This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier: uIF4m5dtGbkuMUgwHqg9l6zbnWfgK8HOtPQXo31VeTw=
Subject key identifier: 79:33:94:5D:44:2D:C3:C6:5E:A9:C1:35:0C:E8:3C:01:D3:CC:AA:36
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number: 2B
Signing time: Sun 25 Jan 2026 06:44:53 +0000
Manifest this update: Sun 25 Jan 2026 06:44:53 +0000
Manifest next update: Sun 01 Feb 2026 06:44:53 +0000
Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: EptEUrFH+a2YFxORoQ/4SVOjggFvYReXIMRKlrm5wW0=)
2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: SOZdm0XRjeKBQo6yKoYuPgXjYHien32Esy3ozHe7Fjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Validity
Not Before: Jan 25 06:44:53 2026 GMT
Not After : Feb 1 06:44:53 2026 GMT
Subject: CN=6975bbe5-445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:37:02:c3:1a:e0:c7:46:87:d2:8c:64:03:
e1:3b:77:5a:cc:55:89:ce:d8:ba:33:59:a4:f9:26:
17:b7:e5:dc:24:b7:66:9b:25:4a:2c:13:19:8e:d9:
92:44:ed:a9:fc:75:4e:d2:df:48:6d:9d:bd:42:e1:
2c:11:a3:c3:6b:86:89:1a:03:d7:ee:8a:11:bc:93:
99:4e:6a:ae:8c:c2:60:cb:dc:e6:17:d4:24:fb:24:
f0:30:54:d2:9f:a2:31:7d:19:75:c3:b2:cb:df:77:
06:bd:f9:8d:21:fc:6e:c5:c5:71:cd:2c:20:49:9c:
c8:35:c1:07:ad:93:95:28:d3:fd:64:ef:c0:fd:41:
6d:ca:ab:bf:0c:e6:a8:4f:27:98:c2:66:bf:ff:52:
6a:fc:10:81:56:98:9e:a7:c5:cf:05:59:c3:69:17:
31:c7:b0:d0:3f:8d:d0:46:2f:68:2b:c5:35:e5:7d:
03:cb:38:0c:51:7a:88:d7:25:2e:da:d6:f3:cc:af:
a1:10:2e:58:82:dd:fe:1a:eb:b3:7b:c2:80:1d:7f:
d2:d5:af:d3:ef:8a:1d:81:ab:15:ee:3f:0a:4a:f5:
c6:f8:0e:9c:77:a2:08:91:84:b6:05:8f:be:07:11:
f1:ec:3d:cb:e7:c7:9b:dc:8d:0f:be:e0:f1:fc:81:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:94:5D:44:2D:C3:C6:5E:A9:C1:35:0C:E8:3C:01:D3:CC:AA:36
X509v3 Authority Key Identifier:
keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:f6:e3:d1:7b:b8:61:e2:50:ec:c5:a7:18:2e:89:e1:63:e9:
52:ce:21:e9:4c:c1:b3:91:26:14:41:20:fa:cd:e8:4c:56:cd:
74:60:d4:2c:0c:67:9b:a4:a0:ed:4f:1b:77:3f:b8:2a:f2:b1:
8b:41:71:5d:76:a6:b9:01:a3:db:29:11:65:f7:4c:6c:00:a1:
41:92:b4:ef:4b:be:55:e4:e7:b1:75:b7:e0:02:c1:7c:a4:c0:
4c:81:74:d3:c6:33:e1:32:ea:1d:af:59:eb:0d:fa:ec:cf:a9:
ae:d6:26:c6:d4:9d:72:b7:fc:4a:01:3a:5b:54:70:75:a3:a2:
94:e9:2b:80:dd:02:e8:e2:c6:d5:34:ae:5d:d1:dc:27:6c:6f:
53:c1:17:16:ff:24:17:6f:48:d2:47:cd:f5:4b:d5:e7:04:67:
3b:ce:de:a9:a9:eb:42:62:5d:3f:e2:ab:91:a0:c3:8d:92:f6:
55:e8:90:d7:27:23:b9:59:3a:a4:ba:8a:eb:73:81:6d:b2:07:
59:5d:1a:77:2c:51:93:48:79:73:4e:cd:9d:2c:c2:25:0d:95:
81:fd:a2:1d:8b:76:bb:16:7e:0b:83:fe:28:8a:d7:c9:0a:60:
bb:7b:35:ed:c4:14:05:89:ef:a1:89:41:fa:cb:84:eb:22:bd:
10:4e:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:13 2026 by rpki-client