This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier: NvPn4hnSTbjoE45MOi4ayFVyykC9sZVD+NYQuBNHgro=
Subject key identifier: 79:9D:48:73:1C:E0:65:89:91:94:F4:9A:8A:95:17:EC:E2:BD:6C:1C
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 0632
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number: 0608
Signing time: Sat 24 Jan 2026 22:16:22 +0000
Manifest this update: Sat 24 Jan 2026 22:16:22 +0000
Manifest next update: Sat 31 Jan 2026 22:16:22 +0000
Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: QWi2ECmpxTPZ5wC20GKGa41ko+jRCpp/edTGYWTnmZ4=)
2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Jan 24 22:16:22 2026 GMT
Not After : Jan 31 22:16:22 2026 GMT
Subject: CN=697544b6-1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:62:f0:04:25:d2:7e:f1:97:ff:0f:cc:b9:
20:5f:ad:11:9a:4c:38:44:9b:d5:d8:1e:e1:8f:a4:
60:bb:ba:d6:6d:f6:cc:41:26:df:b6:bf:31:0d:bd:
ac:a3:81:23:b0:39:7f:75:df:98:14:5f:7d:20:24:
ae:16:ca:55:d9:05:20:5e:16:ea:d6:1e:99:d7:75:
ae:07:a0:eb:78:86:dd:a8:4c:31:26:28:22:84:b9:
4d:9c:50:8e:b6:e6:4c:c1:c8:f0:89:0b:2b:a1:4b:
4e:60:7b:8e:c7:ae:29:6d:2b:86:89:2a:3d:b2:4d:
c5:ed:81:2e:76:c6:11:6b:95:75:db:3b:72:13:9f:
33:cb:f0:a6:36:e3:fc:20:f5:93:08:45:f0:96:d9:
b4:26:b1:19:bf:73:86:29:69:ed:74:54:63:22:a9:
40:a6:aa:01:1c:37:c4:df:8c:76:1b:0d:33:87:86:
fd:30:ca:dd:17:12:a1:18:81:14:d5:30:9e:34:a6:
49:81:01:0f:af:0d:24:ea:de:07:2d:38:f2:49:1e:
2b:fe:01:3d:8b:46:81:66:f0:9d:51:4c:4d:5b:be:
f2:f0:fd:23:b2:9e:9a:b8:10:4c:8c:d6:3b:82:43:
85:a2:63:6f:f3:81:8b:a7:23:85:b8:4e:cd:2d:d2:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:48:73:1C:E0:65:89:91:94:F4:9A:8A:95:17:EC:E2:BD:6C:1C
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1c:71:1e:71:f2:e9:fc:43:80:43:67:04:29:b0:e6:fd:95:
7f:49:6f:2d:c7:dd:7f:a3:47:65:75:cc:b5:0c:f0:3b:68:81:
e1:5a:9c:15:55:94:90:71:1f:de:f1:a7:ab:d7:32:02:48:e6:
16:8b:cc:a1:32:da:31:d4:de:49:4b:1d:f1:22:28:77:91:5b:
6f:a4:b5:4d:ae:38:ad:e2:07:56:3f:0d:23:b8:9b:39:d9:cc:
6f:04:d9:12:1a:28:40:e2:60:05:16:22:6f:77:e9:f4:dd:7d:
9e:0b:44:a5:e7:3d:4a:4d:a6:f6:a1:ea:06:4d:8d:77:cd:a2:
5c:49:81:ef:72:55:c5:56:94:bc:16:51:e1:b0:a5:d2:3f:eb:
0c:40:67:db:ef:21:dd:97:91:55:ba:d2:2e:11:9d:af:38:9b:
55:20:b2:5a:d6:d7:b4:c8:1f:ea:ca:7b:93:47:d4:5b:16:2c:
7e:6f:89:43:7e:7f:09:4f:f8:65:65:7a:ac:13:7e:a4:01:b2:
66:d1:4a:06:49:59:25:b5:86:1b:62:d9:38:0f:13:22:c8:8c:
53:d3:c2:09:13:fd:f9:6b:da:81:9f:5c:bd:df:74:1b:82:8f:
e9:1b:a4:f9:ae:c6:f2:d7:2f:fa:fc:5e:fb:7c:a3:47:79:7d:
78:8f:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:34 2026 by rpki-client