This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: 4V0YakaiCCBCSFHEVy9XST3qUnRNEAqkPcI9N9bXcqc=
Subject key identifier: 22:05:CE:47:67:9F:B2:8D:65:0D:A6:09:0F:BC:44:6F:14:62:20:19
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 0520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 0506
Signing time: Sat 10 Jan 2026 22:57:46 +0000
Manifest this update: Sat 10 Jan 2026 22:57:46 +0000
Manifest next update: Sat 17 Jan 2026 22:57:46 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: EYbZCypDmMyFNYVya6VmjeRNO+eODqF+cJeZSEYlst0=)
2: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=)
3: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=)
4: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: Jan 10 22:57:46 2026 GMT
Not After : Jan 17 22:57:46 2026 GMT
Subject: CN=6962d96a-0521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:5b:7f:0c:67:5a:e3:6c:34:60:44:4b:d7:
16:f5:03:fe:76:11:90:cf:ee:73:72:80:a5:86:6b:
06:66:52:f6:9b:99:8d:39:c8:d4:7a:3a:44:b4:a2:
8e:3b:4a:1c:f6:89:d1:d2:b3:85:8f:90:27:09:6f:
81:ca:fd:6a:a6:0e:d9:99:de:5d:6d:3d:51:7f:a7:
6a:11:4b:37:f3:23:2c:cd:41:ea:e0:12:70:e8:3f:
16:cd:ba:52:e5:4e:06:49:f6:82:cd:35:c3:e4:d0:
1f:d5:c2:43:29:d3:5f:b9:37:f8:6b:75:cf:bb:ac:
c5:a1:a1:b3:73:ed:8a:92:5d:60:5b:b0:c0:22:d0:
cd:98:db:ea:aa:6a:2d:44:cf:b7:59:be:31:fe:87:
a0:45:2c:9e:4e:95:57:95:0a:6f:9b:11:99:c9:6f:
d1:88:71:00:78:a3:1f:58:f7:7b:84:74:df:22:74:
e8:ec:66:6b:ab:66:7b:db:f8:7b:57:71:00:c7:c7:
b2:c1:6b:00:ae:f9:c3:35:f3:a7:75:e2:95:38:03:
db:0e:4e:b6:bb:17:62:9e:4d:38:bc:51:2e:8a:4c:
bd:12:99:1f:c1:1d:b3:3e:43:5f:be:e7:93:da:76:
6a:39:4e:f4:ba:db:52:78:bc:31:f3:3b:c8:da:e1:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:CE:47:67:9F:B2:8D:65:0D:A6:09:0F:BC:44:6F:14:62:20:19
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:b7:ef:e3:e2:38:44:6d:4c:5d:76:0e:d4:aa:9d:2f:d5:
43:76:64:9e:6a:be:c1:2d:47:ac:68:ed:96:6c:be:1e:dd:4e:
d8:fb:6d:22:1c:4f:12:06:5e:d5:d6:78:52:1d:24:89:3f:9a:
7c:80:f7:e0:6a:83:4f:6b:b9:ed:53:c3:27:d0:be:04:59:6e:
98:57:47:a4:9b:05:83:f0:2e:2a:1c:59:14:b4:51:81:bd:9e:
40:91:c9:cc:b9:72:f6:d7:90:fb:a0:27:44:8e:a7:c6:c3:37:
4f:a7:f1:8d:eb:30:5a:5d:60:18:99:9c:e9:93:77:f2:82:59:
ea:0a:1f:3e:73:8d:f6:9e:a1:d2:c8:a9:20:19:f0:65:3e:d2:
7a:34:a2:35:3e:35:e8:d6:1c:f9:01:07:27:77:48:2c:f8:a8:
3b:d4:c5:00:7a:25:67:49:b4:6f:0d:3d:2c:0b:1c:34:e9:9b:
29:8b:48:28:2c:df:c0:62:86:02:31:52:cf:76:8b:85:db:bd:
6f:4c:82:22:19:90:bf:88:8e:da:45:e4:61:12:03:40:77:47:
ff:35:ed:74:72:6d:6d:50:ab:2c:65:24:04:62:c3:b7:bf:f5:
26:72:37:13:87:92:9e:1f:18:e8:00:26:3d:fb:b5:db:7f:21:
15:f0:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:04:20 2026 by rpki-client