This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: vRiMRoP9DOYkn6Vwu+BkiG4tTfb8/dl89hn7SX0fY/E=
Subject key identifier: B4:65:C3:2D:5F:B9:D2:FB:18:00:1B:E3:81:34:94:2C:93:8A:87:0C
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 0566
Signing time: Sat 24 Jan 2026 22:39:53 +0000
Manifest this update: Sat 24 Jan 2026 22:39:53 +0000
Manifest next update: Sat 31 Jan 2026 22:39:53 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: i/+GHxakbMtEcMVkybWsnxcS1B3KPBaqCwMa+53avlo=)
2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: klkni3QfAoaIepGFi9OaOnNpBqMIdWLlo8tnHjdjSxo=)
3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: dmJCq+TfcdKcTzpkdOc2Oy+/xUlQZgSzYrK0BxujDDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Jan 24 22:39:53 2026 GMT
Not After : Jan 31 22:39:53 2026 GMT
Subject: CN=69754a39-34a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:9e:6d:fa:30:dd:7b:57:9f:76:6b:93:87:
ad:96:2d:68:b8:1e:4c:db:8d:4d:67:1d:00:e5:3d:
3c:0e:1e:d3:60:c0:fd:75:06:01:55:45:6e:f6:16:
ff:44:6d:7e:c5:8a:8f:f9:43:c3:1c:7b:95:79:e7:
cf:89:40:9a:5d:35:72:61:07:36:45:a0:1b:e5:59:
e7:1a:3f:ff:5f:33:b0:9b:1f:96:d8:9d:cd:80:69:
98:5a:1b:f2:4a:8b:51:f6:f8:22:68:42:30:48:0c:
f2:9b:a3:ce:08:0c:96:ec:6a:5b:6c:c0:0d:83:3c:
b1:b8:46:66:83:d6:a6:b8:91:9a:db:df:6e:44:6d:
ce:2c:5e:f8:05:a5:92:bf:27:de:ba:90:7f:d4:6b:
23:0c:a9:c3:76:76:b6:7b:78:67:57:b4:d8:71:8c:
46:91:16:67:54:8a:33:db:63:e3:35:43:55:bd:20:
93:6b:b1:96:ef:97:0c:71:e2:95:49:94:fa:1a:ca:
cc:89:a0:61:d3:bc:fc:1d:88:77:03:12:0d:13:17:
61:e2:0f:11:fd:1a:42:27:a1:f7:38:64:2e:3d:c2:
76:e1:d0:52:94:3c:80:71:57:60:af:d5:69:ba:7b:
3e:84:d2:47:40:0f:02:2d:fe:bd:90:95:ef:a0:74:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:C3:2D:5F:B9:D2:FB:18:00:1B:E3:81:34:94:2C:93:8A:87:0C
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:da:1c:3e:f4:79:47:a2:0a:a3:5d:27:73:e3:55:84:ee:85:
51:10:71:11:88:18:ce:d7:11:ad:85:7d:d9:22:c8:fe:f8:f8:
ec:2f:f8:3d:67:69:b9:2c:91:07:8b:4e:4e:3e:88:67:8d:ac:
0b:d9:a1:cf:df:03:12:dd:2a:e3:23:c3:57:96:0c:99:0d:24:
2a:68:6a:29:87:c1:83:e8:8f:f7:8b:7e:26:0c:d9:b1:81:0a:
c1:26:f8:6b:a3:4e:40:b6:bf:2b:f7:df:4e:8c:86:7a:a3:d3:
41:67:72:ac:f5:4a:38:e6:84:63:0f:a5:0f:f4:76:34:b2:e0:
34:70:a1:04:c2:d3:83:c5:02:58:88:48:09:7d:de:92:70:ae:
35:2d:25:03:f4:a1:5c:a7:62:ce:1d:15:c0:d1:bb:b1:45:5b:
34:05:25:e3:da:7c:9f:92:df:38:47:74:00:d9:2f:01:05:1a:
85:e9:2d:41:06:3e:d3:34:f4:9a:bd:50:c1:75:27:0c:7f:64:
d0:37:ce:6f:88:f4:3a:b1:29:c0:ac:61:70:ce:71:05:47:fd:
5b:db:e6:ad:4b:06:bb:08:61:72:91:7c:3a:9c:c6:d6:05:e0:
aa:68:49:aa:99:40:05:58:ee:d2:f7:0a:7d:fb:25:e5:b4:1d:
6c:40:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:49 2026 by rpki-client