This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: fC0bETufTyNyPsJecHIRFJozqznZRLeCXKoIYxLsuD8=
Subject key identifier: B6:32:26:64:AC:22:E6:AF:31:BE:29:2A:86:F2:B2:BB:34:1A:F1:90
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 07C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 07B7
Signing time: Fri 16 Jan 2026 20:47:33 +0000
Manifest this update: Fri 16 Jan 2026 20:47:32 +0000
Manifest next update: Fri 23 Jan 2026 20:47:32 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: pByqcQPujBDubCjjtr3N7d3WbRMEAtVCex3QQD59vyg=)
2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: 9PkY3r845C6Gg3gR8AKgajQ8wsvmdGvtBQ6YZXFN9yE=)
3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: D1qcgVGZql5RrIKafCkI4bM9fu5CZK6G546UdqksHKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: Jan 16 20:47:32 2026 GMT
Not After : Jan 23 20:47:32 2026 GMT
Subject: CN=696aa3e4-f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:b3:ec:74:8b:6f:8b:59:9f:ce:07:88:c4:
69:1e:e5:a7:a0:66:8a:11:07:79:80:81:cd:4e:79:
c7:4c:bd:f9:40:9f:f6:29:a8:fb:3b:41:de:d6:7d:
62:4d:e2:19:d3:04:82:d3:78:5a:08:0a:09:ea:97:
9a:24:b0:15:73:0b:4d:6c:87:76:2b:3c:ae:9b:5a:
21:c5:97:5b:15:aa:63:25:a9:09:50:66:d7:2f:ca:
5f:52:9d:f6:7f:11:a5:cd:92:bd:41:e1:db:00:22:
74:a3:5c:03:e0:25:3d:91:80:6c:64:c3:bf:7a:ba:
fa:78:96:46:20:14:5d:e1:ab:b9:8d:6d:74:45:97:
58:17:15:9f:eb:24:68:82:c4:4f:b2:e3:3d:bb:6d:
2b:ec:e5:5d:4f:16:42:a3:bd:1e:75:a7:19:a5:14:
6a:74:f4:0c:39:77:7f:03:c9:98:4c:c9:57:4b:b6:
ca:51:b8:e4:8f:d2:68:53:59:eb:13:43:06:13:ce:
0a:e5:8d:0b:9b:d9:4d:a8:0b:6c:e4:49:64:06:a5:
4d:a8:a3:1c:24:71:49:1b:cd:b6:3b:5d:7d:c0:c9:
ae:bc:38:a0:f6:11:94:e6:6a:1b:6d:23:5e:7d:28:
1e:f9:23:19:d2:45:68:25:a5:89:5d:eb:78:93:6f:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:26:64:AC:22:E6:AF:31:BE:29:2A:86:F2:B2:BB:34:1A:F1:90
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:fe:e0:47:eb:8c:ab:c1:e3:07:18:aa:5a:e9:a3:44:40:
96:9e:30:b9:be:8d:9a:b5:49:71:d1:55:04:0b:4f:96:ee:1a:
65:8a:e0:92:f6:e3:25:09:48:8f:08:22:a6:20:4d:c8:09:ce:
66:d5:fe:cb:c2:37:0f:a3:7f:0c:20:03:44:fb:44:02:da:16:
46:37:a5:09:40:90:9b:23:ca:ca:53:2c:6a:39:ad:8f:fe:79:
cd:d8:db:28:64:c0:35:e1:fb:72:45:64:12:52:b2:fc:38:de:
13:a0:87:c5:ca:64:bd:65:84:cb:52:f6:dd:0d:64:5b:0a:3d:
c9:19:d6:88:65:58:e6:fd:cc:22:48:f6:77:e8:7c:8d:b3:9b:
de:af:22:78:c2:cb:af:66:c5:d4:e9:d8:5e:7b:8a:19:dc:d5:
97:fe:1d:2e:4f:b7:f0:17:18:3e:bc:ef:85:9e:d0:86:d3:84:
95:00:e0:6c:d5:6e:4d:59:2f:74:f1:b3:cc:1c:c0:0a:ac:17:
10:02:26:fd:c7:cd:e4:ab:ba:22:3c:db:39:a1:70:be:25:51:
60:ea:4b:66:a5:fd:16:66:5e:79:48:e1:07:38:85:f3:4b:0f:
98:35:86:ab:af:1b:74:e4:a6:69:e4:45:31:43:e7:4a:7b:dc:
f0:9a:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:10:06 2026 by rpki-client