This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier: 0kjexZlbGZt4zz7nZwRxTfpNqJTMB4M5fq+phmOJGCA=
Subject key identifier: BA:92:94:77:E6:5D:17:FF:81:4D:BF:32:B9:71:AF:8F:5A:0E:CE:21
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial: 118C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number: 117E
Signing time: Sat 24 Jan 2026 16:56:32 +0000
Manifest this update: Sat 24 Jan 2026 16:56:31 +0000
Manifest next update: Sat 31 Jan 2026 16:56:31 +0000
Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: lJe8qtq5oVDIdy2RN1pGjKNfpckvyRRgs2tCHWudXoc=)
2: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: c359sIW4Z5sIwnmuCSGuu4Dc9VbeC09XzNfroSlImmE=)
3: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: TgAtTR3AGX5ew51UqibGXUzKLmbtmQK+cqf1ZOWJIZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4492 (0x118c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Validity
Not Before: Jan 24 16:56:31 2026 GMT
Not After : Jan 31 16:56:31 2026 GMT
Subject: CN=6974f9bf-4afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:d1:9a:4e:0b:41:b6:31:ca:5d:89:71:b2:
7e:19:15:ad:34:fa:bf:25:4e:a9:f0:11:78:27:66:
9e:10:a1:17:4e:88:68:06:d2:41:14:66:08:65:de:
0c:50:59:9a:e1:99:46:dd:9f:17:8e:2f:b5:a9:82:
b7:6c:37:74:97:ad:b9:a6:30:11:2b:da:a0:8d:93:
bb:e3:cf:80:0d:08:c6:a5:cf:bf:60:3a:ac:77:4f:
0c:61:92:ce:65:9a:7d:bf:53:99:19:87:ce:62:4a:
8b:e6:50:52:20:43:11:40:fe:6b:79:0d:00:dc:fd:
d2:47:3e:9d:3c:8e:7b:b2:99:32:cd:af:75:22:7b:
15:51:6b:21:d3:c2:43:cd:e1:0e:bf:a2:db:e8:17:
2a:6c:61:c5:b8:ce:b4:50:55:a4:9c:cc:a5:b9:56:
85:71:a8:a5:e6:a2:bb:b9:97:c4:66:81:fc:b9:ca:
4f:f1:37:b3:13:04:4e:68:52:fd:e3:e6:d6:8b:d4:
92:00:b4:5d:82:31:15:c8:dc:70:df:83:31:eb:5c:
51:b1:8a:a3:ed:60:a8:b9:67:89:46:b1:ad:a3:9a:
04:a0:e4:58:de:a0:b3:65:49:7e:b4:b5:6e:cd:df:
96:57:80:57:84:18:f4:49:91:c8:bc:17:53:20:45:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:94:77:E6:5D:17:FF:81:4D:BF:32:B9:71:AF:8F:5A:0E:CE:21
X509v3 Authority Key Identifier:
keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:43:63:14:7d:5e:86:73:59:16:22:21:c5:0a:5e:ab:1f:
17:8e:ff:9c:0d:82:59:a3:dd:6c:96:3a:67:7d:8e:a4:97:f8:
ee:e3:69:20:c0:f6:9c:28:27:85:27:39:c0:9a:ec:b4:af:80:
1f:55:20:97:7f:0a:0a:d4:1e:cf:7e:dd:87:72:b5:8f:8e:74:
12:b7:0a:22:e1:75:64:04:b9:ec:06:74:3f:54:e4:e2:7f:35:
a1:9b:8e:d9:e9:c2:8f:09:c4:42:85:3d:43:05:1d:3f:48:b4:
41:c7:8c:db:4a:f2:cd:cd:8e:90:c4:c8:b3:22:6b:1d:65:53:
5e:8f:08:3b:61:06:06:1f:0e:01:0b:ed:94:a7:da:54:dd:b8:
90:72:b6:eb:71:35:bf:c9:5d:96:33:0f:e2:c6:94:0b:3f:8e:
6f:4b:f4:1d:9a:6d:fc:c3:ba:1c:6d:f0:37:83:1c:b7:70:ae:
21:9c:e4:99:c3:f0:ad:e9:e2:38:5c:97:0e:e0:3b:c4:07:5a:
d1:5f:08:29:f2:68:42:a3:49:23:17:19:5e:a0:ec:c8:c2:8c:
f2:89:50:e6:73:8d:db:ae:f1:7c:ae:76:01:f7:2d:dd:a8:36:
7a:9b:f8:62:1b:63:e5:59:88:e9:7f:fa:13:0c:be:c8:99:d8:
10:eb:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:52 2026 by rpki-client