This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier: sqzzrN4TXXiwFiAGZddx2aeK4ZSdZ0GNInvyOD3JBlE=
Subject key identifier: 0B:BE:C4:26:21:D6:7A:F4:2F:16:65:03:2A:0D:3D:85:36:6F:34:67
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number: F3
Signing time: Wed 07 Jan 2026 04:29:20 +0000
Manifest this update: Wed 07 Jan 2026 04:29:20 +0000
Manifest next update: Wed 14 Jan 2026 04:29:20 +0000
Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: rou5T0VEoWsNJBUJWAjaPHCS8m9c06SEEg8I93wLKyM=)
2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=)
3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: BsH1QXXdR63B8qNDLxP6migCbs5bygzeNgwy6naNCOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 04:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Validity
Not Before: Jan 7 04:29:20 2026 GMT
Not After : Jan 14 04:29:20 2026 GMT
Subject: CN=695de120-1d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:cc:55:19:7c:e3:de:b9:3b:cb:04:89:57:
ee:11:3b:f8:1e:65:55:cc:4f:12:70:0b:8b:09:3d:
af:d1:56:a8:30:f8:1f:bc:bd:41:78:50:11:eb:3e:
f6:5b:7d:1d:95:da:3e:37:aa:68:0b:b1:fc:3c:6f:
8d:63:2a:41:8a:4c:41:c5:d9:28:25:7f:69:b5:b0:
30:3e:0d:9e:ac:bd:77:ee:ca:a7:a6:4b:1b:64:8b:
a1:1e:c9:c3:57:3d:9d:08:6b:57:d1:95:26:7e:80:
4e:00:af:91:00:f1:c6:ce:e6:5e:be:30:d7:54:59:
ee:f8:94:ba:5b:a9:1d:c6:9b:e7:87:66:3c:d1:db:
13:03:f8:4c:ec:b6:5b:01:26:66:0e:ed:97:f2:97:
92:10:fd:e2:91:9d:05:04:a9:d4:48:d4:05:4b:2d:
d6:f1:c7:aa:b3:de:a4:71:da:ea:5a:6c:b7:bd:a0:
49:99:62:4d:c4:27:c4:5f:58:98:55:74:b4:df:1d:
e5:e1:73:87:00:03:6b:10:ff:d4:7b:8b:9a:58:41:
f5:e6:b0:fa:5b:8c:08:d1:c6:e0:52:1c:ca:03:e3:
f8:ed:03:d9:89:5d:f7:8b:d7:6c:cd:f5:13:fa:b8:
db:e7:02:65:0d:68:5d:31:f6:42:d3:51:db:95:9e:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:C4:26:21:D6:7A:F4:2F:16:65:03:2A:0D:3D:85:36:6F:34:67
X509v3 Authority Key Identifier:
keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:50:aa:52:9e:8a:d1:1f:72:b5:78:a6:09:6c:b6:af:95:
ad:c7:1b:9a:da:c4:58:f3:69:3a:96:e8:06:a7:c8:1d:96:39:
61:89:21:84:e3:cb:d6:29:32:41:63:55:b0:bd:17:60:bc:99:
53:c4:54:cc:21:2c:be:d3:df:da:32:1c:07:bb:4e:0b:7b:f2:
b9:11:da:0d:3d:38:74:04:85:96:7b:f5:bf:f2:a1:0d:83:95:
a9:c7:08:9a:54:8b:eb:4c:75:e4:bd:ba:2d:c5:79:f3:75:fa:
ca:b4:64:29:6f:b7:b1:37:be:e9:1e:3b:33:06:ff:f4:0b:f8:
77:5a:15:18:cb:7e:40:3c:bd:2b:2f:8d:82:97:41:a0:9e:da:
36:62:12:83:4e:87:6f:88:86:2e:a8:57:1c:8e:ef:5b:91:eb:
0e:08:16:45:8e:c5:75:ef:25:8d:f1:06:e0:94:2f:b8:ed:fc:
77:4d:73:f2:78:d9:9e:93:5d:20:5e:67:98:23:eb:bf:62:4e:
6f:c6:b2:0d:8b:a7:cc:c4:27:75:1c:aa:d5:4c:c0:36:f1:44:
04:c6:7c:ee:2b:02:35:ad:52:05:0c:ab:c6:99:13:dc:37:ea:
56:7b:70:09:a9:0a:5a:c4:9f:29:f4:0d:9a:fc:6d:28:86:65:
34:e2:26:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB
RDg4MzgyRTMwHhcNMjYwMTA3MDQyOTIwWhcNMjYwMTE0MDQyOTIwWjAYMRYwFAYD
VQQDDA02OTVkZTEyMC0xZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ivMVRl84965O8sEiVfuETv4HmVVzE8ScAuLCT2v0VaoMPgfvL1BeFAR6z72
W30dldo+N6poC7H8PG+NYypBikxBxdkoJX9ptbAwPg2erL137sqnpksbZIuhHsnD
Vz2dCGtX0ZUmfoBOAK+RAPHGzuZevjDXVFnu+JS6W6kdxpvnh2Y80dsTA/hM7LZb
ASZmDu2X8peSEP3ikZ0FBKnUSNQFSy3W8ceqs96kcdrqWmy3vaBJmWJNxCfEX1iY
VXS03x3l4XOHAANrEP/Ue4uaWEH15rD6W4wI0cbgUhzKA+P47QPZiV33i9dszfUT
+rjb5wJlDWhdMfZC01HblZ6x3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu+xCYh
1nr0LxZlAyoNPYU2bzRnMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD
NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR
bmdLWUE2TF9KaVd0aURndU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB031CqUp6K0R9ytXimCWy2r5Wtxxua2sRY82k6lugGp8gdljlhiSGE
48vWKTJBY1WwvRdgvJlTxFTMISy+09/aMhwHu04Le/K5EdoNPTh0BIWWe/W/8qEN
g5WpxwiaVIvrTHXkvbotxXnzdfrKtGQpb7exN77pHjszBv/0C/h3WhUYy35APL0r
L42Cl0Ggnto2YhKDTodviIYuqFccju9bkesOCBZFjsV17yWN8QbglC+47fx3TXPy
eNmek10gXmeYI+u/Yk5vxrINi6fMxCd1HKrVTMA28UQExnzuKwI1rVIFDKvGmRPc
N+pWe3AJqQpaxJ8p9A2a/G0ohmU04iZX
-----END CERTIFICATE-----
Generated at Thu Jan 8 11:29:34 2026 by rpki-client