This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: nHf9CM0EL178+GoighapvAWW/BbGaTKTwvw/1TSQyPU=
Subject key identifier: CD:CF:28:6A:55:6E:A2:B7:A3:97:BE:FA:FC:DE:59:56:66:69:B8:E1
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 042A
Signing time: Sat 24 Jan 2026 23:32:48 +0000
Manifest this update: Sat 24 Jan 2026 23:32:48 +0000
Manifest next update: Sat 31 Jan 2026 23:32:48 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: +ZDtQcUZp5g0M3WttGmcYviuhOGVwh2SHWZRnOT3p2Y=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Jan 24 23:32:48 2026 GMT
Not After : Jan 31 23:32:48 2026 GMT
Subject: CN=697556a0-1e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:55:cb:5d:41:96:1e:fb:61:dc:cf:e0:59:
90:99:49:92:00:bc:ad:86:71:11:ac:fa:f7:5a:ca:
76:37:43:7e:99:63:13:18:7f:52:e7:8f:17:92:94:
a4:60:f3:c1:94:bb:90:f2:f8:d8:b3:aa:86:fa:b3:
4f:8c:a5:a6:bc:00:0f:61:04:9b:83:0a:83:bd:66:
77:6d:aa:e0:fd:f9:2e:75:27:dc:60:4c:f3:9e:7b:
64:78:9c:59:47:81:98:0e:99:e4:92:73:23:98:43:
d5:5f:d8:0e:a8:f5:4c:00:f5:4f:8d:0a:b9:92:d7:
15:85:6e:a7:93:0e:12:6d:59:4f:c4:f7:6a:b6:62:
1a:32:11:34:a3:95:b8:3e:99:4f:0e:f5:1a:2b:20:
24:b2:f1:7f:98:ad:ae:18:de:61:c7:87:d7:10:b5:
fb:d3:66:7b:6b:af:2b:be:de:8b:31:b2:01:f5:2c:
50:cd:44:e4:56:31:9f:df:eb:a5:c0:bd:a1:80:3c:
c6:0c:70:65:b6:ce:d6:af:b0:7f:64:74:d1:d4:50:
be:d4:86:f6:08:df:e0:b0:d8:76:3f:22:4a:a0:2a:
46:f5:95:82:f9:e3:44:35:5a:24:b7:1d:08:92:fb:
ad:b0:0d:a3:0e:33:fd:02:41:2a:68:97:0b:ae:57:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:28:6A:55:6E:A2:B7:A3:97:BE:FA:FC:DE:59:56:66:69:B8:E1
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:0c:be:d2:09:82:ad:96:81:df:0c:e7:44:da:f9:0a:43:4d:
f9:e3:ae:22:ee:c7:00:b8:5f:0b:8d:c8:ca:56:b8:b7:59:9b:
2e:87:30:6e:c5:56:b2:e5:16:3e:37:23:2c:27:db:e5:66:a6:
18:8a:b9:d8:ca:f0:36:bc:b4:4c:20:57:d2:92:b1:31:24:20:
ad:89:db:51:cf:3c:4f:e4:d6:df:a9:5b:ff:fd:5c:be:c2:bd:
be:21:0b:88:8d:8c:9c:3f:02:24:79:c5:3e:fa:b6:78:d7:6d:
3c:2f:6d:4c:6a:cc:a0:95:c7:60:96:39:32:08:b8:c8:53:ff:
07:3b:91:cd:62:70:bc:b8:f1:33:d2:ba:b1:1f:d4:32:00:f1:
82:bc:67:eb:65:43:7d:c7:33:ab:d7:b0:c9:59:3e:d1:1f:bf:
67:e7:b7:4c:a7:e2:83:e5:c6:c3:98:28:77:ad:08:b2:a6:9d:
2d:c9:8b:0c:67:34:60:b5:dd:09:76:7a:0e:aa:fe:e7:0a:57:
a0:b5:50:c2:24:93:ec:bb:08:10:36:de:81:5f:1f:2c:34:75:
22:ac:aa:a1:29:82:dc:68:4e:37:0d:43:4a:a2:3c:7e:db:8e:
c2:62:b0:20:b2:f7:d7:6b:9a:eb:be:02:d9:3e:c8:69:9b:bf:
79:b6:4f:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF
OEU4NkQ4MEIwHhcNMjYwMTI0MjMzMjQ4WhcNMjYwMTMxMjMzMjQ4WjAYMRYwFAYD
VQQDDA02OTc1NTZhMC0xZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0xtVy11Blh77YdzP4FmQmUmSALythnERrPr3Wsp2N0N+mWMTGH9S548XkpSk
YPPBlLuQ8vjYs6qG+rNPjKWmvAAPYQSbgwqDvWZ3barg/fkudSfcYEzznntkeJxZ
R4GYDpnkknMjmEPVX9gOqPVMAPVPjQq5ktcVhW6nkw4SbVlPxPdqtmIaMhE0o5W4
PplPDvUaKyAksvF/mK2uGN5hx4fXELX702Z7a68rvt6LMbIB9SxQzUTkVjGf3+ul
wL2hgDzGDHBlts7Wr7B/ZHTR1FC+1Ib2CN/gsNh2PyJKoCpG9ZWC+eNENVoktx0I
kvutsA2jDjP9AkEqaJcLrldDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3PKGpV
bqK3o5e++vzeWVZmabjhMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ
dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDZDL7SCYKtloHfDOdE2vkKQ035464i7scAuF8LjcjKVri3WZsuhzBu
xVay5RY+NyMsJ9vlZqYYirnYyvA2vLRMIFfSkrExJCCtidtRzzxP5NbfqVv//Vy+
wr2+IQuIjYycPwIkecU++rZ41208L21MasyglcdgljkyCLjIU/8HO5HNYnC8uPEz
0rqxH9QyAPGCvGfrZUN9xzOr17DJWT7RH79n57dMp+KD5cbDmCh3rQiypp0tyYsM
ZzRgtd0JdnoOqv7nClegtVDCJJPsuwgQNt6BXx8sNHUirKqhKYLcaE43DUNKojx+
247CYrAgsvfXa5rrvgLZPshpm795tk/t
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:13 2026 by rpki-client