This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File: 1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier: 0FXXuMi503vuOwknLpTQofFHU+pEPQr/AJJ0hx5jh8A=
Subject key identifier: 71:59:1E:DA:F0:EC:0B:71:76:E6:1C:EE:48:70:27:D0:15:29:B7:AD
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number: 5F
Signing time: Sat 17 Jan 2026 06:12:43 +0000
Manifest this update: Sat 17 Jan 2026 06:12:43 +0000
Manifest next update: Sat 24 Jan 2026 06:12:43 +0000
Files and hashes: 1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: B420RDKnGtKVJUtO7FxtZHHByzOkjvmJYI8jEer/hdk=)
2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Validity
Not Before: Jan 17 06:12:43 2026 GMT
Not After : Jan 24 06:12:43 2026 GMT
Subject: CN=696b285b-caab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:9f:d4:0b:ea:d0:c2:76:d6:e5:58:67:41:
c2:b3:09:ba:5d:8c:e1:9a:03:b9:06:73:10:b0:ba:
17:8b:3f:e3:b4:12:5e:2d:d2:4f:f2:e4:12:f7:65:
77:f5:04:d8:e7:81:0a:b3:ed:96:eb:5e:ed:d0:ff:
b1:0e:29:a4:62:be:98:3c:1d:eb:34:3f:e1:2f:20:
25:e4:a4:eb:fb:7d:29:8b:d3:32:5e:da:5f:ee:30:
91:e2:04:b6:1c:82:cf:12:8b:ae:79:c1:7a:05:95:
1a:b2:cf:ed:a5:a0:b8:c4:90:b1:13:d1:69:a6:19:
61:07:2b:f7:eb:54:6c:d8:8d:5f:4c:31:2e:66:e7:
8e:81:6e:26:cf:ae:8d:96:4a:ad:c7:79:2f:e7:7a:
51:d4:d6:21:de:55:49:00:28:aa:18:f9:2b:b1:dc:
a3:7f:76:47:61:2a:4b:d3:ce:6b:cd:25:89:3b:5f:
44:32:05:3c:c3:09:36:54:79:00:34:ac:d6:a6:10:
2d:d6:57:fb:b5:b3:74:79:f8:d2:35:c6:c5:9b:b4:
8c:f0:5d:1a:dd:b3:3b:fb:ff:c7:39:ad:03:8e:ec:
a5:49:90:16:2c:4f:08:14:06:0a:2b:c2:c2:07:6a:
12:59:cf:ab:7d:34:20:d5:20:ef:89:5c:7f:94:35:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:1E:DA:F0:EC:0B:71:76:E6:1C:EE:48:70:27:D0:15:29:B7:AD
X509v3 Authority Key Identifier:
keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:d4:69:aa:62:fc:44:eb:81:96:cf:91:2b:8f:42:0e:2b:16:
fa:41:7f:b0:d6:31:ac:cd:f5:e8:83:48:ad:40:fd:be:8b:d7:
2d:4d:4d:d5:fc:95:6f:9c:fe:d4:e8:39:2f:1a:0e:37:8e:f6:
c3:1d:73:97:f3:7e:dd:89:35:7c:5c:bd:a5:c1:d7:84:36:72:
0e:0f:cc:f2:01:9b:2d:08:e0:85:77:d9:b1:63:76:8e:34:e2:
9a:46:3d:27:15:83:0b:79:87:db:11:13:19:b5:4f:b8:39:62:
9f:81:ab:58:24:0e:32:a5:a9:93:3f:b9:18:17:51:b4:2a:5c:
12:16:c0:91:27:0f:5c:fe:0f:4a:07:d3:5e:30:5c:a6:5d:b4:
cd:67:4e:b0:bd:8f:3e:66:a5:6f:d0:83:2b:d8:69:c7:c6:55:
77:23:6d:82:b8:16:c0:69:12:9d:f9:d1:11:a3:a0:04:5a:08:
fe:ce:33:67:17:0d:c3:af:27:9d:21:89:2f:71:67:a7:3c:18:
ca:e8:82:01:03:d2:3d:fc:13:e6:b0:4b:cb:7c:69:2e:6c:eb:
d8:74:15:c7:3f:e6:92:02:c8:5a:20:cd:a6:63:e4:5d:41:a8:
6b:a0:84:2e:cb:8f:52:79:a3:b2:16:e1:9e:3f:c3:2f:a0:ce:
7c:1f:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:01:51 2026 by rpki-client