This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: hbbA8OHp7tXr1U1tqSYx7j1z07OqNjfuJL06ncZWGEY=
Subject key identifier: 3B:35:19:C8:6A:1D:25:4C:EB:D2:76:7B:EA:61:60:B6:60:C5:57:AF
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 1931
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 191B
Signing time: Sat 24 Jan 2026 16:13:24 +0000
Manifest this update: Sat 24 Jan 2026 16:13:23 +0000
Manifest next update: Sat 31 Jan 2026 16:13:23 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: iPkgzp0M7eCZ0DjpNM0XsxRkZ2sxFnSmYy+Zsc9vZGU=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6449 (0x1931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Jan 24 16:13:23 2026 GMT
Not After : Jan 31 16:13:23 2026 GMT
Subject: CN=6974efa4-3ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:c9:a5:c5:be:80:a1:84:67:cd:db:dc:46:
48:e4:a4:48:0e:f7:89:66:fa:b7:ae:a5:29:32:5d:
97:73:5e:6f:ff:09:7a:cc:56:1e:45:75:fe:bd:11:
6c:93:22:78:c1:41:f8:9d:1f:37:4e:80:9f:42:10:
c5:5a:17:2d:4c:ac:3a:ec:69:26:d6:22:19:b6:cb:
3e:a3:12:1f:e5:91:d1:b2:50:53:30:6c:e1:a4:a2:
b5:fc:9e:e6:7b:6e:4d:29:da:f9:85:af:2d:d6:4f:
5d:ea:2c:f9:91:a5:c1:a3:11:f8:8f:da:a6:b6:a9:
b7:93:4a:eb:78:b0:d6:21:d6:43:4d:b2:da:18:6d:
42:85:19:9d:17:b1:15:65:fc:ce:20:c1:8d:58:c0:
e3:40:c1:5a:bf:7b:61:5c:ef:9f:00:0d:ef:19:63:
98:6d:81:a9:25:ca:c9:ed:e3:78:fd:2e:95:b1:d8:
64:1e:1f:6c:ed:99:19:92:e0:26:84:cd:b8:e0:53:
18:48:4a:c8:ca:74:36:b4:87:96:5c:34:0c:db:4c:
ac:35:78:4b:ee:39:dd:02:59:59:9a:cb:6e:43:d9:
47:6f:89:03:a5:ad:18:ff:f6:e1:f3:b3:7a:20:db:
b1:d1:22:f3:1f:f7:be:b6:1e:6e:35:3e:64:df:7f:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:19:C8:6A:1D:25:4C:EB:D2:76:7B:EA:61:60:B6:60:C5:57:AF
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:bb:28:7e:8a:01:2d:7c:e8:b2:40:6c:80:3e:a0:bb:da:
ac:9e:e3:f6:f7:4c:4b:00:34:d3:25:99:1f:e8:b1:8a:39:c5:
96:a3:5b:7f:34:18:ff:68:a1:32:a1:e2:89:54:39:de:42:33:
ae:79:bd:34:20:cb:38:e0:93:67:c5:91:47:ea:1b:cd:80:b4:
05:16:c4:70:f4:73:b1:80:d7:4e:3f:2e:ec:55:96:f0:90:bc:
3c:23:79:5a:31:f5:cc:a0:49:8c:ad:c1:6a:ff:46:db:cc:52:
f7:8d:db:f9:d4:de:c4:73:f2:6f:91:a8:7c:63:42:c2:88:96:
d2:40:83:b9:38:a2:1a:d6:e5:00:9d:9e:dc:28:f0:06:a7:4b:
e8:71:99:f7:2b:90:e3:1a:d2:eb:35:cc:05:13:cc:e8:88:16:
e9:9b:43:6d:72:f3:99:3a:41:0c:21:64:e3:85:14:6a:9a:57:
bf:65:95:9e:34:8e:15:97:2e:ae:47:d2:b9:c8:37:9c:ad:d8:
b0:b5:1c:3d:32:54:64:80:af:64:11:7b:11:6b:fd:c3:6e:78:
cb:56:a5:bd:2d:1c:c4:ac:5c:67:35:09:0c:f6:6a:5f:a3:18:
bb:8b:cf:ad:7d:c1:e2:64:7d:d6:a6:1a:87:08:d5:d9:be:2c:
e7:f8:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:37 2026 by rpki-client