This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier: lz/rxNiiEnvKytq7ypo1370MQ6tjrhPZOryH5aEtfiY=
Subject key identifier: E7:E4:AC:56:54:91:0E:BB:B9:88:F4:3E:6C:19:23:5B:04:65:F1:7E
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number: 01FD
Signing time: Fri 23 Jan 2026 01:43:33 +0000
Manifest this update: Fri 23 Jan 2026 01:43:33 +0000
Manifest next update: Fri 30 Jan 2026 01:43:33 +0000
Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: rgySTM1wPZRey6zf0iQ4zh2Zbyyfdkv3O1aqZsDaCPU=)
2: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: r663e8c/YBihaqHPO4x5AKeeA+woFX6BQIObtrJ2Pe8=)
3: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Validity
Not Before: Jan 23 01:43:33 2026 GMT
Not After : Jan 30 01:43:33 2026 GMT
Subject: CN=6972d245-49ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:14:94:49:42:e1:86:02:33:a7:6a:2c:14:
fa:41:4f:1a:96:44:d6:82:19:1c:d4:10:5f:1d:78:
df:23:14:d1:aa:30:a8:d1:69:95:b0:0c:30:83:86:
9b:ef:13:fe:e3:d4:8f:dc:fc:a3:d8:4d:84:81:30:
7c:e6:82:51:b8:99:c9:74:1d:44:61:69:06:7c:03:
d5:9e:bd:02:bc:49:23:95:2f:fe:6c:6a:6c:97:4b:
b5:ce:3f:58:b1:33:b8:69:fc:cd:8d:dd:ba:a6:09:
fc:fb:21:56:d9:59:03:65:77:44:1a:6e:8c:2d:03:
c4:26:84:5c:f0:e9:19:3b:58:b6:59:dd:77:e9:b3:
f4:b5:58:37:42:7f:ee:35:44:30:70:15:59:be:f2:
e9:c6:b4:ed:c1:85:d1:de:19:45:0a:07:46:5e:35:
86:34:99:57:b6:a4:5c:64:7d:0a:bb:c7:de:35:20:
e7:11:33:05:e3:cc:a6:89:38:b3:bc:15:4e:a6:01:
8a:ae:ff:00:b7:a5:27:2b:c3:52:3e:a5:0c:2e:98:
9a:b5:65:5e:0b:44:a2:3e:3b:7e:a8:be:ad:09:e0:
fe:dd:0a:76:56:0f:7e:6e:52:18:a2:c3:c6:02:ce:
d6:5d:7b:ee:85:08:aa:43:03:b7:15:ae:49:1d:f4:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:AC:56:54:91:0E:BB:B9:88:F4:3E:6C:19:23:5B:04:65:F1:7E
X509v3 Authority Key Identifier:
keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:bb:58:46:cf:21:fb:bc:26:09:cd:9d:a0:52:48:c6:99:
88:b8:d5:35:e9:48:66:4e:06:48:e2:eb:ff:fe:21:84:97:28:
07:12:83:4e:6b:ed:cb:65:03:29:61:31:e3:45:9e:fc:f6:bd:
45:c8:8a:73:67:10:c3:16:4e:2c:b5:a2:0d:d4:2b:0f:a7:09:
cd:f3:8b:5a:44:35:67:2f:26:d9:2f:3b:d6:2d:fc:33:79:60:
50:42:e4:67:a4:3e:7e:0a:78:0c:76:1b:f2:e9:2f:f0:41:35:
46:6d:76:63:fa:67:9b:74:7a:1d:a2:7a:66:a5:4f:15:d3:ff:
30:3e:f8:2f:fa:eb:91:e5:0c:e2:86:7a:cb:b7:c8:ec:24:af:
e0:25:9f:71:86:f5:78:8c:b3:da:1b:29:a3:e0:a2:e2:57:32:
93:f8:f8:b4:35:3a:bc:93:1f:a3:4e:80:fc:9b:c7:14:d3:c4:
7b:c4:b6:bb:fc:4a:98:ef:30:f5:61:a0:09:ca:cf:71:98:ab:
ea:7a:a4:40:f5:41:88:66:da:7d:06:46:71:85:0c:ca:e2:cf:
bf:0e:6f:bb:5f:c3:69:c3:42:5d:45:37:d0:61:2f:6e:15:ec:
53:74:85:69:db:de:5a:77:a2:27:bb:f8:ff:ff:de:fc:27:9d:
46:aa:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:13 2026 by rpki-client