This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier: RyzeLHO1OenH35mXnObToLMigkK7NU3HwogD1sMf81g=
Subject key identifier: DA:0B:D9:A0:75:57:21:3C:3B:C1:ED:FE:41:01:CB:61:07:C9:8D:C8
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number: 01C5
Signing time: Sat 10 Jan 2026 15:37:17 +0000
Manifest this update: Sat 10 Jan 2026 15:37:17 +0000
Manifest next update: Sat 17 Jan 2026 15:37:17 +0000
Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: ecZC4HuPWTWttxT16ECF+o0ydLR/bLg2qypLR+BGJo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 15:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Validity
Not Before: Jan 10 15:37:17 2026 GMT
Not After : Jan 17 15:37:17 2026 GMT
Subject: CN=6962722d-c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:e7:40:94:62:75:5f:b5:45:4e:83:e3:69:
dc:03:30:d2:69:f3:53:93:d1:16:a6:66:75:3a:84:
d9:cd:dc:10:8f:f1:a3:20:ca:f7:68:07:8a:27:97:
ad:b4:c2:61:70:25:c0:30:66:17:53:63:f9:2a:85:
ce:b4:c4:2b:83:2c:e1:3a:29:d3:cb:d0:9f:8f:89:
94:d9:77:8f:44:f5:35:80:25:1a:2e:fb:26:ea:e8:
eb:d4:21:85:a9:de:a7:0f:09:14:a9:56:2f:05:97:
b3:58:2c:7c:17:ee:4b:8a:36:2f:12:02:b5:ee:ef:
ad:01:48:18:76:bc:5c:d6:18:5d:d5:c8:a0:33:e9:
81:cf:9e:ca:f4:13:42:f9:59:fe:99:0b:99:70:b0:
17:0b:7b:30:d4:50:e5:a9:ef:97:09:22:b0:7f:f2:
2a:3d:68:69:1f:bb:24:42:2a:38:55:ea:40:77:08:
70:a0:e2:c3:a5:b9:26:ca:51:ac:56:e2:ef:de:99:
4b:41:8c:fd:07:4b:00:3c:88:a7:b3:87:fb:55:e3:
44:88:77:b3:c8:62:a4:69:fb:bc:96:d9:ad:f2:6b:
bb:cf:f3:d7:e4:01:d4:25:3a:c8:de:39:9e:53:a6:
c4:26:c2:66:bb:06:2c:25:0f:9b:5d:d8:dd:9e:78:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0B:D9:A0:75:57:21:3C:3B:C1:ED:FE:41:01:CB:61:07:C9:8D:C8
X509v3 Authority Key Identifier:
keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:24:d3:5e:2e:9d:6f:47:56:23:f4:35:41:13:90:d2:dc:
68:07:5a:ee:a8:5f:5f:ee:54:43:55:76:aa:4d:ac:af:dd:0c:
87:9e:a5:52:62:29:a4:b5:5a:7c:ee:99:1f:4b:e9:ba:96:7a:
b8:b5:b8:03:07:c3:bf:55:6b:ea:f8:b7:04:2c:3e:96:ea:5a:
03:fd:ac:11:99:dc:ab:3c:3e:ac:06:9d:b0:5f:03:8c:dd:5f:
08:f8:6b:7f:e5:64:d2:ce:bd:65:0f:dd:4f:0a:4f:f8:d2:dc:
83:87:b1:32:63:f0:b5:c0:ec:f9:9e:5e:15:00:8c:36:83:10:
b3:51:68:a9:d7:b5:bd:07:91:21:f5:de:3f:35:a6:49:23:7c:
7f:b6:b4:2f:2a:8a:33:be:6d:0f:ee:50:3a:8e:7b:b1:a5:dd:
3b:0f:b1:ac:41:09:ae:e5:86:e9:3f:69:e2:50:8f:c1:1e:e7:
68:b4:be:8d:f3:00:ea:4d:7c:2c:c6:a4:0b:eb:ec:19:1f:27:
e2:cc:21:13:5c:a2:fc:30:74:0a:e5:52:96:09:e6:8f:7f:df:
b0:62:cc:71:7f:a6:a5:0c:f3:9e:a1:79:a4:f0:df:b6:ab:1e:
a6:34:46:0a:ad:f2:f5:85:8d:21:95:14:8f:fa:61:75:f7:f4:
63:54:46:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF
QzMyMEJDRTIwHhcNMjYwMTEwMTUzNzE3WhcNMjYwMTE3MTUzNzE3WjAYMRYwFAYD
VQQDDA02OTYyNzIyZC1jMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5HnQJRidV+1RU6D42ncAzDSafNTk9EWpmZ1OoTZzdwQj/GjIMr3aAeKJ5et
tMJhcCXAMGYXU2P5KoXOtMQrgyzhOinTy9Cfj4mU2XePRPU1gCUaLvsm6ujr1CGF
qd6nDwkUqVYvBZezWCx8F+5LijYvEgK17u+tAUgYdrxc1hhd1cigM+mBz57K9BNC
+Vn+mQuZcLAXC3sw1FDlqe+XCSKwf/IqPWhpH7skQio4VepAdwhwoOLDpbkmylGs
VuLv3plLQYz9B0sAPIins4f7VeNEiHezyGKkafu8ltmt8mu7z/PX5AHUJTrI3jme
U6bEJsJmuwYsJQ+bXdjdnnjX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoL2aB1
VyE8O8Ht/kEBy2EHyY3IMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw
QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji
cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoBSTTXi6db0dWI/Q1QROQ0txoB1ruqF9f7lRDVXaqTayv3QyHnqVS
YimktVp87pkfS+m6lnq4tbgDB8O/VWvq+LcELD6W6loD/awRmdyrPD6sBp2wXwOM
3V8I+Gt/5WTSzr1lD91PCk/40tyDh7EyY/C1wOz5nl4VAIw2gxCzUWip17W9B5Eh
9d4/NaZJI3x/trQvKoozvm0P7lA6jnuxpd07D7GsQQmu5YbpP2niUI/BHudotL6N
8wDqTXwsxqQL6+wZHyfizCETXKL8MHQK5VKWCeaPf9+wYsxxf6alDPOeoXmk8N+2
qx6mNEYKrfL1hY0hlRSP+mF19/RjVEbf
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:14:53 2026 by rpki-client