This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier: rY9Q6o4u51X2An/F1qgxamaYgT5kLO+90slOlSOB4tw=
Subject key identifier: 48:E1:29:FF:FA:F8:72:50:32:DB:09:72:C9:E7:57:A3:54:EE:B1:CC
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial: 0BC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number: 0BB7
Signing time: Sat 24 Jan 2026 18:31:03 +0000
Manifest this update: Sat 24 Jan 2026 18:31:02 +0000
Manifest next update: Sat 31 Jan 2026 18:31:02 +0000
Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: tpBzVUROn6Lzu6JPOdnhO5RjyUNrKkMsfZSHn7GODy0=)
2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Validity
Not Before: Jan 24 18:31:02 2026 GMT
Not After : Jan 31 18:31:02 2026 GMT
Subject: CN=69750fe7-b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:7b:56:cf:82:65:aa:cc:1c:8f:4a:f3:fc:
10:da:fc:b2:08:c8:35:bd:06:40:13:2d:ce:75:27:
b6:66:83:69:35:85:cc:13:08:ad:56:ab:e4:2e:ec:
7d:56:cd:a7:38:14:be:71:0e:61:4b:17:ad:01:91:
e9:5b:71:e2:48:a3:b5:89:0c:0a:49:db:e2:c1:d1:
7f:5a:e0:9e:92:ec:a8:ca:e0:c4:c8:1e:a1:6e:aa:
10:aa:4c:5a:4a:01:ae:5a:b6:4e:d9:92:c4:15:ab:
be:56:65:2f:df:6b:63:cc:4e:08:1a:33:35:c6:04:
9b:41:22:f2:69:93:26:00:6e:8e:97:ea:d5:34:53:
c0:1a:dd:b8:14:27:07:3c:31:0c:78:7e:55:9f:e0:
f9:54:47:91:6d:cb:f8:f4:35:9a:1b:6c:32:6f:91:
fa:1e:a2:00:22:c9:8c:d6:9c:24:04:13:ae:06:6d:
ac:94:05:b5:ec:67:60:b0:59:08:0c:5b:92:ca:05:
94:5b:23:35:56:4f:60:21:41:43:3d:51:e4:9e:5f:
ca:d8:27:6a:23:14:4b:b5:ff:08:ee:f7:c3:7d:76:
0c:09:01:ce:20:08:10:66:c8:26:e3:71:e9:60:b6:
bf:e7:5b:9e:0c:06:e9:66:7b:b2:83:c6:e8:a8:a9:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:29:FF:FA:F8:72:50:32:DB:09:72:C9:E7:57:A3:54:EE:B1:CC
X509v3 Authority Key Identifier:
keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a4:f0:be:27:35:7e:ab:52:0b:72:10:59:ae:fd:7e:db:3d:
b3:4d:21:1f:9e:08:53:51:65:23:4f:86:f4:ab:fa:40:98:2c:
fc:a9:60:e4:06:3d:51:55:84:3e:ba:85:c6:50:0d:dc:8b:bc:
8b:5e:f5:dc:48:43:d8:72:b4:bc:e7:05:2a:ae:35:0c:5b:d3:
46:02:75:ed:02:ec:68:51:d5:07:13:b8:1b:5e:e6:1a:c9:8c:
1e:d7:c2:3a:03:86:4c:f8:06:33:ac:23:f2:c5:0a:1e:b1:90:
22:21:cc:11:8b:ad:ee:80:96:ed:86:1f:7d:1d:0e:47:7c:ab:
a8:1c:66:fd:5c:af:a9:41:a2:1c:4b:af:4f:28:4d:79:fa:bd:
8b:19:f0:fa:6c:c7:c8:d7:9e:79:e6:3c:a3:10:9b:6f:95:40:
d5:00:7d:3c:53:d6:8b:95:c2:b4:0f:58:1b:56:7c:76:c1:87:
f8:07:09:37:6b:d9:9d:f9:dc:bf:d9:1c:f3:5b:47:a3:64:eb:
d1:67:f5:6d:0c:cc:9e:8d:d3:be:a4:9e:31:2e:64:09:e6:99:
07:ee:2c:cb:ff:cf:f4:c3:17:d7:ab:63:4b:a3:69:d2:49:d5:
09:4f:86:de:4d:1e:ad:72:1a:5d:24:17:32:16:ff:ba:5f:33:
65:a7:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:29:44 2026 by rpki-client