This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier: raqCvqIxBeRTJDP1igfCNxf30Kn3Lx0Hy7zV0eWvNTI=
Subject key identifier: BB:09:51:5F:38:51:FB:9E:DE:68:B8:EB:B3:D4:05:16:E1:01:B1:56
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number: 69
Signing time: Fri 23 Jan 2026 06:01:46 +0000
Manifest this update: Fri 23 Jan 2026 06:01:45 +0000
Manifest next update: Fri 30 Jan 2026 06:01:45 +0000
Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: 2QpIJ4Qh6fvnhQu+qMjr1MraGctOQDVw2A301oHRXPo=)
2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Validity
Not Before: Jan 23 06:01:45 2026 GMT
Not After : Jan 30 06:01:45 2026 GMT
Subject: CN=69730eca-448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:ab:27:e2:35:cb:b0:a3:29:ef:76:61:1e:
19:f5:9a:36:91:3d:82:6b:16:45:44:4e:01:8a:e6:
83:48:3d:ae:93:af:7f:44:b7:26:1b:e2:67:91:a8:
49:d0:f9:ff:80:9a:63:40:e3:1e:8f:a3:5b:c0:7e:
80:26:a7:fa:bc:96:86:31:2f:a0:3d:78:f8:33:c4:
06:1a:57:61:7b:67:a9:bc:87:c8:e9:b1:df:52:79:
d2:c6:e7:14:79:47:c1:2e:46:64:ad:72:6a:2a:35:
45:81:fe:eb:67:fd:f6:f7:cc:79:22:0c:bb:51:c7:
e6:c2:3a:62:45:86:6a:f4:62:d3:57:3a:56:e7:e6:
fe:a4:ab:9e:2a:2f:cf:a7:86:2a:64:63:61:a6:92:
81:aa:2b:3f:79:77:ec:8d:72:e1:24:09:71:6c:ac:
ac:a8:9a:98:64:89:9c:9b:0e:0b:7b:9f:24:3a:96:
b4:5d:c0:86:e6:c1:3a:5e:8d:4a:80:ca:50:34:19:
75:44:f9:57:d4:c9:35:62:62:81:16:81:cb:fa:b1:
36:f3:5e:c0:72:2c:90:a9:1d:9b:93:66:b9:43:40:
ed:d6:f3:36:7c:2d:b2:fc:d3:ca:91:30:d8:c7:7b:
20:6b:01:4e:c5:f7:a8:5c:1d:ca:16:60:9d:32:f7:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:51:5F:38:51:FB:9E:DE:68:B8:EB:B3:D4:05:16:E1:01:B1:56
X509v3 Authority Key Identifier:
keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:09:8a:05:31:67:80:00:0f:d1:56:df:17:30:92:e5:92:33:
5d:7a:d8:b2:9b:4e:58:1b:8c:ca:39:cf:a5:c5:da:ba:30:29:
85:03:b1:ca:35:3a:3e:04:19:e3:5d:77:2c:01:d3:74:6e:00:
34:b4:57:57:34:2a:d5:11:d7:92:f0:61:ee:b4:fc:7c:2b:ba:
37:7b:6f:0c:d5:10:1f:d6:c0:b6:7f:8e:d6:2f:f9:9d:59:82:
18:0a:23:a4:dd:b8:3f:4e:0d:a6:e8:2c:87:46:f2:cd:d5:c0:
dd:e7:8a:44:39:26:c7:02:7e:d9:74:29:24:14:9b:eb:e1:67:
2d:6f:34:b9:5b:65:8f:b5:82:ae:66:45:38:40:ac:6b:54:91:
e5:c1:6c:4c:b8:85:83:e0:5c:36:ef:82:d1:ba:6e:e5:81:29:
17:48:8a:08:25:d0:6d:cf:a8:9a:ef:41:0b:e4:4b:68:61:66:
c4:a1:27:a8:b6:e9:8a:28:f9:97:e0:c4:c9:c2:c5:6e:7c:de:
61:f5:bb:18:ba:5f:da:58:a7:bb:2d:33:c4:c0:ad:81:72:1b:
d7:81:4b:c7:c9:ba:02:46:b5:ec:da:67:9f:73:b9:31:4c:69:
61:43:95:19:2b:2f:58:4c:86:31:4f:24:cf:14:86:ee:dc:48:
99:da:e5:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1
NTM4M0U0RTAeFw0yNjAxMjMwNjAxNDVaFw0yNjAxMzAwNjAxNDVaMBgxFjAUBgNV
BAMMDTY5NzMwZWNhLTQ0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHoqsn4jXLsKMp73ZhHhn1mjaRPYJrFkVETgGK5oNIPa6Tr39EtyYb4meRqEnQ
+f+AmmNA4x6Po1vAfoAmp/q8loYxL6A9ePgzxAYaV2F7Z6m8h8jpsd9SedLG5xR5
R8EuRmStcmoqNUWB/utn/fb3zHkiDLtRx+bCOmJFhmr0YtNXOlbn5v6kq54qL8+n
hipkY2GmkoGqKz95d+yNcuEkCXFsrKyomphkiZybDgt7nyQ6lrRdwIbmwTpejUqA
ylA0GXVE+VfUyTViYoEWgcv6sTbzXsByLJCpHZuTZrlDQO3W8zZ8LbL808qRMNjH
eyBrAU7F96hcHcoWYJ0y9wpHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuwlRXzhR
+57eaLjrs9QFFuEBsVYwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2
NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz
M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx
RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMsJigUxZ4AAD9FW3xcwkuWSM1162LKbTlgbjMo5z6XF2rowKYUDsco1
Oj4EGeNddywB03RuADS0V1c0KtUR15LwYe60/Hwrujd7bwzVEB/WwLZ/jtYv+Z1Z
ghgKI6TduD9ODaboLIdG8s3VwN3nikQ5JscCftl0KSQUm+vhZy1vNLlbZY+1gq5m
RThArGtUkeXBbEy4hYPgXDbvgtG6buWBKRdIiggl0G3PqJrvQQvkS2hhZsShJ6i2
6Yoo+ZfgxMnCxW583mH1uxi6X9pYp7stM8TArYFyG9eBS8fJugJGtezaZ59zuTFM
aWFDlRkrL1hMhjFPJM8Uhu7cSJna5TQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:21 2026 by rpki-client