This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json)
Hash identifier: wTiw+Dy5D/UUDf6gQHaQT4edqODfgE2Y3+x6RHyx6Jk=
Subject key identifier: 97:ED:EB:C2:69:B4:61:A4:3B:C9:A8:0F:C5:B5:B4:58:65:C8:32:30
Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
Manifest number: 087E
Signing time: Sat 24 Jan 2026 20:01:07 +0000
Manifest this update: Sat 24 Jan 2026 20:01:07 +0000
Manifest next update: Sat 31 Jan 2026 20:01:07 +0000
Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: x5ArmFAkxSsHuJOfFd/laoMF/gAuNsbwhQomoOule5Y=)
2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: CW8cYbzHOyc7H5WlbPNiikLuHtC0kPX2gHGH/bCo7qc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Validity
Not Before: Jan 24 20:01:07 2026 GMT
Not After : Jan 31 20:01:07 2026 GMT
Subject: CN=69752503-0d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:ed:98:93:b0:e1:44:ab:ad:04:3e:b1:6c:
b5:1d:4c:8f:d5:8e:7e:69:7f:08:f6:d3:68:1b:10:
0a:06:ad:03:aa:c5:93:78:61:ab:54:be:ec:d4:2b:
7e:e3:a8:ad:98:db:75:46:cb:b7:89:22:19:33:d3:
bc:23:fa:8f:1b:89:27:e4:52:83:83:4f:4d:11:f8:
02:f3:dc:ce:33:56:39:38:11:90:e6:6d:8d:bc:b7:
0e:a0:a0:fc:14:8e:29:d9:2b:87:80:97:01:67:39:
48:98:c3:a0:ac:22:a9:88:46:c4:1e:b9:67:9a:8f:
4a:35:31:24:8b:08:11:26:be:e0:f8:13:5f:75:69:
31:9e:7a:9a:5d:ed:cf:05:1f:46:55:8e:c7:3d:15:
03:99:58:3d:b5:cd:35:1a:3b:83:89:a8:1b:d7:63:
41:34:e3:4a:43:31:bf:67:b0:60:51:7d:79:d1:72:
ce:94:44:59:62:a5:f6:3c:4e:fc:e6:94:1a:3b:35:
89:8e:1a:e9:e1:68:ce:47:b2:29:f3:52:37:d3:bc:
88:52:3e:9d:06:48:81:24:f9:6c:4f:e4:8e:45:48:
c9:72:38:2a:2c:a0:fa:15:2f:a6:53:3a:f7:51:fa:
5d:92:30:76:86:5c:57:54:63:60:8e:c7:04:72:d7:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:EB:C2:69:B4:61:A4:3B:C9:A8:0F:C5:B5:B4:58:65:C8:32:30
X509v3 Authority Key Identifier:
keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:21:82:cd:9a:71:c4:b8:f0:13:ce:10:db:a6:e2:95:d0:b0:
fc:69:40:a7:7a:fa:aa:5d:21:a5:88:bd:d5:e2:c8:3d:df:d5:
8e:1e:30:9d:1e:c5:7a:16:ee:cb:e9:f3:27:56:c6:38:d0:31:
26:aa:44:d0:5b:de:da:72:b6:21:9c:02:63:fb:fe:f5:c3:8a:
4b:6f:40:2c:b3:60:b1:81:8b:db:c3:34:46:79:f6:a4:04:2a:
0a:e3:ce:e8:dc:f5:b0:63:69:f1:a3:c6:6b:1d:89:64:75:0c:
a2:17:1e:c8:45:09:e3:cc:c3:8b:22:0a:df:b3:b6:1f:74:3c:
89:aa:d0:b2:0f:41:b5:51:6f:a3:ff:c4:61:ea:86:49:a3:40:
40:bd:b2:d1:7a:d6:df:78:b6:a1:83:24:38:ee:5b:2b:4f:f8:
82:ef:d1:37:3d:a4:8b:38:3e:ba:8f:84:00:d7:49:1c:4c:99:
69:79:6e:bd:f0:2f:07:16:cb:0a:75:45:73:7f:22:7b:ea:96:
a6:3e:f4:48:f0:ea:18:92:af:b2:3e:d2:35:af:b9:fd:88:df:
2a:68:ef:c0:b3:97:c4:8f:72:54:e9:8c:5e:25:93:f8:1e:bf:
d7:fc:8b:50:a1:b7:4b:b1:72:70:d4:3a:e9:39:53:4e:98:08:
ff:3b:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:54 2026 by rpki-client