f6:5c:b3:de:56:07:18:6e:10:54:a4:17:5f:f9:3b:62:de:
eb:a9:df:15:9e:f4:de:cc:65:ea:c0:0d:0d:d2:87:5b:ff:8b:
79:7e:01:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5
MjQxMzY5ODEwHhcNMjYwMTI0MjAwMDUzWhcNMjYwMTMxMjAwMDUzWjAYMRYwFAYD
VQQDDA02OTc1MjRmNi0yNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArc3pYnFQvb6RPNt+4vCUa/E7iqFdSOX7kzYnTNHAlAJQlrMVNvYWO/Tker5L
9hVFFx5L8psm7N+ywoNZ9qU5r3wtIhl+tRFY/3Td1CQgJduQoYmDeN0gd3a7vwwJ
hjUotjOsOHPjzkUQLFAK6HY792eYDFDPEoeYAIvnFOO3WqY3UFN/kDUm8v43Ry5E
xmMAjxej1A01arFGKGoVreQaf7Hu6n6tltg/jA4uvWILOUySWr3dcbG5niLACpCG
ADw6mDJNFsOH1S4Y9QYaRL/ITny/v91XAX4CUkPGtNqvL73rPckuSv6UaC7P5C0e
P4uYtbdBwiFhTeJk6Ps/1JcIyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG38Sk+
BR6RO3swMmAQaahLziBkMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy
MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL
RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBU+DuLffikTeXmWNDPYi3Otf58fc4Stixk4jqDaxy3JLUvr7VyBaoE
65Xb8jN+YxwFu8T1mzeTZJsiT/XTZarSfGJIiGZ2VaGh5RWZuFZbF0h5L9kY6V++
1UB/kCm+EX1uj5SxMEeTd2f6z9Y+z8BFY3cj9b8lP/urOcLzyfsgCb70sB/OoEmz
0uSRHwDMl7HXg/hEXnfHv4pWfarlAaWaozJFQNr7NErxizbCxwng9vhwFoulgd09
CNh2QXkjj0e49uQQN5aq7hU7mmemnVNWasth57NvOhN99lyz3lYHGG4QVKQXX/k7
Yt7rqd8VnvTezGXqwA0N0odb/4t5fgEk
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:04 2026 by rpki-client