This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier: Js2POWmB+7O8RtonOgohoGhbpXom9q03InxNJgCrBHM=
Subject key identifier: FD:5B:39:22:8B:51:16:9A:98:B9:2A:0D:78:42:B7:15:11:2C:01:31
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial: 0CC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number: 0CBA
Signing time: Sat 24 Jan 2026 17:58:08 +0000
Manifest this update: Sat 24 Jan 2026 17:58:08 +0000
Manifest next update: Sat 31 Jan 2026 17:58:08 +0000
Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: 3RbQymNz944SpW3mnDN0zBPPul2e+tlozKMSmuJ1UdQ=)
2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: gcmOeuv4CPwiyDEbbjuVKa7sBj9FNhXZhMuz2eqrCks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Validity
Not Before: Jan 24 17:58:08 2026 GMT
Not After : Jan 31 17:58:08 2026 GMT
Subject: CN=69750830-7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:f9:ef:9d:67:94:29:6a:fd:9c:a0:33:d4:
f9:2c:f7:96:72:c2:f7:cc:52:ee:66:18:0a:35:7b:
d1:48:b5:ac:e3:d3:c6:ce:68:09:75:cd:42:2c:66:
57:2c:49:86:e9:42:94:96:99:f5:8e:f0:be:92:c9:
c9:a7:10:57:90:81:55:97:4c:99:47:c0:33:ac:20:
12:a0:29:a4:3f:fa:eb:94:1f:02:16:4a:b9:18:37:
5c:62:de:bb:8d:14:9f:17:90:01:c6:e8:1b:74:e2:
50:cb:09:20:93:cb:de:0a:a6:06:00:5b:ff:e3:62:
5d:01:af:f1:e5:31:05:1c:90:5e:13:11:b3:0a:fb:
8a:36:ae:7f:97:21:2e:9d:99:a2:e1:ac:b8:cf:ce:
82:9b:e4:25:c2:99:05:65:f6:bc:7c:9f:f5:4f:d3:
d1:52:df:fe:9a:84:d8:53:6a:34:0f:4f:3d:7c:5e:
1c:31:b4:a2:0d:cd:22:6b:0e:65:fb:85:4d:d5:1b:
e3:2c:d6:3f:f5:bd:f0:47:b6:f7:39:08:71:46:7b:
61:a9:24:ae:7b:19:f2:6b:ac:f9:37:be:c7:88:24:
16:b9:96:53:0e:fc:47:46:26:1b:1b:3a:4f:91:d5:
67:49:47:b8:aa:0e:cb:09:1d:9b:62:93:55:c1:cf:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:39:22:8B:51:16:9A:98:B9:2A:0D:78:42:B7:15:11:2C:01:31
X509v3 Authority Key Identifier:
keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:8c:52:47:5c:e6:0c:38:1b:9b:bc:d5:3d:5f:ba:87:ee:
8a:32:0c:a0:01:eb:63:43:e0:f7:7e:5f:1e:22:4e:a6:e7:ba:
4d:5a:ec:63:88:21:a3:4a:e7:21:71:35:4d:d6:b5:bf:fd:27:
ad:00:7d:22:a9:84:7d:75:dd:b0:24:16:aa:60:14:b6:45:36:
3e:a9:e9:35:1c:46:23:78:fc:c4:95:2f:6c:88:18:b8:31:a2:
ac:4e:51:03:45:d2:e0:b0:e9:1a:d1:14:f5:c4:76:f9:ff:31:
ce:9a:94:a2:76:c5:3d:76:14:c2:5b:bb:9e:ef:eb:a7:66:cd:
80:60:31:96:32:6b:35:22:e1:ba:66:dc:6f:e3:bf:2b:21:7e:
1e:b4:0c:86:c6:19:36:f2:ce:fc:ff:74:35:b1:62:c3:00:8e:
e7:6c:d0:01:8e:27:50:6b:99:c1:fa:35:2d:32:c4:4a:a0:e5:
2c:60:bc:30:54:2e:a2:37:8e:d2:b2:61:cc:0b:bd:d5:7a:3f:
38:95:92:4f:9e:6e:9c:56:e7:a7:3d:12:29:34:0b:c6:34:0a:
17:0f:89:bb:57:af:2e:8b:0d:dc:1c:c0:70:a9:c5:21:27:83:
48:9f:c8:06:51:a4:50:df:56:77:ae:21:bd:3b:95:04:60:4c:
2c:b2:34:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE
NDZBNjIyNjEwHhcNMjYwMTI0MTc1ODA4WhcNMjYwMTMxMTc1ODA4WjAYMRYwFAYD
VQQDDA02OTc1MDgzMC03NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxD5751nlClq/ZygM9T5LPeWcsL3zFLuZhgKNXvRSLWs49PGzmgJdc1CLGZX
LEmG6UKUlpn1jvC+ksnJpxBXkIFVl0yZR8AzrCASoCmkP/rrlB8CFkq5GDdcYt67
jRSfF5ABxugbdOJQywkgk8veCqYGAFv/42JdAa/x5TEFHJBeExGzCvuKNq5/lyEu
nZmi4ay4z86Cm+QlwpkFZfa8fJ/1T9PRUt/+moTYU2o0D089fF4cMbSiDc0iaw5l
+4VN1RvjLNY/9b3wR7b3OQhxRnthqSSuexnya6z5N77HiCQWuZZTDvxHRiYbGzpP
kdVnSUe4qg7LCR2bYpNVwc8eEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1bOSKL
URaamLkqDXhCtxURLAExMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2
RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ
T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBukYxSR1zmDDgbm7zVPV+6h+6KMgygAetjQ+D3fl8eIk6m57pNWuxj
iCGjSuchcTVN1rW//SetAH0iqYR9dd2wJBaqYBS2RTY+qek1HEYjePzElS9siBi4
MaKsTlEDRdLgsOka0RT1xHb5/zHOmpSidsU9dhTCW7ue7+unZs2AYDGWMms1IuG6
Ztxv478rIX4etAyGxhk28s78/3Q1sWLDAI7nbNABjidQa5nB+jUtMsRKoOUsYLww
VC6iN47SsmHMC73Vej84lZJPnm6cVuenPRIpNAvGNAoXD4m7V68uiw3cHMBwqcUh
J4NIn8gGUaRQ31Z3riG9O5UEYEwssjRe
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:35 2026 by rpki-client