This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier: dp1dyzwf3Bw0P/ueq2+G+T5+gurhBOCsfUgiaaA6x4A=
Subject key identifier: E6:4F:9D:19:7C:FA:F8:57:92:04:5C:5C:D3:F7:0B:15:03:B5:1B:19
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number: 01E2
Signing time: Sun 25 Jan 2026 02:02:58 +0000
Manifest this update: Sun 25 Jan 2026 02:02:57 +0000
Manifest next update: Sun 01 Feb 2026 02:02:57 +0000
Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: 7CPbdsNlPIal6Tbf3/k9ki0Sxa4jCtqJIXoztzYUAvQ=)
2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Validity
Not Before: Jan 25 02:02:57 2026 GMT
Not After : Feb 1 02:02:57 2026 GMT
Subject: CN=697579d2-f8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:a3:e2:5a:fe:64:d4:0f:86:ca:6f:58:8a:
0e:a8:6e:fc:bc:b7:7d:54:ed:16:f6:7c:b1:01:6c:
34:8c:92:cb:40:1f:fc:ec:0f:8d:58:a0:cb:32:1c:
0e:c9:83:6b:c6:68:62:56:5a:36:10:1c:2f:f7:22:
09:77:74:53:0e:1e:48:3d:79:20:d6:7a:fc:d7:cf:
f0:a8:8d:be:4d:9c:8f:bb:56:f9:14:4a:38:a3:5a:
28:e1:df:57:c9:40:fc:70:b0:b7:db:51:b4:ae:ac:
5f:1a:97:e9:22:4c:22:21:9c:45:a7:2a:cd:90:24:
4e:07:05:58:8e:57:2e:3a:06:59:c1:d3:1d:44:9e:
18:bc:5c:b3:b7:4e:57:b6:b7:66:a6:ce:88:90:ce:
5a:a8:18:e7:9f:b3:e4:7c:64:06:3b:b3:92:fc:e7:
c5:ea:8e:b4:b0:21:df:44:ac:80:fc:b1:88:92:01:
c1:c6:25:5f:fc:4c:3b:6a:78:c3:69:c9:ca:ef:8f:
a2:98:53:9b:ac:69:30:1f:3b:ae:54:77:6b:4f:6b:
b9:8a:30:0e:68:c3:3a:43:94:39:a4:6d:9c:4f:38:
fa:82:c4:51:e0:2b:e2:fb:bb:2a:5e:72:84:2d:2b:
47:ff:68:30:60:c0:58:99:73:49:41:0c:84:01:57:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:9D:19:7C:FA:F8:57:92:04:5C:5C:D3:F7:0B:15:03:B5:1B:19
X509v3 Authority Key Identifier:
keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b7:5f:e5:f6:b3:ac:e8:83:e4:36:0f:8b:52:a1:fb:a0:91:
b5:bc:98:89:fc:b8:f1:45:fc:3b:bf:2b:09:8c:8b:67:e7:9e:
5e:f8:61:68:46:43:b4:71:9a:90:f7:b0:e4:c2:e7:94:33:41:
48:12:63:05:a7:f8:5f:52:b0:a8:e6:e6:0c:ef:92:be:72:eb:
6a:5f:f4:2c:c6:9f:2e:f5:e8:a0:4f:55:7f:6c:42:17:1a:3a:
8b:6f:08:6b:f2:68:2e:de:78:bf:2c:25:72:7b:7e:2b:68:2e:
a6:3c:fa:6a:a4:e9:a1:b6:03:ec:5e:78:74:54:3b:7f:62:41:
ca:ea:24:d0:a8:96:19:36:65:8c:41:a6:83:c1:ac:8c:c4:11:
f9:d2:42:6f:71:5b:6f:d1:dd:37:2d:58:2f:39:54:22:95:36:
8c:fc:e4:66:3e:99:fc:26:d0:ea:b1:78:46:84:d7:39:b3:77:
bd:11:af:e2:a2:a7:74:3f:c5:98:f5:a3:bb:cf:33:95:d6:e9:
76:f4:8e:a2:05:ff:90:40:ca:d3:4f:74:7e:ce:34:ca:94:ac:
9c:d9:13:ae:ec:36:25:a9:b9:7d:8d:98:97:41:93:ac:5a:5d:
3d:f1:9f:89:92:0b:93:55:88:21:d3:34:38:14:1f:72:51:e9:
fb:70:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:45 2026 by rpki-client