This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: BsCZamERcuNDvq6g91wYeszZD/lgbi0M7PjImmJb1v4=
Subject key identifier: 2E:CC:05:3A:48:C7:A0:9B:95:FF:E9:DA:4D:3C:01:D7:75:64:90:BF
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 1248
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1233
Signing time: Sat 24 Jan 2026 16:51:18 +0000
Manifest this update: Sat 24 Jan 2026 16:51:17 +0000
Manifest next update: Sat 31 Jan 2026 16:51:17 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: fHmU+8kSPCyY8xWr3YIQsd3K7iB5VlMBOhhG3SMP/HM=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jan 24 16:51:17 2026 GMT
Not After : Jan 31 16:51:17 2026 GMT
Subject: CN=6974f886-fe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:11:32:61:68:f2:de:6f:2a:24:da:0c:5f:
44:8a:6c:f2:66:6c:49:41:ef:98:21:5b:85:ff:f5:
85:50:0c:13:c2:a1:83:f6:9b:94:9b:49:72:02:c7:
6b:fe:7e:8d:7f:af:4e:49:fc:e0:35:f1:92:0f:60:
4e:df:fe:d1:ab:12:f7:af:3f:b1:f3:b8:a2:94:3c:
53:fc:1d:a7:74:d6:85:42:bb:e3:d3:4f:d1:ed:d4:
59:8d:2e:82:6c:c1:51:70:c6:57:e1:d4:98:8e:f0:
05:5e:f6:22:cd:62:4e:d2:97:3d:e0:56:b6:d1:43:
17:8f:4d:69:7e:bd:9e:b0:ee:de:e1:ac:99:94:99:
55:b1:08:4d:c1:ac:57:e6:f8:d0:31:e5:d2:a8:4b:
7a:84:34:7e:ff:31:bd:f2:f5:d8:ea:37:df:fe:88:
57:b4:aa:e3:78:7c:f4:d0:37:89:20:e1:a7:2a:51:
39:07:d1:be:c8:ac:5c:9b:66:5f:b4:80:ae:01:6f:
14:d6:0c:7d:1c:d9:1c:11:39:4b:03:3c:21:3c:92:
d6:c8:bc:74:08:b9:09:79:9c:61:76:48:f6:61:d1:
16:21:5a:d4:b3:d5:80:ca:d3:30:e9:c7:ef:ea:89:
a4:cb:9e:b1:09:ca:4f:63:36:ca:00:cc:8e:45:7c:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:05:3A:48:C7:A0:9B:95:FF:E9:DA:4D:3C:01:D7:75:64:90:BF
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a4:65:3f:48:9f:ea:69:87:7a:41:15:84:1e:70:36:59:a7:
17:e6:81:de:5b:6a:48:77:c5:ab:3f:7e:60:d5:43:74:84:bf:
87:44:aa:6c:aa:f3:be:29:0a:62:0e:3c:b4:d6:72:45:76:f4:
c8:4a:c6:c7:53:83:77:f3:98:49:40:40:c0:c5:b4:00:16:10:
99:7b:ac:05:47:e0:a4:c0:a8:3b:51:2c:b1:56:7f:97:eb:cc:
55:d2:6f:c0:e7:49:56:52:26:c3:31:53:b0:bf:0e:3b:04:0d:
95:d6:ed:4c:eb:17:ea:d2:4d:bc:94:cd:d2:64:6a:95:d8:aa:
88:9e:44:52:6c:82:3d:d8:e6:91:f6:75:d4:96:fa:99:d5:83:
0d:69:6d:07:a7:e1:ab:7d:5b:ef:36:1e:9e:44:ee:26:b3:7d:
7e:c5:02:b0:be:e3:f2:66:88:da:14:86:1c:f6:54:73:f0:47:
2c:99:33:67:d0:1f:70:43:04:e5:25:d7:03:b2:51:8c:a3:1a:
17:55:4e:cd:73:fd:d3:40:11:21:2a:94:01:b1:c2:3b:a8:10:
34:f3:77:05:d5:bc:32:ae:52:39:47:25:50:ce:d3:89:60:33:
77:90:a1:10:97:b7:7c:c4:11:75:e9:41:9d:f2:12:94:e6:c8:
7f:e8:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:08 2026 by rpki-client