This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier: cwQE9OcqhwDV44z95NsZzs/GshEMRVJ0Bk8Bdll+cB8=
Subject key identifier: A8:72:4F:27:31:21:A1:5B:8C:AF:B9:CB:8A:66:9F:BC:40:A5:63:9A
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number: 0965
Signing time: Sat 10 Jan 2026 19:32:36 +0000
Manifest this update: Sat 10 Jan 2026 19:32:35 +0000
Manifest next update: Sat 17 Jan 2026 19:32:35 +0000
Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: 3I1B90FpGlvAcWmY0393WDox+HxNot6cOxKOuqGjNnE=)
2: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: AF8iSINyYs/yviryAgwAaGDxt3e7QveTWxIVOikxElk=)
3: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 9+lw98rdFugqdiBRyKbVp2oC9fkpMpQz4UV/k8IjCXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Validity
Not Before: Jan 10 19:32:35 2026 GMT
Not After : Jan 17 19:32:35 2026 GMT
Subject: CN=6962a953-729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:7d:b6:ed:c9:e8:35:88:b5:dc:f4:ad:b5:
d5:6d:f6:ff:9b:43:02:02:7b:65:62:09:8f:45:a5:
70:75:09:ad:d8:71:29:d3:41:67:84:99:58:e0:5e:
ed:22:41:98:c7:76:56:46:a7:f5:ff:d5:ec:65:5c:
a8:71:50:05:20:03:36:51:0a:dc:01:c9:aa:b4:e3:
75:a6:76:22:1c:29:ff:35:54:47:5c:83:5a:d5:05:
51:31:7c:02:b7:52:d0:b4:41:a8:a4:c3:2f:a9:96:
aa:e3:bc:fb:4c:85:91:49:3c:d5:2e:5d:dc:1e:91:
f3:db:d7:b4:50:bf:13:37:ae:4f:c3:f8:6f:34:f4:
ee:98:04:68:54:82:eb:96:dd:c4:68:77:56:a1:8b:
65:bb:74:e0:05:d3:6e:d3:14:b2:6d:d7:1a:d6:c8:
ca:08:90:62:59:5f:a4:f1:3d:9b:1d:51:d5:34:29:
23:f1:56:5e:bf:ae:36:f3:8c:a5:d1:1f:42:80:8d:
ce:22:c1:e5:32:8c:81:78:82:45:49:3d:e7:e8:e5:
14:28:99:5c:b6:23:86:46:f3:06:a0:3e:a7:3e:83:
c7:29:28:37:31:0b:4c:90:e9:3f:81:43:e5:5a:53:
85:db:f5:79:15:c8:8a:9b:67:65:3c:cc:88:2a:39:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:4F:27:31:21:A1:5B:8C:AF:B9:CB:8A:66:9F:BC:40:A5:63:9A
X509v3 Authority Key Identifier:
keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:1f:a9:38:4a:db:97:e1:32:39:01:69:3a:72:13:54:7d:
b3:81:9b:29:f1:ec:2e:35:2c:03:d1:1e:6d:d8:03:7f:9b:89:
df:32:eb:a9:f4:13:c8:43:34:51:81:cc:49:9a:f9:f1:10:7b:
bb:42:e8:79:68:3b:8f:13:74:84:b5:f3:86:e2:92:5c:84:53:
f4:6c:d6:31:f7:12:82:c1:66:a0:d7:76:87:ef:ad:d9:b0:25:
a0:ef:61:26:d6:67:0b:60:81:da:35:3e:bc:8f:87:fd:d1:d4:
c9:7b:01:4e:89:8f:8b:3b:9c:1c:92:d3:e2:d6:dc:51:29:18:
6f:33:c9:f6:68:f4:df:a6:02:8a:34:10:3e:bb:53:3d:24:53:
a0:fa:3a:8b:9c:4d:00:da:64:86:41:9a:30:1c:42:a8:30:da:
80:a0:b1:bd:b0:24:68:91:cc:ca:c3:ae:43:02:ae:5a:03:94:
1e:98:ad:af:bb:8f:25:59:68:91:b7:7c:5d:32:1e:54:54:4b:
ad:75:b2:3a:4b:97:3d:86:c9:e3:89:81:f8:c8:70:9b:99:74:
9e:5c:c7:32:47:01:26:d6:d8:a5:52:e9:3d:ba:8f:bc:f1:ea:
bc:b2:6d:36:2c:ae:76:db:bb:81:6a:fc:59:80:64:f5:3d:3c:
b0:fd:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:36:34 2026 by rpki-client