This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier: SclbFXnXcFG77JT8Pk+l/WMZUQT+z7HPz7SGy2KP+70=
Subject key identifier: BA:E5:3B:A7:87:54:F7:DB:AE:3C:51:B4:4F:6E:33:13:72:64:69:8E
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 078E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number: 0780
Signing time: Sat 24 Jan 2026 20:56:23 +0000
Manifest this update: Sat 24 Jan 2026 20:56:23 +0000
Manifest next update: Sat 31 Jan 2026 20:56:23 +0000
Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: 66QzKxXiE76i1Irzf8XrqcPddYkTMcwafYVJ4TW3UDU=)
2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: E+kNymk2V/WmVQEXWh+w5s4nAojWjBKKaD3DDwM+0b8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Jan 24 20:56:23 2026 GMT
Not After : Jan 31 20:56:23 2026 GMT
Subject: CN=697531f7-4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:58:61:02:17:86:dd:e1:b5:57:39:de:68:
6e:7b:c8:d6:e5:b9:b1:c9:99:15:3c:e7:3a:21:95:
6b:fc:26:ff:57:9b:ea:70:3c:b4:e0:74:c5:f5:6b:
ef:c0:f9:cc:e8:a2:41:6a:aa:96:45:df:68:d3:9d:
98:ea:ee:ef:b4:71:13:12:f3:dd:d4:3b:99:49:ae:
60:d5:8b:2f:5c:21:a7:92:a0:d1:89:f9:0b:91:34:
68:85:bd:ca:79:3d:14:5c:b7:89:04:d6:cc:2a:31:
77:32:cb:df:19:5a:72:2e:eb:cf:27:37:c0:32:e6:
d6:79:98:66:12:4b:d7:77:fe:51:ee:61:49:8d:37:
90:4e:2a:9f:73:cf:82:80:19:72:8f:1b:35:30:45:
c5:c5:91:99:69:3d:fb:b0:0c:e8:fb:da:af:5e:99:
1d:12:f6:e5:52:5f:d2:8b:4c:58:30:82:e5:a7:ed:
90:b6:ec:e5:c9:3b:40:f1:73:c0:5d:c6:13:59:2c:
88:c7:34:29:5a:86:98:73:6b:88:6e:6f:cb:de:58:
f1:29:55:89:a6:5e:63:c8:ab:4a:92:4b:f1:27:ec:
00:d8:f7:89:03:1d:41:f8:a9:15:4e:04:4a:fa:c1:
e6:5c:55:64:be:e5:0a:54:9c:fd:fd:e6:ae:5e:b7:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:3B:A7:87:54:F7:DB:AE:3C:51:B4:4F:6E:33:13:72:64:69:8E
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:7b:10:55:56:40:7f:c6:22:96:2b:8a:f0:b8:0e:2e:c6:
de:42:40:2a:32:23:18:89:3a:04:95:17:ae:57:a0:56:30:b2:
8b:c5:35:20:62:0c:28:c8:56:45:cc:fe:ac:ec:fc:cd:c1:fe:
6f:e2:4e:00:dc:d5:fc:16:e6:22:cf:6e:c5:36:84:29:dd:30:
a2:63:f2:28:5c:d1:4c:27:05:db:6b:f8:69:e6:19:ea:be:67:
29:48:5a:39:93:5c:0e:c4:af:60:32:bf:48:dc:8f:ab:ba:91:
92:5d:93:91:68:b7:95:4e:4f:12:48:68:ab:a3:ac:03:e0:07:
9c:37:1b:a5:e2:ac:e1:53:26:dc:da:b7:d6:9c:01:d3:42:2c:
7f:6d:97:4b:86:06:5e:dc:f0:fa:2c:2d:76:2f:80:06:27:fa:
47:77:85:b4:96:cc:c7:e9:2c:3d:c4:a3:e1:4c:96:4a:01:11:
d3:a9:81:71:84:e2:af:7f:7c:5f:06:70:ff:f7:d9:7d:bd:09:
4a:2e:6c:b2:64:82:43:b7:ca:58:b9:2e:13:96:91:35:58:ef:
2e:36:48:ba:08:89:31:1d:26:c0:c5:20:e1:75:40:ec:42:08:
70:35:28:96:80:28:58:30:f9:6a:5d:29:76:d8:a4:f9:02:58:
df:20:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:42:57 2026 by rpki-client