This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier: qoVIuKo7FSA+/NzPiLoc5morOy8GdQ1/YB8VoqVGuPY=
Subject key identifier: 04:79:D9:48:20:06:94:8C:23:78:0B:3D:3A:57:9E:E5:EB:F6:BF:6E
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number: 022C
Signing time: Sun 25 Jan 2026 01:20:29 +0000
Manifest this update: Sun 25 Jan 2026 01:20:29 +0000
Manifest next update: Sun 01 Feb 2026 01:20:29 +0000
Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: GYCSXNSdiAyEFVSz2C664o6ti7/NXWZvOIYRUqeDtCs=)
2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: PwUsQccop9Cf8FtxwxhpO1uR6/Yqyp0+oubBrUUdudU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Validity
Not Before: Jan 25 01:20:29 2026 GMT
Not After : Feb 1 01:20:29 2026 GMT
Subject: CN=69756fdd-2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:70:50:14:f4:33:8c:d1:46:d6:92:5b:68:
90:cf:88:fc:e5:2d:86:17:33:ee:0e:27:69:4a:36:
62:c6:77:41:e8:55:23:ae:af:49:12:96:63:93:51:
6b:e8:4e:65:41:1d:06:6d:fb:8b:33:63:1e:33:1a:
f0:97:36:d2:1e:da:c6:7c:f9:c7:5a:91:68:13:dd:
1b:09:d2:e0:69:c9:2f:8d:f3:bc:33:d3:e1:c7:b1:
0c:e7:43:d0:3d:e1:3c:94:d3:ef:32:1c:52:c6:02:
4d:95:52:9a:1b:fd:a2:bd:3b:c9:2d:59:be:f6:a4:
66:16:4c:60:8c:5a:e0:8b:9d:9d:75:ee:57:c3:ae:
73:07:e1:1b:b5:8c:68:cd:47:20:99:aa:9d:14:d1:
73:b4:ca:09:96:a7:81:2f:08:0a:06:ba:79:23:83:
03:de:d7:7c:1e:17:c8:b8:de:7c:7f:eb:a8:7d:77:
cd:47:f8:ce:c7:93:fa:be:79:c6:63:79:8f:84:42:
70:20:b9:78:52:ef:d0:e1:d1:59:f7:44:fd:60:ec:
c7:5d:af:a1:20:91:7a:cc:dc:3a:9e:75:b9:00:1f:
da:a3:f0:a4:58:62:ae:d5:4b:b9:55:67:31:9d:c5:
cf:fd:c3:8b:2c:43:82:20:4a:7a:c2:d5:57:9d:05:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:D9:48:20:06:94:8C:23:78:0B:3D:3A:57:9E:E5:EB:F6:BF:6E
X509v3 Authority Key Identifier:
keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:ce:be:ad:c5:f6:8c:07:28:57:55:20:20:7c:62:36:d6:
90:00:ee:61:9e:35:9e:b0:5e:ae:dd:11:b7:2d:d5:69:6d:f4:
e0:04:74:81:21:50:7a:77:cc:c3:6e:2a:b6:38:3d:4d:69:94:
2b:e2:ee:a8:a0:1f:a8:f9:9f:a4:4d:7c:f6:ca:ed:50:7c:0c:
ed:9f:ed:fe:54:5e:e5:29:f4:01:e1:20:9b:1f:ce:09:d9:96:
63:f7:e5:ce:cc:8e:26:46:58:ed:0b:22:51:bf:71:bc:c9:f8:
44:9b:8c:78:bf:20:91:e6:60:73:94:eb:3c:9e:99:24:e9:2e:
16:d7:1b:d3:05:11:63:76:f7:83:3f:4e:e2:f3:07:be:a8:27:
09:e3:14:92:09:7b:58:c7:25:cb:fb:7d:54:59:0c:2e:f3:c6:
ee:0b:4d:3b:8c:af:97:05:51:c7:26:b1:41:2f:35:16:a4:b9:
e9:49:47:97:e3:24:52:c9:7a:87:4a:02:1b:1f:c0:da:77:18:
e4:a8:e3:62:9f:03:d0:09:61:4c:c0:05:13:21:17:eb:ed:ce:
b6:f4:c1:cd:04:36:78:16:a0:57:4f:02:55:2d:7f:3e:4f:fd:
51:81:6c:ce:fe:92:a3:b0:46:33:68:d0:50:74:67:bc:2e:a5:
0f:ef:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:15 2026 by rpki-client