This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: N6VXQZrlnk5Fcez/rzSMXEvN/nvKMDBuZ16j0q+R0ic=
Subject key identifier: 08:CE:9A:88:8B:EF:9D:DF:6A:DF:78:6A:3F:E8:D9:F1:23:3B:93:1A
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 5A
Signing time: Fri 23 Jan 2026 06:13:55 +0000
Manifest this update: Fri 23 Jan 2026 06:13:55 +0000
Manifest next update: Fri 30 Jan 2026 06:13:55 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: ZEc7webY4okcIm5yJUVlS99u58xsnPGCYCnbOzQ2Qiw=)
2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: USdlwRhVoGGdyrGSWsnHqMd9hND59OuaWTUHS/xq5TE=)
3: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: GyqGKalWusBgT8nd4OWPMoV8T2Mx2cIJgVwSYvNt+eA=)
4: B25E5954768D11F091768048C4F9AE02.roa (hash: bFSzjXTpedQHU5GXRyOAp3ruzrbAgAWRW8Prl1dvtXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Jan 23 06:13:55 2026 GMT
Not After : Jan 30 06:13:55 2026 GMT
Subject: CN=697311a3-0a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:64:8a:66:40:42:c9:4e:ab:29:03:70:24:
eb:a4:d8:05:85:c2:52:7b:1c:4a:6a:a5:01:d8:ff:
30:e6:8a:78:23:dd:54:c9:ad:b4:a6:06:cc:b0:05:
df:99:5a:55:8a:5b:28:bc:75:40:40:84:2e:ad:9f:
33:81:91:b7:ee:da:8e:e1:0d:9e:c6:5f:31:3f:47:
4e:ba:36:01:47:fc:69:70:ee:ed:7b:fc:79:75:50:
f1:70:37:b0:be:5d:ad:b6:d4:98:57:58:9c:9a:02:
ad:fa:4c:99:01:a7:0e:fa:f0:50:06:17:a5:0b:49:
71:3d:17:09:38:e9:eb:b6:87:53:9f:1a:da:cb:ff:
78:19:f9:a8:84:2a:d5:2b:74:c8:a2:2a:16:3a:a2:
e2:99:a6:38:a3:f3:82:43:aa:ed:94:01:ef:32:33:
0a:bd:5f:14:8e:83:4f:ba:df:37:2c:3b:96:4e:50:
36:e0:33:46:36:e6:99:87:e9:d9:ee:d6:bc:fc:9d:
c9:e9:4c:72:97:84:01:01:99:0f:4a:cb:69:39:cb:
05:46:2c:98:37:c9:ff:5d:8b:2f:5e:f2:b8:5c:4e:
89:fa:e5:ca:74:f2:27:39:32:2a:f9:dd:5e:fc:6c:
da:4a:9f:ed:54:b4:2a:2c:c7:9d:88:fc:29:f4:f3:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:9A:88:8B:EF:9D:DF:6A:DF:78:6A:3F:E8:D9:F1:23:3B:93:1A
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:6e:80:62:7a:2e:b3:db:7f:c3:73:9e:b2:b3:1b:91:bd:c8:
ee:c7:26:80:09:db:36:33:3e:6a:43:17:37:c3:f1:4d:b0:c0:
c7:9e:a1:cc:40:cc:94:e7:5f:3c:b0:9e:f6:cf:1e:c8:97:87:
69:3d:95:d9:9d:c5:68:97:02:5b:58:b0:90:d6:97:b2:8d:ad:
50:1f:15:f9:b6:b0:ab:c2:13:5f:91:92:2b:65:91:a6:51:5b:
9c:79:72:8b:b9:5b:45:f6:01:1f:f0:cd:d0:df:3f:f4:16:15:
dd:ed:e9:36:13:9c:d6:9c:db:6e:1b:f7:16:b3:b2:17:94:aa:
47:0c:ff:d8:7e:8c:0b:82:d9:6d:ec:82:91:36:da:29:29:b3:
81:4d:15:0d:ec:30:c0:6b:cc:37:9c:92:ec:70:cc:41:b1:9c:
06:4d:21:ef:98:0f:38:14:40:9b:2d:1e:aa:1e:f1:3d:13:48:
7e:80:b0:02:c5:80:a3:ac:fd:1f:0f:25:21:1e:69:6e:ad:8a:
46:e5:2b:e3:7d:75:b6:50:00:ea:96:f8:9b:7f:7c:7d:79:35:
23:32:c3:96:14:1f:19:be:c7:07:d0:c1:f7:fe:8e:3c:84:c2:
8a:59:67:26:ff:bd:35:4d:22:01:42:10:c9:d1:5d:eb:98:d1:
35:d4:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:45 2026 by rpki-client