This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier: jVgvtDyTmbnoN9+DsRdPEZ6TRxZ98QX60K3idFYplEw=
Subject key identifier: 9F:86:0F:F1:8C:77:55:82:5F:CC:7D:26:7B:DD:4A:76:AF:35:BE:8F
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number: 0138
Signing time: Fri 23 Jan 2026 04:15:21 +0000
Manifest this update: Fri 23 Jan 2026 04:15:21 +0000
Manifest next update: Fri 30 Jan 2026 04:15:21 +0000
Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: Z2FFSdciFbc+Xkz7UonMDyHFRLSKyWMFgAH1E/PG3hY=)
2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o=)
3: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: L5Ep8B/7RUWRgMjdNe40xAsqxONjhV0tjlDFWICACUA=)
4: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: FJSeI7xu3Suas48K0kKSfoAbigbE/yhUfYxCE1a9B6A=)
5: FA414880107B11F09A6AF277C4F9AE02.roa (hash: Wy+W7yleCCjdnmkiTTzTQjidmhHRdCgVI8wgnocThQA=)
6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: CPH/9LGGv2Qb1QUYpywLXh/H9jmUzaUp17YNcG9enxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Validity
Not Before: Jan 23 04:15:21 2026 GMT
Not After : Jan 30 04:15:21 2026 GMT
Subject: CN=6972f5d9-b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:ac:19:7b:c0:5f:69:c0:a9:7c:44:8f:c0:
04:55:e0:68:9f:80:80:3f:36:f0:d1:47:f8:7c:7f:
a5:a0:53:60:dc:ef:86:1f:ba:64:3a:96:0a:92:5c:
80:eb:52:b8:76:f0:ce:1d:7b:5d:1f:24:22:04:29:
db:5d:43:34:57:0d:85:9d:43:9c:c9:ac:9f:c9:29:
35:27:0c:73:64:df:61:d7:70:29:39:a9:b6:dc:32:
71:24:22:25:ae:ef:77:b8:1a:96:db:14:bb:a5:19:
69:91:08:e4:09:23:57:89:72:68:cc:e6:65:8f:56:
f8:37:2d:6b:ed:36:8e:20:72:b2:ac:42:ad:ed:c3:
17:fe:ba:70:e6:e1:49:28:6a:5c:0c:c4:5f:04:96:
75:fe:6e:ed:ed:ad:89:0a:ff:bb:e5:f3:dd:47:b2:
1d:e5:56:36:e9:06:7c:8c:38:ec:23:4d:8c:20:55:
27:a9:b4:3b:99:ff:e8:f5:e1:d8:da:c4:66:04:64:
ae:52:ca:70:0b:dd:e3:f9:5e:a9:e6:81:8f:ef:c4:
78:26:c5:9f:22:a5:ae:1b:2c:51:54:8c:e7:9e:90:
fc:fb:dc:42:f8:92:91:b4:68:56:cc:89:de:a3:e4:
ad:c0:1d:08:83:c8:ab:0d:46:e9:86:47:4d:e0:f4:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:0F:F1:8C:77:55:82:5F:CC:7D:26:7B:DD:4A:76:AF:35:BE:8F
X509v3 Authority Key Identifier:
keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:42:2f:18:7f:87:cd:18:cd:cd:2e:a3:fc:42:58:1a:65:
5f:17:4c:53:6f:3d:d4:df:76:b5:ab:21:9c:89:0b:1c:2c:35:
e2:c0:20:ea:cf:93:c2:d5:c0:67:65:1f:b6:5f:b8:89:96:9d:
ed:81:44:b4:7c:90:7a:d2:54:73:bd:02:e6:50:9c:ce:d5:65:
8f:35:fb:99:60:6b:04:6e:74:26:e1:6a:ab:7e:f6:65:f6:91:
db:85:f9:aa:f5:c7:ed:1c:39:3d:45:07:b2:02:25:16:f2:52:
51:c8:56:f7:a1:be:20:1a:fa:ea:7c:43:8d:31:d6:c0:47:8d:
7c:5c:03:96:e0:65:c0:f2:89:9f:7f:1e:98:93:b2:4a:1c:29:
e9:a7:e7:e3:67:6e:c2:fc:48:a9:7a:2a:75:af:91:a4:ec:4b:
0b:11:fb:da:01:1a:c8:58:3b:c1:21:be:6e:82:a9:55:a6:4d:
1c:a3:90:73:27:1d:da:20:65:6e:e0:86:c7:4e:82:d0:64:04:
3d:b0:7b:5d:6b:d8:1e:e0:3a:dc:40:2e:42:d2:21:37:7e:94:
dc:f6:d6:e4:81:23:f4:86:67:25:87:9e:16:5d:86:26:bd:fa:
88:25:fb:f2:a8:59:7f:d8:b5:48:e8:28:3c:d5:34:af:06:4d:
ad:4b:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:34 2026 by rpki-client