This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier: Xr0yOaGUZgyT7R7SQ4fH9A45HaqEZLCu7IoqbckB0u4=
Subject key identifier: 1A:BD:BB:FF:20:B6:CE:05:01:87:F3:4B:8A:ED:A9:F0:F8:CD:36:E8
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial: 0CFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number: 0CF7
Signing time: Sat 24 Jan 2026 17:45:17 +0000
Manifest this update: Sat 24 Jan 2026 17:45:16 +0000
Manifest next update: Sat 31 Jan 2026 17:45:16 +0000
Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: t/YZJ3B1Bnno4+TWeFD3aj+yyxfsy8YkuajGMuUa+bU=)
2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Validity
Not Before: Jan 24 17:45:16 2026 GMT
Not After : Jan 31 17:45:16 2026 GMT
Subject: CN=6975052d-21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:0b:40:d7:5c:7c:ae:26:46:81:d3:d6:6b:
09:09:72:4f:95:16:ca:36:6c:01:19:f4:7b:f2:25:
d7:52:f0:67:08:da:da:78:0d:5f:86:45:0a:3c:a5:
47:7f:a3:41:de:32:d1:64:e4:22:df:28:6b:2f:c3:
e7:45:f9:82:36:2b:cf:11:b1:3a:18:c2:a4:5b:6d:
ca:e3:2f:75:33:a6:13:b4:77:1a:1b:28:69:d5:ea:
6d:60:00:fd:d5:0d:e4:57:e1:6c:e6:63:f5:9d:1e:
55:72:29:b5:21:38:7c:f2:ad:1d:15:f5:29:3b:db:
18:aa:46:ea:70:94:c4:77:8e:89:0d:c5:bb:5b:67:
c8:a5:e5:6b:b6:0c:8e:ba:b0:7e:de:65:72:3b:e8:
2e:a1:ca:29:2a:df:a2:71:43:dd:07:40:dc:95:14:
cc:64:d0:06:6d:9f:fc:97:b0:c9:7b:52:38:54:c7:
16:f0:5e:f7:47:b3:ff:a4:47:e8:f6:38:76:82:f5:
2e:51:fa:e9:26:f7:8a:5f:d0:a2:06:03:19:4b:a3:
9c:34:5c:2f:80:8c:d6:2a:50:de:20:87:07:78:de:
12:42:35:05:9d:64:9a:26:0b:0e:03:ef:74:ea:22:
c7:86:90:5c:b9:63:4f:73:ab:60:ee:13:67:5a:e5:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:BB:FF:20:B6:CE:05:01:87:F3:4B:8A:ED:A9:F0:F8:CD:36:E8
X509v3 Authority Key Identifier:
keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c4:1d:51:b2:4d:0c:3b:5e:e6:db:18:56:32:a2:f3:e7:b1:
20:ba:e2:28:1c:db:c8:fb:a4:06:97:be:07:59:75:65:87:0f:
13:46:e1:0d:c3:1b:8f:44:51:7b:ba:a6:c3:72:36:ab:cf:ab:
25:be:b6:41:d0:8c:de:9e:d4:0e:32:f9:6c:ce:8c:60:b5:1e:
13:72:dc:08:2c:b8:e3:41:b5:76:bf:43:b2:81:b8:bb:b1:44:
55:2f:14:7f:8a:66:e3:04:92:dd:6f:13:ab:5e:7a:60:b8:29:
9e:17:08:4a:1c:6a:15:e7:d1:45:20:3a:34:7f:09:ca:86:86:
4c:79:55:dc:c1:fe:76:1e:95:e6:70:c9:fb:da:17:c3:7c:8d:
4c:32:60:78:12:53:8c:3a:4e:b5:4a:71:a3:20:c1:0d:96:62:
fb:52:75:ed:e2:19:f4:c7:33:63:37:e5:d1:b6:dd:1b:ac:03:
3a:65:84:4a:f4:95:56:2b:c9:98:e5:0e:0f:4f:23:cd:89:40:
84:c5:65:dc:a4:0e:1a:f4:cb:61:6d:5d:68:bb:51:5e:b6:fe:
2d:fd:75:b1:9e:ad:f8:33:26:d3:02:eb:0e:70:98:f0:6d:39:
98:78:49:ed:11:bf:df:55:f6:75:15:c6:55:14:14:34:7e:b6:
1b:6e:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:22 2026 by rpki-client