This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json)
Hash identifier: +Sp5fF+247nIzxV+cl60w6jO1bANfBORhvBgs1Vgyto=
Subject key identifier: 74:F1:A7:B4:FF:DC:50:7D:7C:11:88:A1:33:0A:72:A2:EC:25:04:BE
Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
Manifest number: 0173
Signing time: Sun 25 Jan 2026 03:07:50 +0000
Manifest this update: Sun 25 Jan 2026 03:07:49 +0000
Manifest next update: Sun 01 Feb 2026 03:07:49 +0000
Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: DOsozhYSoR8DAvvDaEYJBeiJ/O/09TLendnzpzV6cZQ=)
2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3
Validity
Not Before: Jan 25 03:07:49 2026 GMT
Not After : Feb 1 03:07:49 2026 GMT
Subject: CN=69758905-8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:51:cf:4f:bb:ce:3f:b7:45:ac:f6:a1:c1:
09:71:d5:23:d9:17:3f:87:e6:f2:10:35:0e:27:1d:
6e:d8:db:e9:85:b3:cd:68:2e:55:f6:7f:99:26:39:
af:10:78:b6:5c:d0:c6:09:21:f6:4a:df:6f:32:c5:
69:db:d0:03:b5:24:01:00:51:e8:44:e0:8c:73:64:
d0:55:c8:c8:7d:ad:b8:bf:99:ea:d3:8c:32:2a:f1:
ff:0a:c8:9e:21:3e:c9:72:d1:fa:8c:6a:23:91:2d:
6e:c4:ca:1e:9d:25:4d:90:e2:30:02:71:ec:f4:1c:
99:b7:64:1f:9e:0d:3d:90:a5:1a:60:b5:9f:47:55:
c4:e7:18:7e:85:44:f8:5f:39:a0:40:c1:72:59:0b:
21:78:c5:0d:b1:a1:73:53:ef:48:11:f8:ec:e1:2c:
46:e7:ab:93:98:c2:aa:5c:b6:70:60:ae:13:83:37:
1f:3e:64:d4:46:f5:12:b5:23:d7:ec:4a:28:1d:05:
3a:8c:ba:71:b0:25:dd:53:ab:d1:90:4f:d8:4d:ff:
84:60:38:51:87:24:db:04:25:cd:b3:90:d5:2a:fd:
14:ed:cc:7f:82:95:5c:35:9f:f3:b2:01:75:f1:6e:
6f:61:c8:9c:fa:91:60:f8:7c:0e:2a:f9:2b:4d:86:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:A7:B4:FF:DC:50:7D:7C:11:88:A1:33:0A:72:A2:EC:25:04:BE
X509v3 Authority Key Identifier:
keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:ef:0f:4f:29:b7:35:73:5b:ef:a7:02:fe:98:89:35:43:
1f:8f:c4:89:5d:90:5a:a0:f4:e7:c3:d1:ce:f4:a3:89:0f:b0:
32:6e:3a:99:08:c4:9a:fa:ac:22:be:ba:65:58:50:b8:05:7f:
70:0a:6f:63:c2:1a:18:d2:81:9c:12:e6:67:68:c3:24:d9:12:
e3:ae:a7:4b:0b:56:4c:df:81:df:15:fc:b2:05:da:95:56:0e:
e4:aa:6e:ca:70:30:e9:cd:b6:c1:5b:56:d3:28:d6:e5:a4:90:
8f:d2:2b:7a:ae:7d:6a:c2:a6:f0:a9:41:4d:b2:22:12:c4:76:
5f:0f:57:73:5b:7c:37:23:33:d1:cc:be:c5:96:66:34:54:ea:
2d:bd:71:fe:04:14:cb:3f:39:99:6b:32:70:33:23:af:31:91:
17:33:5d:ab:83:9a:1d:4d:08:11:c6:b6:dd:1e:bf:e6:b5:75:
83:47:99:9c:75:fb:7b:8b:bd:05:98:1b:a2:9a:4a:99:38:92:
aa:09:28:55:72:ea:af:73:aa:64:54:93:dc:ff:d7:6d:7e:d5:
f9:cf:3c:1e:79:34:de:07:40:e6:3e:5a:1d:f0:8a:07:ee:d5:
d6:0d:2f:c7:0b:6c:71:9b:ef:42:db:25:5b:02:f7:c9:02:74:
9b:5b:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:27 2026 by rpki-client