This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: XqpD/kHLPVP1JsOyklNiIBu0feybFfUgp7+nxiniZ7M=
Subject key identifier: 18:1E:D0:57:C9:AE:BE:3D:C1:04:B1:D7:77:D4:42:75:56:5D:76:18
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 0230
Signing time: Sun 25 Jan 2026 01:19:18 +0000
Manifest this update: Sun 25 Jan 2026 01:19:17 +0000
Manifest next update: Sun 01 Feb 2026 01:19:17 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: 2PZhDCJP2balmNEkKigRsOSzuhFbFcCTA1iaxY6DhJw=)
2: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: lxKtarKsATY2wiXkVbh3EFTMWa9NQc/B8XJ8gCOAwlc=)
3: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: okvmN+fO8yeb8sv3bijRR7qzwb2TLJ+EV1o8F+ji/G8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Jan 25 01:19:17 2026 GMT
Not After : Feb 1 01:19:17 2026 GMT
Subject: CN=69756f96-63e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:9a:5c:c4:b4:88:e4:9d:1d:4b:0f:7b:40:
46:60:d9:ce:9e:ad:44:c3:7e:d1:c4:74:db:c2:d5:
fd:2d:f1:23:a2:09:46:cc:e3:99:51:cd:15:b9:06:
84:7b:5d:a2:39:85:52:e4:14:63:78:d2:0d:7b:bf:
ec:0a:90:1b:c4:ca:33:2a:bb:34:18:f1:5b:e9:6f:
d5:16:20:02:41:1b:ac:18:8b:a5:8d:8a:ef:0e:75:
5a:75:a7:02:ac:f3:fc:08:18:f7:95:0a:ae:5a:9c:
8b:bf:cf:03:56:94:64:c8:4c:13:e8:05:0a:c3:32:
34:09:d8:fe:a9:3e:ad:68:38:42:8c:e9:80:c0:52:
8c:31:15:d3:01:53:18:3b:95:ec:4d:02:47:dd:a8:
23:fe:01:5e:3d:97:ec:20:67:40:0d:8e:85:d4:ba:
08:1a:56:d1:e5:ec:0d:40:83:4c:3d:55:6b:79:f2:
bf:c2:b6:42:af:fd:04:77:88:b2:0a:d6:27:aa:e9:
0f:57:60:61:5f:3d:db:63:ec:fa:54:a1:6f:ce:8b:
37:d6:53:65:1a:fc:02:4d:a0:5b:91:de:a6:43:0d:
4b:63:9f:b0:2f:be:cc:95:b3:31:6d:56:cf:bc:5d:
48:1b:77:84:3d:34:55:c6:93:37:a0:2a:7f:c2:ac:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:D0:57:C9:AE:BE:3D:C1:04:B1:D7:77:D4:42:75:56:5D:76:18
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:90:d8:4a:24:be:02:9f:b1:01:4d:d9:f7:40:f1:db:3c:36:
3e:1b:62:b2:23:04:ea:64:dd:d2:ad:b6:5b:19:f8:84:a0:35:
15:86:c6:0a:41:e5:1c:b6:69:93:62:6c:cd:f4:67:c0:f8:25:
25:17:01:e0:db:5a:42:b8:0f:60:39:0c:41:c6:1e:de:6a:09:
14:ec:b4:01:9f:e3:ab:97:90:6d:e9:77:cd:b8:6f:1a:2c:cd:
78:c4:1c:23:b3:2c:6e:53:01:a7:6f:b7:6b:b1:90:81:5a:f4:
e9:3e:0b:67:90:1d:70:f5:c4:a4:05:44:e3:53:0f:8c:d9:8f:
ae:e6:fe:ac:a5:c2:b2:7c:f1:3d:04:e5:80:57:87:a6:fe:87:
ec:f2:26:14:c6:d2:ad:01:15:a7:6b:f1:9b:d9:ab:fa:a5:4b:
cb:f8:32:d0:c4:3d:03:14:95:90:1d:de:0d:d9:04:83:e3:b4:
36:e7:0f:e3:3e:22:54:cb:92:98:b7:4a:55:30:06:eb:41:77:
04:17:1a:6b:4e:12:8d:7c:da:dd:cc:ca:4f:07:aa:b2:61:3d:
06:cc:cb:15:e3:45:e2:dc:62:eb:3f:5a:ba:90:ea:6d:b0:18:
9c:7b:e8:54:f9:d1:13:d8:3f:9d:3f:d5:8c:95:2d:ec:d6:16:
e1:1c:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:59 2026 by rpki-client