This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier: 1W45yIiiK6C7WbYeWoiMSCw+Im0C40WGCrIi95xdri4=
Subject key identifier: 97:C1:5A:58:30:91:67:6A:3C:0C:6D:6F:A4:96:A4:C4:44:6C:3F:31
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial: 34FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number: 34FC
Signing time: Sat 24 Jan 2026 15:07:09 +0000
Manifest this update: Sat 24 Jan 2026 15:07:08 +0000
Manifest next update: Sat 31 Jan 2026 15:07:08 +0000
Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: bzYiw2KuULXHQaGSOI0kwRdWCreUMgGf63zeV8NqNGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13565 (0x34fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Validity
Not Before: Jan 24 15:07:08 2026 GMT
Not After : Jan 31 15:07:08 2026 GMT
Subject: CN=6974e01d-aab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:8a:64:04:a7:5c:fc:de:fb:16:b3:a1:9b:
71:4a:ac:eb:37:90:6e:be:d6:5e:3c:b5:68:00:48:
87:8f:07:e8:cd:63:f6:27:88:d4:25:dc:70:a8:a6:
f0:e5:3f:67:48:41:e4:64:fa:67:b2:ae:a5:c7:55:
cf:b1:76:a9:76:8c:81:54:7b:7d:90:17:92:b8:ec:
ff:a3:ae:3e:29:93:b7:b1:e3:d7:01:79:9f:d9:7b:
99:ae:f9:52:5b:c8:79:a8:33:c0:2a:60:af:be:86:
67:c2:0d:7c:df:84:f9:0d:1a:64:e1:34:14:57:74:
75:99:cd:aa:ec:a2:ec:fc:69:6c:a1:e3:42:56:58:
91:4d:d1:9d:b6:49:89:cf:8a:ca:ae:9e:7c:72:5e:
9e:e7:24:e8:a5:a4:75:55:8f:e4:7a:ef:c9:2c:01:
d0:5e:a6:c5:6f:46:5d:91:3e:44:28:0b:a3:9c:31:
50:a7:2f:42:f2:4f:71:79:db:aa:c7:b9:bd:7a:7a:
b5:58:7f:e3:4c:62:a5:16:59:3b:c0:2f:84:84:15:
88:97:63:c3:9c:76:47:bd:e6:b5:db:49:2c:0a:f5:
ed:c8:fa:00:97:98:4f:50:3a:ad:59:40:31:0a:cb:
a5:b0:70:fb:b9:de:4f:b4:81:2b:75:5e:4d:f9:e9:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:5A:58:30:91:67:6A:3C:0C:6D:6F:A4:96:A4:C4:44:6C:3F:31
X509v3 Authority Key Identifier:
keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:da:23:1d:3f:dc:15:dc:d4:c6:84:9e:83:2b:a9:9b:2f:bd:
c7:05:49:c6:49:87:68:54:87:0c:72:63:ba:5b:bd:1b:f4:4b:
25:e5:4c:d8:31:e0:ea:ff:9b:f6:c2:5b:47:39:16:d6:63:d7:
c3:ee:a2:7d:c9:d2:3c:e2:84:0a:48:9b:f8:46:13:f8:9d:bb:
24:5d:f7:f1:ab:8e:6a:12:47:fc:65:e6:19:57:c4:e4:b4:b5:
60:a3:c2:1d:e8:f2:bb:d1:fa:9e:16:b7:c0:17:8f:48:18:73:
18:2a:af:d5:85:c1:80:80:b2:a7:65:ec:bb:87:46:1f:f5:a1:
d0:60:e4:80:e8:90:6f:1f:3c:4c:51:7e:e3:ee:b1:4d:89:53:
5b:94:72:1b:0b:8c:fa:2f:ae:7c:c8:fd:bd:d5:f8:be:18:66:
a0:4d:9b:df:be:c4:8d:44:d4:24:c2:df:b9:7e:ba:19:60:59:
02:92:96:cb:ea:81:a4:d6:c0:da:fe:32:76:72:3c:ce:8d:72:
78:37:24:8e:44:d2:c5:7b:08:9c:bc:3c:6b:cb:67:16:d3:23:
56:e3:35:57:1b:d3:51:6a:c1:2b:87:ab:1c:31:f4:70:01:80:
a2:32:d3:fa:24:e0:3c:90:4e:bb:d7:2b:31:f6:ff:73:69:40:
f4:fc:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:12 2026 by rpki-client