This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier: U2YyqSs/qHtjOtACzrVGbmIePhODMnanYqZk81gL19g=
Subject key identifier: 97:5D:2D:CE:F6:6F:15:3E:FE:2D:3E:6D:4E:CF:DB:16:C4:F8:EF:18
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial: 0966
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number: 095F
Signing time: Sat 24 Jan 2026 19:33:36 +0000
Manifest this update: Sat 24 Jan 2026 19:33:36 +0000
Manifest next update: Sat 31 Jan 2026 19:33:36 +0000
Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: 8kXrnBcjz5h+BXMrKNz2aRnD45Gq6B52btGmd97LKDs=)
2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: aOqwloZ9sT/M1OqrjBKZ/MpZ3Pwla48CsTsMrgUxXsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Validity
Not Before: Jan 24 19:33:36 2026 GMT
Not After : Jan 31 19:33:36 2026 GMT
Subject: CN=69751e90-8e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:3e:d7:c9:01:80:f5:0d:0d:a5:ed:97:49:
91:dd:7c:2b:43:f2:ba:15:8d:dc:3c:5e:e3:b1:b9:
4d:44:46:cf:ef:89:c9:e8:5f:98:f8:1c:e8:6e:2a:
63:f7:f3:a5:16:cb:cf:0c:d4:cd:ae:fd:40:4c:62:
e0:13:22:52:70:fe:76:c4:a0:53:2b:9b:f2:cd:f0:
35:3d:41:e0:f4:bc:16:6d:d2:58:13:bf:f0:ea:f6:
8b:80:2f:db:de:de:75:ce:cf:fe:c6:81:da:9e:df:
f8:5e:16:6c:c3:2b:a4:cc:f6:9b:c1:ab:fa:86:f1:
e5:aa:11:1d:5a:ad:b1:f1:5a:04:b7:93:b4:27:fd:
0d:7e:3d:9c:04:78:d5:6b:c8:10:2f:e5:48:82:d8:
cf:40:28:cb:2a:09:9a:43:c1:35:43:d3:74:78:01:
55:01:5b:ef:57:2a:05:0c:cf:5a:5b:69:87:34:eb:
37:1a:f9:14:b4:ac:98:bd:2e:18:10:cf:b2:81:ff:
54:92:ff:01:20:75:34:07:18:16:c1:48:5b:58:75:
e2:b2:21:96:84:1a:9f:44:7f:82:cb:83:9c:55:fc:
e5:ce:f3:38:af:7f:90:09:9d:38:77:f3:0f:2c:f2:
50:f0:70:bf:d1:c9:89:91:06:e7:87:31:51:82:8a:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:2D:CE:F6:6F:15:3E:FE:2D:3E:6D:4E:CF:DB:16:C4:F8:EF:18
X509v3 Authority Key Identifier:
keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1e:f7:9d:93:67:c6:ec:7b:0a:a9:3b:19:c5:da:60:d7:92:
6d:c0:84:69:af:c8:ba:48:0a:73:ee:99:9a:93:e0:91:f0:8e:
8d:38:5a:f4:0e:10:50:3d:df:56:a4:ae:b3:10:be:e7:60:44:
06:78:92:60:6b:36:b6:34:0c:f6:1f:2f:e3:0d:7b:c1:a1:67:
12:30:0d:a5:ef:95:bf:3b:4d:c6:80:85:de:cb:e1:4a:ca:4c:
85:0e:fd:c7:71:96:4e:6f:a3:4c:37:a1:e9:48:af:9a:af:5a:
9e:c3:96:a2:fa:5f:fa:36:f5:71:b7:bc:e3:7a:2e:fb:c7:eb:
41:6c:73:8b:fa:18:78:bd:2e:4e:a9:7d:7c:fc:e7:02:69:57:
f1:f8:35:d0:66:96:03:8b:12:2b:10:89:c5:f3:5a:f1:96:39:
ef:b2:7b:b3:52:4a:d0:34:96:43:12:09:34:96:7f:ec:31:6d:
0e:3c:1f:3a:7b:c4:54:3f:3a:bf:17:9b:89:e8:84:28:cd:ba:
0f:ea:93:1a:7b:cc:26:e2:33:a0:40:90:60:07:77:80:ae:f8:
f5:8f:1e:5d:b9:93:f6:cd:26:9a:10:9f:5c:e9:9a:13:85:95:
9b:61:09:06:b3:c5:e0:4b:63:3f:bc:b2:89:8a:83:83:0b:69:
e4:3b:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:07 2026 by rpki-client