This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json)
Hash identifier: a6fVQS353o8zQCRcUrgvNmL5/e1iwNNBdfYIJFUArjo=
Subject key identifier: 58:C8:57:8A:9A:13:28:B9:51:E8:C6:47:09:0B:78:6D:57:4A:5F:DC
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
Manifest number: 4E
Signing time: Fri 16 Jan 2026 22:39:30 +0000
Manifest this update: Fri 16 Jan 2026 22:39:29 +0000
Manifest next update: Fri 23 Jan 2026 22:39:29 +0000
Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: Vh1jvCOVyatQBRpcmf0RBSZvmK+zWwu6paZfhWNgHcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 22:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Validity
Not Before: Jan 16 22:39:29 2026 GMT
Not After : Jan 23 22:39:29 2026 GMT
Subject: CN=696abe21-538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:1c:1d:53:a3:6d:75:c6:5a:cf:bb:19:a8:
dc:04:58:f1:95:ca:7c:22:36:6e:a0:5a:a5:ed:3c:
72:e5:4c:54:75:51:1c:0a:50:99:f1:9f:78:80:f3:
71:3d:cd:64:9b:91:6c:46:74:68:a4:bb:e4:23:b8:
68:4d:9f:ee:bc:10:d2:49:cb:c2:80:fa:3f:d6:be:
98:b2:1f:14:d0:2f:3a:47:b6:36:6b:7e:ed:7c:ed:
32:9d:44:5a:91:57:8c:34:37:3a:52:32:dc:87:de:
25:1c:f2:21:d7:d3:be:df:02:98:5a:41:d0:4c:e5:
33:42:e0:31:6f:8f:40:74:83:26:52:ae:25:0c:06:
9f:1e:c6:5d:68:86:6f:f8:a3:dd:3f:2e:23:d0:b0:
7c:43:9a:e2:da:9e:7d:a4:c3:30:45:1e:67:8a:f9:
1f:27:75:e7:82:b6:4f:4c:fa:a8:3c:62:c3:73:55:
ae:54:84:b6:5a:6b:2c:e1:f3:23:8d:65:c3:2a:31:
3b:23:d2:b4:c8:d8:07:8e:21:b0:cb:8a:8d:1e:55:
c5:5c:dd:eb:10:65:8f:2b:6c:d0:05:52:2f:e1:43:
13:f9:c8:7e:7a:61:07:da:57:86:cd:d6:11:29:ab:
03:95:8b:4f:b1:30:e8:af:e8:1f:6a:b4:41:bc:0b:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C8:57:8A:9A:13:28:B9:51:E8:C6:47:09:0B:78:6D:57:4A:5F:DC
X509v3 Authority Key Identifier:
keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:43:8c:52:1e:0c:44:5f:a9:63:57:71:83:92:08:f4:74:d1:
8e:52:9d:6d:76:82:87:8a:a9:5a:f2:a5:94:5c:25:23:87:b8:
5b:88:48:f5:12:a7:de:46:0a:d9:c7:3e:c2:1c:c2:5f:8c:35:
44:12:5b:1f:a8:9d:d9:53:f1:1a:f5:85:85:58:a3:fa:ff:f1:
90:bf:dc:24:0d:c9:30:4e:a1:37:0f:8e:d2:7b:e5:0f:ad:cb:
2e:39:d2:37:b0:a9:cf:d1:6a:0d:74:8c:17:f3:61:69:03:f9:
6c:64:4d:67:8b:31:4a:32:0b:c7:ec:89:c7:78:a0:e4:59:0a:
35:b1:74:77:04:65:55:a6:c1:58:6f:75:e7:e0:bf:ad:1a:09:
5b:4c:87:8f:70:3c:73:8c:42:ac:52:69:63:24:24:4a:03:e0:
66:ca:a9:46:fb:84:47:7a:c7:f3:5e:70:f7:39:61:17:4e:e6:
3b:58:fb:f2:2f:0d:6c:bb:f1:25:43:b1:85:ab:b6:fd:ad:9a:
ff:df:86:f1:36:3d:be:1b:90:db:3f:1e:6b:5d:e4:99:91:c2:
fb:ac:63:11:f5:64:fd:65:74:5c:b0:16:b3:1f:38:a0:66:9a:
07:35:36:34:a4:17:b7:22:52:37:36:8a:5c:a1:6e:1a:cb:9a:
4c:b5:35:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD
M0I2QTJBMzAeFw0yNjAxMTYyMjM5MjlaFw0yNjAxMjMyMjM5MjlaMBgxFjAUBgNV
BAMMDTY5NmFiZTIxLTUzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaWxwdU6NtdcZaz7sZqNwEWPGVynwiNm6gWqXtPHLlTFR1URwKUJnxn3iA83E9
zWSbkWxGdGiku+QjuGhNn+68ENJJy8KA+j/WvpiyHxTQLzpHtjZrfu187TKdRFqR
V4w0NzpSMtyH3iUc8iHX077fAphaQdBM5TNC4DFvj0B0gyZSriUMBp8exl1ohm/4
o90/LiPQsHxDmuLann2kwzBFHmeK+R8ndeeCtk9M+qg8YsNzVa5UhLZaayzh8yON
ZcMqMTsj0rTI2AeOIbDLio0eVcVc3esQZY8rbNAFUi/hQxP5yH56YQfaV4bN1hEp
qwOVi0+xMOiv6B9qtEG8C3ZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWMhXipoT
KLlR6MZHCQt4bVdKX9wwHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4
NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO
X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB5DjFIeDERfqWNXcYOSCPR00Y5SnW12goeKqVrypZRcJSOHuFuISPUS
p95GCtnHPsIcwl+MNUQSWx+ondlT8Rr1hYVYo/r/8ZC/3CQNyTBOoTcPjtJ75Q+t
yy450jewqc/Rag10jBfzYWkD+WxkTWeLMUoyC8fsicd4oORZCjWxdHcEZVWmwVhv
defgv60aCVtMh49wPHOMQqxSaWMkJEoD4GbKqUb7hEd6x/NecPc5YRdO5jtY+/Iv
DWy78SVDsYWrtv2tmv/fhvE2Pb4bkNs/Hmtd5JmRwvusYxH1ZP1ldFywFrMfOKBm
mgc1NjSkF7ciUjc2ilyhbhrLmky1Nf4=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:57 2026 by rpki-client