This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier: qDnBKvodccnlrojVq3jNlhcclEJ3UIqVO1NIrGPJdSE=
Subject key identifier: 7F:7F:3C:B1:98:5B:45:C8:9A:87:9A:A4:72:A1:99:81:84:35:1E:2F
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial: 05D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number: 05CA
Signing time: Sat 24 Jan 2026 22:17:37 +0000
Manifest this update: Sat 24 Jan 2026 22:17:36 +0000
Manifest next update: Sat 31 Jan 2026 22:17:36 +0000
Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: IhXQQ7JHJzWnSTi4RYfmB2rT/14cxFuZLVkTdPqCD84=)
2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Validity
Not Before: Jan 24 22:17:36 2026 GMT
Not After : Jan 31 22:17:36 2026 GMT
Subject: CN=69754501-44c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:fc:93:f6:0a:39:28:da:9b:40:15:32:52:
d8:90:84:c2:0a:65:14:9c:51:97:70:29:91:42:e6:
02:db:6f:4f:68:52:d2:87:10:36:11:96:b9:d8:e7:
91:22:1a:88:11:51:d5:5a:da:3c:f1:a3:36:24:22:
30:a5:e5:28:52:0d:e5:1a:5d:53:0b:55:ac:f3:06:
3f:29:a6:a0:45:24:08:6b:9e:96:fc:28:61:e0:d4:
21:2d:b4:3f:c7:2e:69:81:23:62:f8:ba:14:c3:9c:
ed:d4:f8:bb:39:fc:88:4f:c2:3d:0f:99:ce:d8:2e:
74:51:8c:3f:86:df:25:d4:2a:fc:c5:fe:50:b2:a4:
a6:0e:ad:cb:72:55:68:73:fd:e6:59:65:36:6b:f7:
1a:1e:1b:ba:d2:83:0a:4c:02:00:03:cf:a6:d2:2e:
8e:cc:a8:c0:27:2e:cd:91:6c:db:bb:3d:d0:69:8c:
0a:fd:d7:38:2c:3c:88:83:8b:df:b7:f2:aa:33:23:
6f:92:e4:d2:df:33:32:79:32:fa:1a:d3:33:77:a6:
33:85:4c:ba:04:1b:3c:57:b4:f8:44:63:db:75:4e:
58:33:85:4c:af:b3:cf:4c:72:8c:f0:58:e3:9e:8f:
47:68:d9:f2:fe:e0:95:2b:93:b1:45:27:4b:a8:c3:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7F:3C:B1:98:5B:45:C8:9A:87:9A:A4:72:A1:99:81:84:35:1E:2F
X509v3 Authority Key Identifier:
keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:ab:d1:a6:13:36:38:f4:6d:7b:a9:17:f4:44:af:b8:a5:
07:42:a9:b5:20:d4:4c:0b:1a:e7:d3:11:7b:96:8c:9d:fa:9a:
c8:f6:9b:b2:61:95:3d:29:2d:fc:6a:fa:43:7c:31:c1:90:2d:
f5:01:7d:1c:02:25:2e:fa:c3:2e:61:a9:9b:53:4e:19:69:d6:
f2:df:94:e9:04:f4:4c:1d:ac:63:69:a7:87:a9:47:9b:2e:5a:
d9:96:10:d0:9c:13:a9:af:1f:02:ad:6e:8c:e0:a5:28:61:6d:
a8:93:b2:f8:0e:69:e4:60:d0:4a:0f:19:de:08:ef:4e:ca:c2:
cd:54:ea:28:d5:25:eb:ba:90:8e:80:cb:2c:58:03:45:e0:fd:
c0:c2:70:e7:ca:53:9c:9f:b0:dd:3e:06:02:f8:c7:97:a8:56:
ba:03:39:5e:c2:c3:60:ba:5f:79:03:f8:08:f4:c4:1c:48:98:
37:84:29:72:c4:70:38:06:a0:b2:c4:e3:ed:36:a1:f7:2a:ef:
f0:5b:ff:52:36:53:35:ea:80:77:70:f9:cc:6e:38:e6:c3:81:
e6:34:8a:ef:f9:56:56:b5:2b:24:51:6a:4e:f2:c3:a4:b9:b3:
57:22:7c:86:19:47:1b:6c:b2:10:e3:7f:98:c0:b2:b0:74:0d:
37:b7:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:13 2026 by rpki-client