This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File: bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier: uk2OMjGA7qaE04MgoEcbLaUazlg9+Wo3WjJASgrBgi0=
Subject key identifier: 43:13:61:CB:4D:85:DF:C4:B5:C7:70:A2:D8:28:1D:D0:12:F5:40:27
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number: 07
Signing time: Sat 17 Jan 2026 07:05:07 +0000
Manifest this update: Sat 17 Jan 2026 07:05:06 +0000
Manifest next update: Sat 24 Jan 2026 07:05:06 +0000
Files and hashes: 1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: r+N4iFSYvjedHm7vKjx6sLkWyQmP1QarMj3vgAgZRck=)
2: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (hash: T16pI9nQ5IEGjfViZejEMMbrzXbg1Lkkwe6XJbJEgSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Jan 17 07:05:06 2026 GMT
Not After : Jan 24 07:05:06 2026 GMT
Subject: CN=696b34a3-e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:49:dc:dd:f9:f4:da:4a:43:67:53:7e:d8:
6f:63:a9:70:cb:a8:89:fd:f8:2b:c9:70:7d:89:18:
b8:ca:26:4c:a5:88:8a:a1:e9:07:8d:21:98:b8:37:
eb:03:93:1a:c1:d1:78:43:dc:98:1e:55:f3:8c:82:
c4:2d:f2:dd:dc:9e:2b:49:2c:82:b3:18:75:e6:93:
1f:f7:f4:5c:81:46:bb:a9:85:54:44:2d:a0:4a:40:
ff:cc:f1:59:74:17:28:7c:95:65:ed:b6:a9:5b:ea:
a1:ab:2d:07:a6:e9:81:c7:92:a0:89:23:f5:14:89:
a1:35:f6:48:e0:15:45:92:34:42:c0:52:da:86:14:
bf:fc:c0:8f:7a:57:db:c0:fe:99:86:14:5a:b4:a7:
f8:dd:b3:85:ab:e6:4b:d8:42:ed:ca:43:18:d7:45:
23:5c:af:51:f2:20:80:e1:91:3f:73:0e:99:41:85:
8d:a6:cf:be:ef:d5:36:b8:93:27:bd:df:62:d9:de:
05:25:4f:7d:88:40:d5:2a:37:3d:5c:4b:26:2a:7b:
7f:67:2a:b9:0c:70:04:ab:4a:c4:34:64:ea:05:6c:
f9:b1:cc:e4:d5:0a:ba:ff:7c:3b:db:8d:04:bb:7f:
02:62:c3:ba:b9:00:03:2b:f2:19:b9:bc:ca:f2:f5:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:61:CB:4D:85:DF:C4:B5:C7:70:A2:D8:28:1D:D0:12:F5:40:27
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d4:0d:eb:c1:d0:8a:3f:6a:66:a7:77:d2:13:7b:d7:fd:4b:
bd:c8:38:c7:7b:4c:eb:d7:38:7b:a4:22:7e:46:ef:f7:ff:95:
24:cb:cc:55:6a:bc:82:9d:6d:9e:55:15:b8:6f:15:83:0f:86:
03:6f:f3:56:25:4a:26:6b:fe:81:22:a8:fd:1a:04:09:e7:92:
00:d1:ac:e5:ca:85:74:c5:39:d1:79:98:8e:dc:5d:9b:95:b5:
1a:7c:0c:e2:dd:3f:79:39:a8:68:a7:1f:a0:26:2d:f5:e6:84:
db:09:6e:99:4f:15:dd:ef:de:14:59:b2:ee:6b:c2:17:e4:4a:
72:25:9c:81:b1:f8:97:77:00:a8:b2:2f:fa:40:a2:32:00:e2:
32:55:61:4c:e5:fa:da:8f:8a:72:62:d7:5a:e5:85:25:b9:59:
a2:73:b3:1b:c9:09:b7:dc:86:b7:6f:8b:9a:09:ee:5b:1d:87:
e4:f7:85:59:fd:d2:53:c0:3c:fa:07:36:95:c6:2e:11:eb:45:
70:d3:36:a3:b2:36:3c:2c:f3:ce:cc:8c:97:48:0d:c1:5c:1d:
3c:34:10:93:06:f1:0c:93:f9:0e:92:1b:bb:43:18:3a:90:7a:
f7:5b:0c:f6:2e:3b:78:5f:06:b0:27:6f:b2:c5:45:cb:28:8a:
d5:55:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:39:44 2026 by rpki-client