This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json)
Hash identifier: 8evgwB6/pucWtm+MziYiRzrpxa3SRgDN/xks7DptlaU=
Subject key identifier: 1A:5D:57:FD:5C:46:4D:02:66:19:5C:5D:0A:CB:78:F3:83:B2:AF:1B
Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
Manifest number: 096E
Signing time: Sat 24 Jan 2026 20:37:27 +0000
Manifest this update: Sat 24 Jan 2026 20:37:26 +0000
Manifest next update: Sat 31 Jan 2026 20:37:26 +0000
Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: Tj/74NOAM1mLR90dTF/5EK8e81tb26cUw8UkXz23Vjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Validity
Not Before: Jan 24 20:37:26 2026 GMT
Not After : Jan 31 20:37:26 2026 GMT
Subject: CN=69752d87-f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:be:4f:d2:d8:8a:5d:43:9c:ae:86:30:53:
28:32:aa:20:68:c2:df:e5:07:ab:03:58:75:bd:02:
c9:01:13:e6:8d:85:4c:a3:2c:b5:c3:74:69:a5:ad:
22:f5:7f:c6:a2:21:e6:6e:19:4b:6d:78:e8:38:b5:
db:9e:57:aa:27:e0:a8:66:9a:8c:e1:13:07:92:57:
3a:59:7e:43:82:d9:bd:4b:32:3d:d3:c3:7f:7b:75:
e0:44:4d:f4:92:a0:ee:cf:f9:2b:8a:f1:e7:a1:e3:
29:58:24:6b:8a:a3:88:e6:b5:6b:83:44:07:e1:b3:
0c:da:f3:1c:c8:3c:61:20:fb:46:e0:6c:56:59:3b:
8c:95:a4:56:7d:5b:fd:45:1f:5f:08:ac:c8:35:0c:
96:71:d9:e9:9c:81:05:3c:26:51:be:98:43:2e:04:
90:db:ba:91:04:cc:0c:a4:a3:dd:4a:7e:bd:a7:ee:
71:bb:49:9a:ce:c8:d4:c4:31:35:11:28:a0:ee:a7:
7a:f9:90:fe:1b:d0:c3:ea:18:49:94:ae:bb:e6:54:
f7:7a:59:a8:53:2a:d9:9b:4d:a3:a6:70:b9:52:ab:
d9:0e:c3:a4:20:b9:d5:13:32:be:90:3d:81:5a:84:
52:e3:f1:80:04:8e:a8:f6:4a:54:41:59:9a:ac:b6:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:57:FD:5C:46:4D:02:66:19:5C:5D:0A:CB:78:F3:83:B2:AF:1B
X509v3 Authority Key Identifier:
keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:42:b4:9b:80:43:65:01:4d:d0:fb:68:41:5c:c1:1c:2f:
c6:63:e4:fa:8d:b9:5f:b3:93:7f:2e:c6:be:e9:bd:07:8d:de:
4d:44:13:d0:c2:8f:a5:5c:d8:c9:df:e4:09:c6:64:35:17:5d:
58:7c:47:6d:7b:25:fe:5b:83:cf:21:3e:33:7e:d7:3b:ab:71:
b6:df:6e:cc:0e:29:f7:b3:e6:58:e6:88:3f:86:e9:27:c6:6b:
e2:b1:7c:e4:ad:65:fb:bb:6c:c3:6d:4f:2b:3a:d0:ef:72:9e:
48:3c:e0:84:6b:83:d9:79:f7:3b:81:a3:44:31:32:92:3d:2c:
eb:f1:6c:76:ca:d2:85:cf:22:f2:35:5b:88:a1:95:72:71:56:
ca:8d:93:95:39:98:2a:eb:ba:d1:e1:d4:ce:64:1f:58:48:ce:
ab:1c:c7:c3:91:52:86:67:32:dc:90:05:5f:7d:dc:6e:32:1f:
29:8e:42:81:92:59:f1:2c:99:13:78:65:12:6c:bd:cc:95:89:
d8:f7:f9:34:2e:0e:a7:b5:43:aa:5c:1e:60:fa:f1:4b:c4:eb:
35:da:7b:87:79:71:9e:9c:a5:4c:5c:e5:ee:2c:b4:e4:0f:ed:
38:6c:c3:85:ba:85:69:49:1a:6d:fa:31:c6:0e:37:0f:f4:e8:
8d:c4:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:08 2026 by rpki-client