This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
File: fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft (raw, json)
Hash identifier: eb8E0OcNrQlj2sZw6arsGvb76mZUoeF1/W91B3QfspI=
Subject key identifier: 06:5D:EE:FF:0C:69:C9:0C:A2:8E:20:89:37:F8:F1:52:C1:F0:1E:9C
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Certificate issuer: /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
Manifest number: 20
Signing time: Sun 25 Jan 2026 06:56:01 +0000
Manifest this update: Sun 25 Jan 2026 06:56:01 +0000
Manifest next update: Sun 01 Feb 2026 06:56:01 +0000
Files and hashes: 1: fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl (hash: +9NVl72oU5rRoRrhMUpXRBL9QgXtLhdpk9QXj2DH2zM=)
2: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (hash: GNkRLJn8XSANTINmPiJ00h7rw6CLmDGth09g+Ndrvu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Validity
Not Before: Jan 25 06:56:01 2026 GMT
Not After : Feb 1 06:56:01 2026 GMT
Subject: CN=6975be81-5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:b4:68:53:a5:95:b1:60:58:16:9e:bd:53:
51:dd:a5:08:c7:44:ec:6c:26:8c:6a:7b:d6:b8:82:
09:b8:71:80:2f:4d:20:70:ab:76:a4:46:05:cf:a9:
77:af:2e:d0:f0:f5:d0:53:32:60:21:3c:fe:1b:b8:
75:c9:d4:84:4e:4f:e8:d4:84:38:78:8b:6f:b8:f3:
d1:6a:ca:99:26:9b:1c:2d:fb:0b:53:fa:70:ee:ca:
9a:6f:00:b4:2b:84:aa:a6:24:1e:b1:e0:c0:fe:df:
36:4e:f9:c6:03:2b:15:74:92:c5:68:05:6b:92:33:
59:37:6a:f6:23:34:04:06:fd:5f:b8:82:78:32:77:
fa:50:f1:de:f6:af:40:52:73:b8:5f:75:b2:1c:75:
9a:a9:ed:2d:0d:32:96:79:68:aa:79:12:47:3d:6a:
90:db:18:62:44:8b:96:ba:4a:c7:07:16:57:a4:50:
01:50:14:28:45:2f:7a:57:d9:03:66:4a:b0:ec:74:
86:b4:ca:9b:55:d7:0a:03:dd:b6:65:3d:ca:2e:19:
29:f5:f5:0f:f0:c5:a9:48:c9:88:03:16:65:1e:60:
38:e9:9d:9d:5e:23:fc:6d:be:f4:8c:4e:b1:44:e8:
87:ef:e9:46:d9:86:7c:ce:42:e1:70:08:4e:63:40:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:EE:FF:0C:69:C9:0C:A2:8E:20:89:37:F8:F1:52:C1:F0:1E:9C
X509v3 Authority Key Identifier:
keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:98:38:ac:cf:e4:a1:20:6c:06:31:46:79:8e:cf:c3:b2:80:
ed:23:60:c0:d3:3f:ea:63:55:d7:a6:53:81:6f:ef:c9:21:2f:
c0:12:9c:94:43:28:6d:e2:90:f3:56:ce:e8:11:59:4a:9f:bc:
ce:6d:e3:61:5d:94:3b:64:23:45:04:27:ba:d5:4f:2a:d0:ab:
8d:f3:c1:87:33:39:fe:cf:cc:ad:c9:41:51:9c:55:95:ea:da:
6b:9f:a7:ad:23:ca:0c:6a:68:30:07:65:00:df:16:9b:29:08:
c6:cc:27:99:a4:28:43:f0:f0:94:b7:93:b5:6f:1c:cd:34:1a:
3f:3c:ce:b0:ac:a6:9d:f9:cf:d4:52:bd:d5:db:43:5e:15:35:
a1:e9:73:28:b4:54:c9:8c:25:97:9f:1a:7c:54:ac:7f:40:69:
37:e2:87:a9:31:24:f4:ad:10:f7:57:55:4c:d7:e1:e4:01:46:
a9:b9:52:d9:4b:44:56:9c:2e:a8:0c:fd:88:e9:f7:31:e8:0c:
f0:a6:e3:2f:49:6c:de:48:be:59:71:14:bb:91:8f:55:ce:b8:
b2:ef:b9:6c:34:b3:aa:3a:3d:a2:46:1f:10:e1:aa:5f:6e:88:
75:1d:47:6d:a5:15:32:d2:39:4d:7b:b6:90:3d:53:14:b3:a2:
cb:02:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:51 2026 by rpki-client