This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier: VSRmNREcCpnBKpxYryLE1mqVCEXuBGXShuqS8HwYWKU=
Subject key identifier: F6:CB:6D:15:D2:D9:8D:E6:C9:04:81:6C:FF:92:91:E0:DB:91:3D:AE
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial: 11A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number: 1197
Signing time: Sat 10 Jan 2026 16:55:36 +0000
Manifest this update: Sat 10 Jan 2026 16:55:35 +0000
Manifest next update: Sat 17 Jan 2026 16:55:35 +0000
Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: Ht93bhq9yYwNvBw7OqxqQehka3iAvdFt8ygMBNKsixk=)
2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)
3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4519 (0x11a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Validity
Not Before: Jan 10 16:55:35 2026 GMT
Not After : Jan 17 16:55:35 2026 GMT
Subject: CN=69628488-8b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:5f:6f:97:a7:be:bf:d4:df:3f:a7:b1:2c:
0f:0c:d1:d5:1c:b2:94:ee:79:0d:93:53:ff:91:78:
82:da:3d:4e:4d:c8:e9:4d:7e:1c:70:82:9e:6d:6c:
c7:79:ce:03:37:9d:e3:33:15:95:27:bf:bc:76:72:
9f:75:a2:57:59:3e:05:e0:36:a1:33:92:13:f9:2d:
95:8c:3f:f3:48:ae:82:fd:4f:51:bf:c6:6f:ef:f4:
44:21:d4:3a:78:c7:e1:31:36:4d:66:b2:f7:51:31:
af:52:1d:e4:b3:ca:54:de:be:cc:ab:2e:79:ca:9d:
6d:f2:23:96:11:59:47:10:ba:1c:9d:5e:92:db:fb:
94:6b:0c:32:b4:8c:f9:78:ac:db:b4:84:64:bd:96:
d9:99:d6:93:de:dc:8a:49:a4:45:8b:3d:86:6f:47:
e9:39:9b:ed:5f:7f:40:75:34:e4:16:68:f8:5b:b2:
a0:9a:a7:f0:fd:f2:d6:98:4f:8e:20:6a:83:71:d6:
0f:86:f7:a3:2d:07:39:26:27:9e:bc:c5:95:60:69:
11:49:0c:a5:cd:0d:72:42:3f:7a:86:fb:5a:26:36:
b3:1f:fe:65:06:87:3c:a3:29:0d:97:4f:b8:d7:83:
cc:07:c4:da:f9:d7:2b:20:1e:2e:78:ff:9d:ea:01:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:6D:15:D2:D9:8D:E6:C9:04:81:6C:FF:92:91:E0:DB:91:3D:AE
X509v3 Authority Key Identifier:
keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:83:71:11:14:66:5f:f7:63:8a:01:ff:14:7b:c7:2d:d9:e6:
39:3f:ab:9b:4c:2e:14:f3:07:d4:bb:3a:8d:fc:20:17:ee:fd:
81:d2:6a:05:5a:8c:fc:82:b6:f7:f6:c3:49:9c:3c:b2:9a:06:
24:19:ff:58:9d:bc:41:e3:78:5c:a7:dd:41:72:0c:28:50:dd:
34:13:ca:ea:b5:b2:4b:5d:f8:74:08:cd:ff:f8:fe:04:f5:33:
1c:7a:9d:5b:98:7c:ef:f4:3a:d0:77:32:e0:00:2c:6f:1f:81:
e1:dd:6b:ec:1a:15:f4:13:be:9f:93:e9:bf:ba:5c:3a:86:60:
ee:2b:50:4a:d0:3d:d0:01:3c:21:23:57:9c:4c:50:ca:89:3f:
c5:fa:36:b4:97:17:0a:19:6e:da:0a:f3:11:56:ba:63:ee:45:
31:dc:e7:3c:de:18:c0:18:27:41:76:f5:dd:bd:45:23:38:46:
2c:89:98:70:8f:36:00:ff:18:17:92:e1:c0:47:80:1b:f0:5b:
2a:19:23:36:2e:45:aa:c2:60:0b:54:1a:c0:2e:61:85:d8:98:
ca:68:82:de:a8:67:03:1a:17:e4:32:9d:c7:ab:5b:2d:fa:eb:
17:be:21:e3:cb:9d:b2:d1:19:36:57:12:33:36:a5:3e:01:9b:
95:fd:79:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE
MDBDNDQ3REIwHhcNMjYwMTEwMTY1NTM1WhcNMjYwMTE3MTY1NTM1WjAYMRYwFAYD
VQQDDA02OTYyODQ4OC04YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntdfb5envr/U3z+nsSwPDNHVHLKU7nkNk1P/kXiC2j1OTcjpTX4ccIKebWzH
ec4DN53jMxWVJ7+8dnKfdaJXWT4F4DahM5IT+S2VjD/zSK6C/U9Rv8Zv7/REIdQ6
eMfhMTZNZrL3UTGvUh3ks8pU3r7Mqy55yp1t8iOWEVlHELocnV6S2/uUawwytIz5
eKzbtIRkvZbZmdaT3tyKSaRFiz2Gb0fpOZvtX39AdTTkFmj4W7Kgmqfw/fLWmE+O
IGqDcdYPhvejLQc5JieevMWVYGkRSQylzQ1yQj96hvtaJjazH/5lBoc8oykNl0+4
14PMB8Ta+dcrIB4ueP+d6gHJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbLbRXS
2Y3myQSBbP+SkeDbkT2uMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG
MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2
WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQg3ERFGZf92OKAf8Ue8ct2eY5P6ubTC4U8wfUuzqN/CAX7v2B0moF
Woz8grb39sNJnDyymgYkGf9YnbxB43hcp91BcgwoUN00E8rqtbJLXfh0CM3/+P4E
9TMcep1bmHzv9DrQdzLgACxvH4Hh3WvsGhX0E76fk+m/ulw6hmDuK1BK0D3QATwh
I1ecTFDKiT/F+ja0lxcKGW7aCvMRVrpj7kUx3Oc83hjAGCdBdvXdvUUjOEYsiZhw
jzYA/xgXkuHAR4Ab8FsqGSM2LkWqwmALVBrALmGF2JjKaILeqGcDGhfkMp3Hq1st
+usXviHjy52y0Rk2VxIzNqU+AZuV/Xm7
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:06:24 2026 by rpki-client