This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: WtHDslGK8K33fVmP9IEb/SnAx5/oWew3nj/wyv1vBLI=
Subject key identifier: 9A:CC:35:0E:E8:67:37:63:C1:03:2E:BC:D4:4B:42:F2:F8:D3:3C:28
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: 0100
Signing time: Sun 25 Jan 2026 04:26:29 +0000
Manifest this update: Sun 25 Jan 2026 04:26:28 +0000
Manifest next update: Sun 01 Feb 2026 04:26:28 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: 5aHkGlmqLNVwP0fGlLuzReyVD7BsTn8N6iOoUdOIlX8=)
2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: 2fQyEMRkeBroC7JG6dhKWVMOmAu2peytDIRfiN3h3TE=)
3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: D/9SKPwUI+9VjDA2s/SYyY7F96WxlOAy4mRC6PjrPZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Jan 25 04:26:28 2026 GMT
Not After : Feb 1 04:26:28 2026 GMT
Subject: CN=69759b75-eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:f9:08:bc:dc:bd:ab:66:9c:b3:a4:e6:38:
d5:5a:aa:14:c8:42:13:ef:f1:ed:79:a5:5a:f5:2c:
cd:b0:ed:95:69:15:87:34:fe:cf:b3:a9:1a:b9:85:
24:3f:b3:51:10:0d:12:89:a3:dd:02:25:73:d5:5b:
ab:2e:e6:e5:47:ab:67:2f:8f:c0:6a:7d:5c:b5:df:
c8:00:b9:ec:4b:a1:a5:02:58:d8:aa:9f:38:a6:f5:
87:6b:7a:e3:5f:d3:f9:b3:bd:db:57:28:b8:8b:cd:
8e:9a:5d:45:f4:55:b3:02:08:5d:82:63:89:11:d6:
0c:be:1b:92:20:32:43:56:da:c4:1f:54:4f:94:b4:
de:f5:d7:19:f2:1d:b1:22:ef:da:0c:ff:2b:d3:fc:
ef:10:23:f7:b3:d2:e3:bd:91:63:7c:24:ef:dd:ea:
42:6f:cb:e6:f0:e3:e9:08:d6:1c:6c:22:76:56:b0:
5a:14:ca:c2:68:b3:f4:03:8d:61:6a:f5:d9:64:37:
c7:95:70:91:01:91:d8:02:f1:04:1d:14:66:23:81:
2f:b2:e9:42:69:37:f1:45:33:b1:ec:09:33:a7:3e:
a6:f5:5c:77:f3:fa:7d:58:57:8e:a2:dc:f0:68:3e:
4a:d0:d5:75:0e:a5:e1:e5:00:96:5b:27:0a:06:da:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:35:0E:E8:67:37:63:C1:03:2E:BC:D4:4B:42:F2:F8:D3:3C:28
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:d2:7c:79:ea:0a:9b:85:ad:3d:c6:1c:50:99:2f:29:9e:
e8:d5:b7:ef:42:b3:74:1d:5f:c9:00:5c:5d:2b:8b:31:9c:ef:
e7:c2:2e:dc:c5:95:8e:2c:6d:77:6d:5c:36:29:8a:26:57:5f:
d8:e0:7c:4f:ca:64:4e:af:cd:48:cb:90:f3:11:e7:6f:02:29:
4d:c7:3f:69:ac:44:95:63:a4:75:a6:c6:6a:bc:25:f7:51:61:
4d:e0:11:3e:25:dc:f4:1b:f9:d1:ba:87:f2:9b:37:60:39:52:
58:a9:14:21:41:3a:9b:cc:a6:51:cd:c6:ce:24:50:ae:13:00:
a7:47:ed:86:7f:58:9f:fb:1a:de:a5:68:fc:e7:aa:5b:3c:7d:
55:d9:01:58:15:d6:b3:a9:a6:21:27:d3:1e:9e:10:e9:9e:7d:
cd:ef:77:34:5e:f2:db:e5:09:6d:17:46:73:53:8c:e0:b9:94:
9f:71:94:a0:ff:9a:3e:0a:3d:d8:dd:ce:91:e9:c8:71:ea:4b:
58:35:26:8f:b9:58:d6:67:aa:3d:84:02:b3:ee:ce:c2:f0:f3:
aa:72:ba:99:6b:27:51:cc:b2:f7:7b:de:bf:c1:5a:e7:21:ad:
fc:a7:f3:02:c3:71:20:15:c6:d3:47:52:98:2c:5b:f3:36:1b:
f6:96:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:31 2026 by rpki-client