This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier: F6TnadQYhjk0/kmDLp3cTI7v6KCA9SG9wGpy1R/F8WI=
Subject key identifier: 71:16:DB:2D:65:E6:02:A8:51:54:E4:DC:7C:39:89:E8:9A:87:1D:77
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial: 3501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number: 3501
Signing time: Sat 24 Jan 2026 14:34:44 +0000
Manifest this update: Sat 24 Jan 2026 14:34:44 +0000
Manifest next update: Sat 31 Jan 2026 14:34:44 +0000
Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: u6IcgDWr/6B6EwcHz1GF6e3fNtzy1SAvj2+CAXcki88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13569 (0x3501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Validity
Not Before: Jan 24 14:34:44 2026 GMT
Not After : Jan 31 14:34:44 2026 GMT
Subject: CN=6974d884-e873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:6e:aa:1b:2e:95:fc:16:09:ec:f5:60:88:
f5:6c:9d:23:fc:64:42:f3:33:19:4d:00:46:fc:e3:
d9:e1:0b:e5:fa:3c:db:35:0e:40:fe:b7:04:4e:54:
72:00:9b:9f:ea:25:a3:13:66:23:aa:0a:ff:74:d5:
01:a1:04:06:59:cc:ab:c1:37:2b:be:be:da:3a:9f:
25:c6:b6:0e:a0:e1:02:a6:d9:03:6f:19:72:a2:4b:
45:8d:41:06:18:b2:34:ef:7e:0c:dd:60:29:58:15:
66:06:8b:d3:ee:21:b3:ce:8a:e1:5d:14:ff:5c:1b:
32:2d:4c:13:6a:57:bd:59:45:6d:20:c4:57:03:75:
02:74:a3:eb:95:1f:20:9e:b9:ce:91:ad:d0:81:9e:
36:3d:eb:63:ff:01:cf:d6:76:d1:a2:cd:1e:08:72:
b7:82:f2:84:bb:a7:f1:e8:60:2b:b2:26:5e:8d:9f:
bb:73:40:3e:87:78:d8:fb:38:f5:97:7a:82:24:94:
7b:8f:3f:c7:ca:62:55:bc:45:b8:b6:a9:15:63:3f:
8f:6a:f8:62:07:2e:5b:0d:d4:bd:f1:64:60:0e:f9:
55:b9:23:2c:7a:3f:be:b7:bc:7f:9a:b4:09:5b:2b:
77:83:bf:19:d3:f1:b8:49:71:e6:70:66:8d:9e:e6:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:DB:2D:65:E6:02:A8:51:54:E4:DC:7C:39:89:E8:9A:87:1D:77
X509v3 Authority Key Identifier:
keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:26:b4:28:31:39:86:ab:ba:7e:91:b1:96:ef:7b:b0:57:de:
9c:b4:52:d9:13:c2:f6:51:8f:67:fb:38:1b:21:48:8b:49:95:
96:73:57:ec:2a:3c:7c:9a:8b:2f:4d:78:0a:9d:e9:f1:a8:3a:
a5:4a:28:ea:10:d7:77:78:3f:9a:15:5c:96:d1:5e:61:49:0d:
d6:45:b3:4a:91:2c:c6:bd:3b:17:a2:6d:07:af:0e:6d:a6:ec:
0b:47:a5:b3:11:a4:32:e6:a4:bc:bd:60:b0:47:db:50:71:4a:
4d:a0:c8:e2:05:b3:ab:65:5b:b6:30:7f:0c:97:04:c2:77:29:
e0:3c:19:d5:82:9c:a5:3a:e1:fa:2c:19:8e:12:3d:4d:06:36:
cd:4d:67:94:d7:03:28:17:3c:cf:2f:eb:f9:ed:d1:2f:f4:ac:
dd:26:1e:98:ec:1d:f5:57:3f:76:79:61:28:5d:1c:7f:49:43:
39:51:70:66:7f:cc:3d:77:f0:22:2f:9f:59:d5:ef:32:9d:b0:
32:7e:db:34:b4:11:8e:c1:dd:51:d0:4a:f3:f4:38:6b:c7:58:
c5:0b:b1:e2:39:48:97:ca:3e:bf:3b:fa:0f:17:6e:1e:6f:01:
1b:ee:b9:46:9f:d5:49:63:9b:18:88:b0:ac:d2:b4:b2:d9:50:
7e:96:77:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4QzIzQzFFMjI0
QjQzREJBQTUwHhcNMjYwMTI0MTQzNDQ0WhcNMjYwMTMxMTQzNDQ0WjAYMRYwFAYD
VQQDDA02OTc0ZDg4NC1lODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4puqhsulfwWCez1YIj1bJ0j/GRC8zMZTQBG/OPZ4Qvl+jzbNQ5A/rcETlRy
AJuf6iWjE2Yjqgr/dNUBoQQGWcyrwTcrvr7aOp8lxrYOoOECptkDbxlyoktFjUEG
GLI0734M3WApWBVmBovT7iGzzorhXRT/XBsyLUwTale9WUVtIMRXA3UCdKPrlR8g
nrnOka3QgZ42Petj/wHP1nbRos0eCHK3gvKEu6fx6GArsiZejZ+7c0A+h3jY+zj1
l3qCJJR7jz/HymJVvEW4tqkVYz+PavhiBy5bDdS98WRgDvlVuSMsej++t7x/mrQJ
Wyt3g78Z0/G4SXHmcGaNnuaa0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEW2y1l
5gKoUVTk3Hw5ieiahx13MB8GA1UdIwQYMBaAFAZV4pFcrekWd6q0jCPB4iS0Pbql
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQzNS9ENkY4ODVBNDFE
OEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZSWjNxclNNSThIaUpMUTl1
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JsWGlrVnl0NlJaM3FyU01JOEhpSkxROXVxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZS
WjNxclNNSThIaUpMUTl1cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwJrQoMTmGq7p+kbGW73uwV96ctFLZE8L2UY9n+zgbIUiLSZWWc1fs
Kjx8mosvTXgKnenxqDqlSijqENd3eD+aFVyW0V5hSQ3WRbNKkSzGvTsXom0Hrw5t
puwLR6WzEaQy5qS8vWCwR9tQcUpNoMjiBbOrZVu2MH8MlwTCdyngPBnVgpylOuH6
LBmOEj1NBjbNTWeU1wMoFzzPL+v57dEv9KzdJh6Y7B31Vz92eWEoXRx/SUM5UXBm
f8w9d/AiL59Z1e8ynbAyfts0tBGOwd1R0Erz9Dhrx1jFC7HiOUiXyj6/O/oPF24e
bwEb7rlGn9VJY5sYiLCs0rSy2VB+lnc+
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:29 2026 by rpki-client