This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: IKEKvOm1M69RCGznTDtuS+x5MJC/7GPIe9QFor3+WdA=
Subject key identifier: 76:39:F3:0F:83:F8:6C:7D:A0:B8:59:CF:9E:9C:FD:AC:8B:4F:3F:30
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 06EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 06D8
Signing time: Sat 24 Jan 2026 21:28:29 +0000
Manifest this update: Sat 24 Jan 2026 21:28:28 +0000
Manifest next update: Sat 31 Jan 2026 21:28:28 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: DsIJnhoPcfcPvjPCOq50Gy1LAeFnVE+6M6S/mE+lwK8=)
2: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=)
3: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=)
4: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: u41x8Ny1raTvp1vwnGwm7MW/cINQCDMdw5LO04vaVeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Jan 24 21:28:28 2026 GMT
Not After : Jan 31 21:28:28 2026 GMT
Subject: CN=6975397d-cb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:9b:e1:9c:13:8e:58:d2:a7:bb:42:c1:c7:
e3:c2:54:b4:f8:aa:c7:cf:bf:ef:95:f9:c5:31:2d:
08:7f:c5:ba:34:fe:b4:80:09:59:ae:d9:7e:d7:72:
57:54:8d:69:1f:a2:5e:c5:69:9c:b3:d2:d2:ef:84:
64:ef:89:d0:27:8c:d0:65:9a:d1:fe:99:3f:02:cc:
bc:b3:ae:33:a7:18:d5:1c:14:c5:50:1c:ea:c7:37:
e5:d5:46:57:e3:37:99:f7:c4:23:00:3f:d5:05:99:
59:55:a7:8e:80:d0:37:00:29:5a:57:44:f0:7e:3f:
d5:df:1b:a9:76:c7:4e:e6:62:92:5b:51:dd:95:e6:
af:35:eb:fd:94:a4:1a:19:f7:84:56:c0:09:e3:6c:
aa:46:8c:70:53:2c:f4:41:bd:ae:3f:5e:63:24:7a:
92:d3:4e:c9:30:01:22:fb:fb:ea:16:6f:a6:fa:18:
61:f8:d2:fc:16:cc:90:52:a1:73:1e:10:d3:85:9e:
83:32:ee:09:c2:c5:37:19:0e:cd:d7:7e:3e:02:34:
4b:a0:e6:07:c5:92:43:fc:6c:42:7e:5f:a7:7b:0a:
d6:bc:f6:43:fb:6c:d5:58:d2:4b:18:bf:2e:bb:d8:
9b:6a:43:1a:4f:b4:5f:18:ae:16:9a:cf:79:2b:bc:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:F3:0F:83:F8:6C:7D:A0:B8:59:CF:9E:9C:FD:AC:8B:4F:3F:30
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:db:48:13:d0:1f:05:27:bf:12:8e:d6:b1:ac:39:52:d4:ef:
48:56:88:f1:f4:7b:30:8f:0b:7c:ce:8a:80:22:9f:67:c8:bc:
92:37:96:ce:3c:84:5a:93:e7:c0:ca:89:fa:e0:fc:dd:36:79:
e7:bb:4d:d5:e9:46:0b:0e:6b:ac:b2:81:09:2d:af:00:84:68:
9d:ca:6c:d0:35:9c:1d:af:40:ea:97:e2:d4:e6:c8:17:5e:03:
7a:55:91:bd:c1:a2:84:bc:81:4e:cd:74:09:0b:d2:c6:b1:58:
ae:f9:99:66:fb:77:0c:57:8d:f6:6d:bb:b4:e7:6a:33:56:b1:
b5:8a:1e:7a:44:9f:ef:d1:8e:8a:de:f0:76:0a:32:9c:b2:56:
bd:88:ff:16:da:f5:24:0b:e5:23:69:5d:dd:5b:25:73:f6:7f:
8d:8d:a4:f0:61:02:ae:c0:ab:84:5e:62:13:da:7f:7d:74:8c:
23:0a:f1:6f:2e:b2:42:86:8b:d9:f0:0c:da:52:59:b4:31:45:
4d:d2:bd:18:a5:43:d1:ba:d4:ff:e7:c7:02:57:56:89:04:c4:
86:b6:df:0e:34:1d:3c:d5:21:02:54:4b:4c:a1:43:25:dd:2a:
c5:d5:ca:77:9e:e5:61:09:d0:7d:55:d8:a2:44:49:e6:1d:3a:
f2:86:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:44 2026 by rpki-client