This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File: F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier: z4E29uF3FQZS+7d8DBN30ETyXYt/4PLxjCYHprRQs18=
Subject key identifier: 24:7E:81:02:F0:F8:28:D2:9F:EC:09:7C:B7:0A:9A:82:E0:C2:53:FD
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer: /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number: 0131
Signing time: Fri 23 Jan 2026 03:41:37 +0000
Manifest this update: Fri 23 Jan 2026 03:41:37 +0000
Manifest next update: Fri 30 Jan 2026 03:41:37 +0000
Files and hashes: 1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: 7M85lPloPfPHD1GkkOWoxtkp/xYv/LVAAQl67qo6BDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Validity
Not Before: Jan 23 03:41:37 2026 GMT
Not After : Jan 30 03:41:37 2026 GMT
Subject: CN=6972edf1-d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:59:1b:54:0f:67:20:b3:f7:9a:5d:98:8a:
af:9a:8b:b8:d4:ad:f1:62:7c:ac:89:95:5c:34:7e:
bd:6b:7b:11:e6:90:15:1c:90:3b:91:36:89:5d:bd:
ee:69:e9:ed:25:6e:dd:7d:18:d7:59:7d:11:57:5e:
60:99:b5:ad:41:4d:d7:77:71:41:5a:a7:01:30:a4:
78:f2:22:54:36:ea:3b:c5:df:7b:8d:f3:b1:34:56:
14:7e:b8:0a:df:fb:2a:b0:a6:8e:33:3a:16:74:a0:
d4:4f:94:35:5e:37:11:17:8f:44:48:9b:cd:90:61:
5c:41:12:8f:63:27:1f:77:ae:1d:cf:37:67:b3:53:
94:26:b2:aa:cd:e8:4d:f4:85:6f:f6:8f:d0:a4:45:
a7:22:9b:74:cf:72:9d:3c:b9:53:ea:83:46:ac:84:
7b:26:f1:4b:72:cf:a5:26:f2:a1:5d:b7:d2:7f:17:
0d:75:08:b8:be:70:4d:19:33:21:c8:0e:f4:26:b7:
21:e7:7f:bc:46:04:f1:62:b9:9e:22:89:d6:61:1f:
5f:7e:56:6c:60:4b:78:95:2a:49:4b:7c:62:6d:06:
90:f1:a0:02:de:24:26:2a:b6:63:02:c6:5a:a2:f9:
da:53:44:66:cf:22:d7:c1:44:61:e3:eb:38:fc:90:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:81:02:F0:F8:28:D2:9F:EC:09:7C:B7:0A:9A:82:E0:C2:53:FD
X509v3 Authority Key Identifier:
keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:c1:8d:ca:d4:bc:58:50:63:c5:b8:32:62:55:c0:84:73:
9d:56:46:96:98:5f:6f:bd:04:d2:b2:12:2d:26:be:f3:72:e4:
3f:42:c6:d7:0b:88:24:fe:dc:35:dd:d7:61:37:4b:72:46:1c:
45:ea:42:10:e4:44:0a:2d:00:1b:da:58:6b:21:53:c1:11:20:
53:3c:f2:df:88:2c:cf:85:11:33:c6:2c:ae:f2:ee:38:8c:00:
f1:73:c9:0f:e6:91:2c:b4:05:00:97:b7:ae:a4:04:78:bd:08:
5b:a2:be:bf:a0:78:ee:91:9c:cd:61:d2:d3:8f:ac:e6:d0:3e:
70:56:7b:f9:7e:a8:1a:83:15:75:c9:75:c1:27:59:8c:80:59:
49:90:9a:4b:44:10:cc:62:00:65:4a:9f:b1:6d:bf:be:8c:c8:
30:aa:a2:68:bd:46:23:05:97:e9:50:79:04:d8:2a:0d:d6:4e:
12:02:5c:cc:a8:5a:c4:e9:15:b3:fa:1c:7a:da:87:19:83:63:
32:d1:09:53:09:83:07:3c:ac:d1:30:74:00:34:31:5c:d9:1c:
e2:ef:6c:cf:5d:3a:0f:65:ef:37:eb:3e:76:8c:6b:a6:0d:5f:
6d:01:65:a4:75:4a:00:c2:4d:5e:d8:20:66:13:a0:8b:f6:73:
05:19:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:56 2026 by rpki-client