This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json)
Hash identifier: e50QSNue4dv6EViE5rm3xfqbEIDYGddFjR+3wSduCSQ=
Subject key identifier: 9D:75:21:6E:35:8D:17:C7:6B:47:B3:66:3E:CA:DE:97:6C:58:51:FC
Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Certificate serial: 064E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
Manifest number: 0648
Signing time: Sat 24 Jan 2026 21:57:29 +0000
Manifest this update: Sat 24 Jan 2026 21:57:28 +0000
Manifest next update: Sat 31 Jan 2026 21:57:28 +0000
Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: LvwoTeMf8LHsM1ttK4MdjYVxsJ5SuPybFlDk+BKA2lk=)
2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: PWdvXLjzzW5Yl2qTNYO9Bzzldi5dnhBl0zbwFfMxt04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Validity
Not Before: Jan 24 21:57:28 2026 GMT
Not After : Jan 31 21:57:28 2026 GMT
Subject: CN=69754049-b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:29:d3:a1:b6:fd:6c:52:3e:6b:3d:7a:3b:
5c:c1:22:c4:b3:96:8c:4e:75:9c:15:52:44:0b:bc:
0c:b0:ba:fe:eb:69:63:83:81:ef:4e:9b:fe:c3:f7:
71:87:1d:b5:90:53:58:d0:33:8f:26:e4:16:e2:f7:
be:ce:aa:bf:57:99:f9:37:fe:e7:a6:98:df:53:e5:
a7:70:f3:5b:3f:97:70:8b:3a:af:97:38:a3:21:97:
73:e0:e2:d7:c8:7d:76:1a:ef:4c:c2:2c:9f:5d:20:
fb:93:a7:d9:63:fd:33:3b:e9:a9:20:01:d5:97:01:
54:b1:5a:27:0f:db:a4:66:ff:cf:c9:46:9a:60:58:
f1:03:8c:bf:97:f0:6e:9f:9d:0d:51:04:a7:c7:54:
8e:dd:b1:ae:91:8f:ed:36:29:4c:6f:27:b0:1d:e8:
39:9a:06:d7:fd:06:de:89:e7:3b:99:b3:cf:71:ae:
5f:e5:8a:38:77:91:e6:62:16:d6:60:f9:41:bf:59:
73:0f:d3:f5:19:a4:86:44:8b:f1:d5:8d:07:f3:92:
5c:d4:74:3d:03:06:c5:57:15:43:28:5a:1e:85:b3:
64:4a:f9:89:a3:96:a6:d3:cc:72:9e:3c:0a:09:01:
b0:e4:6d:42:b1:c8:37:93:10:39:b9:37:e4:f2:49:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:21:6E:35:8D:17:C7:6B:47:B3:66:3E:CA:DE:97:6C:58:51:FC
X509v3 Authority Key Identifier:
keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:5a:ca:0a:d0:1e:20:84:89:16:41:b4:fe:65:f5:00:22:c3:
6e:57:3f:69:f0:b6:11:c2:aa:47:b4:67:cf:07:7d:0a:85:7d:
f0:aa:a4:12:fc:56:1d:50:50:dc:c7:5d:20:17:71:c9:3b:c3:
d5:c6:b6:e9:7c:b7:98:d2:37:d3:51:6e:b8:12:83:99:d5:2d:
e3:8a:08:52:e8:99:1b:79:10:67:57:94:01:2a:5b:e0:48:7e:
68:f8:e1:c8:4e:90:0c:11:13:2a:60:fd:65:35:e5:31:f9:7c:
db:32:f4:45:0a:e7:15:e7:cc:b1:9d:a2:5d:f9:0c:c8:ad:5f:
e1:f0:9a:fb:24:f4:16:bf:a2:4e:a0:17:cb:40:eb:0b:33:40:
8a:bf:00:86:bd:40:7c:b4:02:f4:15:f0:34:f0:dd:cb:ae:8b:
a7:06:41:2c:41:07:57:55:89:97:a1:c4:ce:67:eb:4e:9e:33:
09:4f:dd:3c:7b:f0:f4:a0:eb:e8:6d:fb:65:01:16:33:14:cc:
56:fe:85:03:b8:e3:01:c2:ba:33:9d:95:9e:0c:2e:1c:59:64:
fd:c5:94:df:ba:c9:fd:f0:d8:da:9a:00:c2:69:2c:b0:71:91:
67:b0:5d:94:29:b0:c4:63:59:a5:0a:4b:f7:13:c7:a7:99:49:
32:6a:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:18 2026 by rpki-client