This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier: 2IzQKXpz60bF/tL6SCXjY7U9OXpFbKy5shOWA7lKehY=
Subject key identifier: F5:12:F2:ED:E5:03:33:76:9F:C8:A1:45:59:10:21:0D:E0:A8:FF:B0
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number: 02B0
Signing time: Wed 07 Jan 2026 00:36:02 +0000
Manifest this update: Wed 07 Jan 2026 00:36:02 +0000
Manifest next update: Wed 14 Jan 2026 00:36:02 +0000
Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: 60co2IvuoMuo8nRBBsi3sN6WzVSy9ytSBUb+4nTWlcY=)
2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 00:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Validity
Not Before: Jan 7 00:36:02 2026 GMT
Not After : Jan 14 00:36:02 2026 GMT
Subject: CN=695daa72-2215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:cd:ba:6c:af:81:02:71:b1:26:29:19:34:
8f:dc:20:58:d8:a3:b7:a0:c1:b1:c5:54:1e:51:8b:
03:7f:cf:d4:54:1b:50:1f:cb:99:e6:ae:cc:b5:23:
d2:fe:b3:e6:5d:91:9e:9a:e1:4c:08:c0:3a:84:10:
9d:8e:fc:a4:ab:18:23:4f:83:33:6d:cd:39:f7:94:
43:03:51:f5:44:5c:cf:ad:4e:25:d7:e1:2f:b4:45:
d4:68:6b:c9:71:dd:eb:4a:74:b3:c1:82:eb:2f:ca:
28:6a:18:52:cb:7a:17:49:22:40:ff:9d:db:61:bb:
e9:46:1d:93:38:08:22:c4:92:7a:a2:8f:38:78:4b:
dc:b1:19:55:4a:70:c3:67:fb:e7:6e:4b:ac:f3:d5:
4d:e7:42:78:e3:a6:4c:8f:78:64:28:07:f1:57:6d:
0d:e0:e6:21:78:36:69:0d:c8:41:c2:01:f4:f0:08:
8e:7c:8f:b5:28:5f:7d:45:c7:3c:a8:ed:ea:df:32:
26:0b:76:ee:b0:1c:c2:46:e6:b8:a4:51:5e:43:27:
80:0a:ca:1a:f5:c0:06:1a:09:5e:8e:67:f7:d2:ab:
e7:ed:09:4e:c2:9a:5e:ae:c9:a9:10:5f:4b:24:db:
f7:01:dc:e4:c5:06:2a:9b:5e:21:55:79:07:f2:6f:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:F2:ED:E5:03:33:76:9F:C8:A1:45:59:10:21:0D:E0:A8:FF:B0
X509v3 Authority Key Identifier:
keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:53:c1:ae:3e:9a:73:92:68:84:60:dd:08:72:3a:1e:cb:
44:01:88:76:5c:76:15:a6:58:31:8d:60:56:2e:e8:6d:e7:a6:
bf:23:44:8f:99:aa:a1:f5:d2:cc:b3:3a:69:8a:3c:8c:97:7f:
93:e2:e9:8c:a3:94:3d:3a:0d:4d:8d:9b:00:91:49:dc:a1:8c:
4c:43:f5:f3:b4:58:68:20:f9:7f:a2:96:db:b2:90:68:46:a2:
8b:9f:9d:ab:10:36:8e:56:c5:b1:fe:57:3d:97:92:b2:34:36:
c2:c1:ca:fd:20:1d:05:58:cd:eb:cd:68:c6:8e:1e:5d:f7:a2:
6f:61:0d:71:04:74:b6:5d:af:d9:8e:7c:f7:f6:7d:d6:b4:c9:
1b:9d:a6:dc:40:8f:69:a2:88:33:aa:20:e3:01:dc:f4:d6:dd:
62:7e:91:57:47:5f:2c:e7:50:0b:d3:25:4a:45:a7:38:8c:b9:
2b:fe:c7:81:92:5e:d6:8b:81:c1:4b:e4:a0:41:13:83:c3:48:
b4:53:cb:04:a1:7a:7c:df:df:14:56:6d:a3:8f:30:ea:26:87:
0b:68:49:92:6a:cb:29:60:40:06:a0:79:4d:95:60:4c:ee:d2:
7c:c5:36:4a:0b:84:91:23:b8:6a:86:ca:9f:c3:c6:13:25:2f:
9c:42:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:00:03 2026 by rpki-client