This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier: Z/M+AV7UCTg91fvrdpcqiAoyr2RzZPD3t3QNAjXxROo=
Subject key identifier: FA:2F:01:84:6A:69:78:95:72:79:32:AA:14:DE:25:53:66:9C:94:16
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0C4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number: 0C23
Signing time: Mon 26 Jan 2026 18:21:25 +0000
Manifest this update: Mon 26 Jan 2026 18:21:24 +0000
Manifest next update: Mon 02 Feb 2026 18:21:24 +0000
Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: UfgYF2xnK5Aeo110vldx6mtJYAxOIeBxug1/4XwQM7U=)
2: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: FwgzcLz0ulXMRpFgzbkDkNByfvZ6IbVg9iuXnMBlPn8=)
3: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: Sl2tMoYhByQON3OQDfsgcEffVFzoKHXdVYWVXDvcBs0=)
4: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: Q126CFPL/s25JF6KvmlAOFjv6RGeyGcvlBD4fQKaIYw=)
5: DAFD055806F811EC9558C827C4F9AE02.roa (hash: ybKZLsY+57p/scYl21b5JlU/OiypmhYbCt17K0vvM+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 18:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Jan 26 18:21:24 2026 GMT
Not After : Feb 2 18:21:24 2026 GMT
Subject: CN=6977b0a5-b9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:52:f8:dc:c9:de:d1:21:dd:49:11:c4:15:
11:c8:49:5e:01:27:64:df:c2:b7:9f:6c:d2:89:f8:
40:b8:8e:b6:92:a1:30:71:64:4d:cf:a1:cf:04:a3:
6c:0b:aa:2c:16:e7:12:b0:76:21:f3:4d:d3:5c:92:
4e:72:e8:39:60:5a:60:5f:44:5d:02:1d:a9:27:a2:
9c:ae:0c:de:a1:49:9c:62:1f:29:8a:9b:c5:ad:c5:
d1:79:a6:5b:b6:62:96:61:57:5d:4b:ac:ab:10:6b:
3a:f5:fa:00:d6:80:3e:d1:db:10:8c:ff:6a:5b:60:
12:cc:b5:13:51:49:a4:49:0a:0b:5e:14:47:e2:da:
99:d3:1a:28:46:9d:6d:1a:e6:b9:6d:be:bd:16:f9:
c2:a0:41:29:30:ad:67:37:3e:b5:5e:83:79:55:27:
32:79:64:3c:bd:2f:df:66:72:56:f8:8d:18:aa:52:
ae:37:7a:22:df:c6:a9:3f:31:3e:fa:a9:48:79:23:
99:d8:2b:84:2c:28:32:f7:bd:f7:e4:ba:67:fa:d6:
60:55:49:fa:89:aa:fa:0f:5d:ef:04:b0:d7:25:2f:
f7:c1:a5:a7:5f:ca:5b:aa:64:ba:60:60:9e:44:32:
48:88:54:f7:ce:d0:70:61:c9:96:31:c5:54:bc:42:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:01:84:6A:69:78:95:72:79:32:AA:14:DE:25:53:66:9C:94:16
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:53:d6:dd:ce:48:18:eb:e6:6d:5c:d5:36:08:93:dd:56:f2:
45:04:15:9a:23:d9:0b:7e:53:16:52:61:e1:be:14:dd:bc:e4:
ff:b6:85:00:07:96:2a:74:42:3f:5a:71:8e:81:be:76:0d:1d:
3e:51:4c:90:18:56:7e:9d:b4:57:66:29:16:27:67:74:6b:4d:
b2:a6:fa:ec:a5:fa:53:cc:4e:0f:5f:93:0b:c8:4e:1c:e5:34:
fc:c8:1a:d6:b4:f2:d7:e8:1b:3c:e0:26:c2:a5:89:4f:b0:f3:
6c:f3:b4:90:2b:61:ed:80:9b:bd:53:29:99:95:37:85:28:b0:
d8:25:a3:94:e5:fb:cb:9e:71:9b:f0:17:72:6a:fb:ac:d2:7c:
b5:cd:68:1d:0f:a1:2b:47:26:6d:9d:56:04:71:53:d9:6f:20:
44:b6:b4:97:46:3e:65:e4:b1:b3:a7:36:2c:70:c4:a9:e5:79:
4d:af:29:74:fc:be:3f:09:7d:24:a5:9f:7f:57:8c:9a:27:fb:
80:6d:c3:11:d9:47:f4:cf:b6:65:7d:18:67:5e:2b:22:04:43:
03:7e:b9:3a:68:c0:5c:37:36:d1:1a:7d:fd:b9:10:f0:2c:d7:
6e:af:62:be:99:16:99:e1:d8:cd:e2:af:a1:f8:92:ce:ce:33:
ff:a8:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:37:39 2026 by rpki-client