This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier: mvwMjlYpsmyg149IIUO4hFzhLf9e/E8xqE7j04z6NGw=
Subject key identifier: B7:DE:CB:C9:68:8D:40:68:BC:DD:AB:E2:FC:F6:D0:9B:4D:CD:FC:9C
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 140E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number: 13E2
Signing time: Sat 24 Jan 2026 16:41:41 +0000
Manifest this update: Sat 24 Jan 2026 16:41:41 +0000
Manifest next update: Sat 31 Jan 2026 16:41:41 +0000
Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: TLbZL0RkOFje2C68k3fQhJLdmDGg8v9bE3rVllnOE+k=)
2: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: XLPi0zhLUNsE9iSPuHVQvow0KQLSfAVQkCcR6p16QHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5134 (0x140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Jan 24 16:41:41 2026 GMT
Not After : Jan 31 16:41:41 2026 GMT
Subject: CN=6974f645-4ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:ab:13:97:09:64:29:e5:05:ab:f0:2b:82:
07:1f:d5:81:2e:7f:f5:5c:19:29:d0:2e:8b:23:58:
2a:e1:da:4c:fc:b4:18:2a:b5:16:98:b6:42:41:5f:
9c:91:6c:fc:14:71:b6:0d:67:34:22:68:1b:71:64:
81:9c:3f:43:57:e5:62:3f:73:35:c3:22:f9:35:e3:
2a:00:37:54:bf:74:65:e0:35:90:dc:40:21:57:29:
cc:22:4a:b4:4b:29:ff:f3:92:2b:f8:ca:45:0e:83:
a6:44:18:fd:42:48:63:27:c4:fd:8a:95:c7:d0:21:
e2:68:3e:8e:00:fe:04:bf:59:d3:b1:cc:5d:3f:1b:
bf:be:af:82:38:78:8a:0e:8d:7d:bc:4d:c7:e7:3c:
3a:f6:af:fb:cd:05:b5:0c:ce:ec:cd:b9:2f:b5:25:
49:fc:5f:a7:9b:ba:6b:27:c3:8c:b5:4c:bd:74:c8:
2e:85:3d:16:c0:78:6d:87:52:67:08:ac:47:9f:8d:
6f:3b:7f:1d:ce:34:dd:ed:3f:dd:e9:af:5c:61:74:
50:ea:50:5a:9b:74:a7:bc:06:80:d9:b7:66:2d:9b:
d8:73:8a:50:ce:06:68:c8:03:a8:a1:c0:a6:20:2c:
96:6f:ea:2b:32:80:f8:6f:95:42:2a:05:89:3a:17:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DE:CB:C9:68:8D:40:68:BC:DD:AB:E2:FC:F6:D0:9B:4D:CD:FC:9C
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:ca:b4:62:87:57:b2:49:b3:80:66:2f:92:51:89:c4:2f:a7:
32:5d:6c:33:b7:23:17:4e:6b:c4:e5:bd:03:19:9f:96:f3:b8:
8c:74:69:a3:1a:0f:5b:e2:7b:3f:42:ee:ad:6e:26:8d:b9:aa:
6a:7a:24:6c:47:0b:26:12:00:94:07:1c:17:40:35:0d:6c:f6:
d3:ee:72:c5:e7:3d:6b:59:8c:1d:51:65:32:d7:51:4c:b0:04:
d9:90:9e:e9:78:38:fe:b6:1d:49:53:d7:22:93:60:5c:6a:0f:
16:cc:31:8d:7a:51:92:37:77:3e:91:cb:96:27:69:4d:88:06:
9d:0a:b4:09:17:ba:1e:11:40:48:cc:5d:04:5d:96:6f:05:02:
d4:03:c1:16:bb:f3:da:90:05:10:87:6e:c6:b8:93:ea:5d:cf:
d7:2b:50:bc:7e:0e:17:1d:6a:64:35:45:54:cb:05:44:7a:28:
8c:89:21:cd:91:a5:37:35:4a:45:c8:82:0c:36:3b:64:f5:53:
86:0d:2e:6a:34:4f:88:11:c9:25:65:a4:f6:e2:46:a7:8f:d6:
0e:20:52:bd:48:1d:c8:71:81:a3:86:af:55:53:e5:a3:1c:92:
8c:36:d5:e3:88:4c:63:44:2b:d0:ee:13:51:ee:bf:95:40:f9:
c3:39:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:00 2026 by rpki-client