This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: u/iuSTK1G27ROnFnU/tIxUjWpMCF+OJ9UiipvJup7D4=
Subject key identifier: 3F:18:E1:CF:21:1F:CD:92:4F:EC:97:18:03:B9:11:96:18:0F:22:1F
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 0301
Signing time: Sun 25 Jan 2026 00:22:00 +0000
Manifest this update: Sun 25 Jan 2026 00:22:00 +0000
Manifest next update: Sun 01 Feb 2026 00:22:00 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: aggYy0fXpJIjzs4J7kVxzxIXN/nNIQGZ6wlmzdp7A2k=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: tggayaLto8CAWEhkFDTMAXvd1HSZb+GtdD7dZmQyKpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: Jan 25 00:22:00 2026 GMT
Not After : Feb 1 00:22:00 2026 GMT
Subject: CN=69756228-10b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:21:f3:b1:14:69:65:6f:67:b1:ae:48:25:
24:24:54:dd:0c:9c:b7:4f:22:10:0e:e6:90:86:0e:
7b:85:ec:cc:78:6b:75:40:7d:ee:ff:26:ad:de:e4:
37:5a:2c:ca:84:14:2a:56:83:75:7f:64:bd:1f:4d:
4d:7c:50:3e:c9:dd:94:e2:c0:29:3e:ed:61:c4:66:
71:51:8a:9f:16:e7:c7:3e:fa:1b:12:60:40:87:f6:
ee:59:bc:7f:92:ec:22:4b:b4:a5:c1:7c:81:ab:e3:
57:b3:e4:be:b2:36:44:be:d8:3a:f3:10:44:42:75:
86:c3:79:c7:34:20:e4:a2:0f:65:5f:ee:c6:be:2b:
bb:a2:1e:c0:9f:d1:1a:73:fc:3e:f0:6c:ab:8c:49:
64:2b:8b:2b:a4:24:f6:fe:a4:43:8b:38:67:cf:e1:
23:48:88:28:49:10:7e:3c:20:72:8d:56:8b:7b:12:
7d:a3:5b:a7:09:5e:21:8d:68:76:7f:16:d8:63:99:
e0:2b:36:d8:df:6d:ad:8e:0a:14:0f:5b:37:7f:c8:
26:b2:be:42:8c:f3:fc:96:72:98:8c:9e:68:41:ae:
66:a9:db:f8:00:96:4a:eb:68:5f:32:b4:21:c4:a8:
72:c2:ba:e9:07:4a:a2:a8:8b:f2:07:47:20:69:86:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:E1:CF:21:1F:CD:92:4F:EC:97:18:03:B9:11:96:18:0F:22:1F
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a1:3f:8a:3d:31:fc:61:63:86:18:48:2f:e8:c8:04:1e:46:
c7:06:b7:87:89:ef:e1:e7:37:c2:b7:7c:d2:2a:1b:43:ad:33:
8c:cb:54:db:6e:5f:bf:4a:af:5e:0e:9a:69:48:5b:3b:cd:13:
90:f5:a6:9a:f5:d3:f6:05:57:fe:b9:ec:12:1f:1e:67:97:bf:
7b:e0:5b:31:50:25:3a:86:9c:e9:7b:d4:c9:dd:be:a7:c8:1f:
c7:01:b7:3a:7f:61:46:58:9a:50:b9:89:ba:1d:58:d6:a6:db:
45:d7:8f:07:93:c3:d2:d1:7f:1f:13:1c:4b:d8:4b:7a:9c:66:
09:85:79:b5:6f:6e:9d:ab:ba:86:b5:6c:7a:8e:30:9d:de:39:
71:e2:69:a9:21:3c:fd:c8:6d:96:49:8b:70:a6:aa:b0:17:d5:
d3:65:c0:4c:f0:0b:15:d1:61:c0:32:1b:fb:8e:81:41:f6:28:
d5:09:f1:a4:2a:47:85:88:93:b4:d6:22:7a:81:e4:57:06:e8:
79:f9:c3:73:a2:5d:3c:bf:ef:4a:bf:aa:25:15:c0:56:6f:8a:
ec:88:18:55:83:18:1e:54:50:ab:60:4a:bd:3f:a1:5a:31:b5:
8e:e7:d5:09:dc:18:b2:ad:5d:7c:7a:1b:b6:03:d7:06:09:5c:
64:28:32:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3
RjA0RDUzNTYwHhcNMjYwMTI1MDAyMjAwWhcNMjYwMjAxMDAyMjAwWjAYMRYwFAYD
VQQDDA02OTc1NjIyOC0xMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrch87EUaWVvZ7GuSCUkJFTdDJy3TyIQDuaQhg57hezMeGt1QH3u/yat3uQ3
WizKhBQqVoN1f2S9H01NfFA+yd2U4sApPu1hxGZxUYqfFufHPvobEmBAh/buWbx/
kuwiS7SlwXyBq+NXs+S+sjZEvtg68xBEQnWGw3nHNCDkog9lX+7Gviu7oh7An9Ea
c/w+8GyrjElkK4srpCT2/qRDizhnz+EjSIgoSRB+PCByjVaLexJ9o1unCV4hjWh2
fxbYY5ngKzbY322tjgoUD1s3f8gmsr5CjPP8lnKYjJ5oQa5mqdv4AJZK62hfMrQh
xKhywrrpB0qiqIvyB0cgaYalMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8Y4c8h
H82ST+yXGAO5EZYYDyIfMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3
MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H
VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8oT+KPTH8YWOGGEgv6MgEHkbHBreHie/h5zfCt3zSKhtDrTOMy1Tb
bl+/Sq9eDpppSFs7zROQ9aaa9dP2BVf+uewSHx5nl7974FsxUCU6hpzpe9TJ3b6n
yB/HAbc6f2FGWJpQuYm6HVjWpttF148Hk8PS0X8fExxL2Et6nGYJhXm1b26dq7qG
tWx6jjCd3jlx4mmpITz9yG2WSYtwpqqwF9XTZcBM8AsV0WHAMhv7joFB9ijVCfGk
KkeFiJO01iJ6geRXBuh5+cNzol08v+9Kv6olFcBWb4rsiBhVgxgeVFCrYEq9P6Fa
MbWO59UJ3BiyrV18ehu2A9cGCVxkKDLW
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:47 2026 by rpki-client