This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File: bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier: T055KN6hoa2+4eztQ8FjLEA9HqL+VlefSuBNAMX1ZCs=
Subject key identifier: 5D:63:B6:92:A8:23:A5:0C:EB:A1:E8:E7:40:9A:9F:35:00:46:7D:25
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer: /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial: 2459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number: 61A2
Signing time: Sat 24 Jan 2026 14:15:31 +0000
Manifest this update: Sat 24 Jan 2026 14:15:31 +0000
Manifest next update: Sat 31 Jan 2026 14:15:31 +0000
Files and hashes: 1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: OhoKtLoFe6woVDY+zr/c09TRDFoYE7fErT4j4U4e7zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9305 (0x2459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Validity
Not Before: Jan 24 14:15:31 2026 GMT
Not After : Jan 31 14:15:31 2026 GMT
Subject: CN=6974d403-0d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:9a:66:b7:7d:21:ca:56:b9:4b:31:f8:17:
13:2c:fc:ba:c8:ce:7f:43:46:1a:6c:f5:41:ca:fb:
cb:ce:81:c6:68:ad:7d:5a:49:97:8e:00:4b:06:eb:
83:45:a4:38:7f:7e:5a:7a:e4:21:7c:10:5e:a6:31:
5f:a7:53:cc:a0:ad:e9:2b:95:1d:bf:72:70:e1:bd:
82:84:3b:a5:2c:bb:e4:2a:2c:43:34:41:3f:e2:53:
2f:31:74:6c:25:f8:4d:4a:53:5b:e3:4f:46:7c:33:
82:ee:1b:ae:a0:1c:81:a8:56:0f:b9:73:20:75:46:
b8:e6:e9:d9:e8:01:3a:2f:c3:16:a3:5d:03:7e:f5:
42:16:14:df:ed:9a:50:74:8c:1b:95:66:a8:04:d4:
d3:6a:6f:3a:b8:84:ff:ea:12:00:d3:ca:b4:cf:a1:
4e:bc:18:e9:15:31:49:bd:41:72:ea:b9:60:62:43:
d6:49:2c:10:bb:7d:a4:56:f8:aa:82:d6:c3:5e:c4:
f5:b4:cd:6c:45:c9:dd:63:a8:1e:8f:b0:10:32:00:
7d:df:67:a8:3f:53:fc:84:91:1d:2b:25:77:99:f4:
02:76:33:20:e8:00:c6:98:93:d9:40:8f:16:4c:bd:
bd:87:d9:8b:c6:46:97:90:1c:f7:fe:44:93:73:31:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:B6:92:A8:23:A5:0C:EB:A1:E8:E7:40:9A:9F:35:00:46:7D:25
X509v3 Authority Key Identifier:
keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:be:87:03:56:9c:7a:d4:6f:47:36:56:9d:e5:6c:8a:54:
70:db:70:67:fb:a4:73:2f:5f:cb:8f:d4:90:83:a2:56:84:56:
28:6e:d1:bb:a0:f6:9f:f6:10:19:a3:bd:2f:57:14:0b:8c:12:
60:75:6a:63:21:2d:00:dd:a0:63:db:27:21:65:50:0e:07:9d:
07:8c:fa:f1:74:87:81:4b:5a:69:64:91:b9:d7:cf:fe:29:38:
7e:64:5c:0c:2d:5a:17:d8:9c:6e:91:7e:d6:92:b6:94:e8:4f:
65:dc:d7:53:6f:ab:bc:bd:11:46:73:96:01:3d:c0:ae:19:d7:
02:52:dc:48:ad:c4:75:92:2c:80:a9:08:d5:0a:38:bb:a2:db:
bc:94:9a:0e:08:bf:4d:de:dd:31:e4:d7:ed:14:8e:7b:a3:6c:
ac:18:db:76:30:09:79:9a:fa:36:c3:4c:d8:82:e2:36:fe:65:
11:08:9d:fc:66:3a:d3:b8:9c:47:da:46:85:9c:41:62:fc:8b:
0e:d4:c4:5c:c3:01:4f:f0:f3:ec:a5:e8:0c:b1:09:5e:c1:97:
73:75:ad:29:78:73:e3:6d:a3:0f:f7:f3:53:e9:5f:b5:01:1b:
4d:dc:ab:93:fa:aa:b3:cd:73:8f:49:ae:57:6f:fa:4a:54:21:
de:66:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:27:14 2026 by rpki-client