This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier: hqLUmSfRgdbt34kOwhZXL5lEMtCBcmRZ9RRrkqWqCNw=
Subject key identifier: 35:CA:18:36:D2:09:94:1B:64:43:57:7D:50:8F:46:D5:CD:10:43:8D
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number: 08B9
Signing time: Sat 24 Jan 2026 19:52:30 +0000
Manifest this update: Sat 24 Jan 2026 19:52:29 +0000
Manifest next update: Sat 31 Jan 2026 19:52:29 +0000
Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: jLcDqaj+gLHZdnMI/Ov7PspsMSvOTfiEEJXZk/eUUiE=)
2: 760B9414D50911EB81567986C4F9AE02.roa (hash: QPsDfSV6so0OjIlOy/DIgPY7VNOYY4wsn5e2KkaKPCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Validity
Not Before: Jan 24 19:52:29 2026 GMT
Not After : Jan 31 19:52:29 2026 GMT
Subject: CN=697522fe-c2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:8b:05:21:ba:6e:28:cc:50:3d:77:67:87:
85:13:f6:77:69:ae:8f:fa:77:06:40:7f:53:17:49:
05:9b:38:98:18:eb:89:56:8d:99:12:1d:9f:25:d3:
ae:12:d0:be:7d:ff:c7:2a:26:0c:d2:a7:91:27:02:
bf:14:83:9c:93:15:53:eb:5f:21:c8:24:c8:ae:05:
54:d3:e9:97:cc:20:3d:a8:d7:ab:b2:9c:4e:32:93:
14:d8:56:11:e7:c0:cc:1f:f9:44:47:b0:12:89:e3:
56:55:93:33:ee:b9:57:1b:65:be:e8:2f:bd:3a:b5:
ed:da:5e:5a:30:be:16:3f:02:9c:c5:f8:cd:20:da:
e6:8d:af:8d:37:c0:70:59:38:2f:3f:07:2d:88:e0:
1b:58:e7:bf:e2:44:ba:75:8b:4c:ef:42:74:12:d4:
87:a6:69:5b:66:4a:ca:b0:71:dc:be:93:9d:68:0f:
10:d8:74:92:37:fc:f3:b5:55:9f:de:bc:7d:4e:69:
26:d6:18:f6:af:17:d2:48:48:d1:5d:de:4d:d8:37:
65:d6:78:3b:9a:0b:eb:98:05:9c:ba:2b:a8:91:2b:
8c:70:fc:44:fd:14:b3:a0:c7:b5:35:5f:b5:1d:d4:
d4:15:9c:e7:25:47:54:cf:c8:0f:6c:88:bf:0f:c7:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:18:36:D2:09:94:1B:64:43:57:7D:50:8F:46:D5:CD:10:43:8D
X509v3 Authority Key Identifier:
keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:89:4b:17:60:2b:e2:cb:65:60:b8:74:8f:29:b5:64:7e:31:
a4:b7:ae:c9:5d:00:98:ff:09:84:73:fc:60:97:35:82:70:42:
0c:09:30:4e:53:83:43:8d:dd:a4:6f:12:98:b7:89:7a:4d:ac:
8c:91:a2:6a:61:fd:06:6c:64:bb:85:ce:a5:45:30:55:91:f1:
c9:9b:bd:af:63:f5:c2:61:58:87:72:b8:e3:8e:7f:bc:ac:31:
e1:0b:4f:9c:84:1b:72:f4:8e:51:ed:66:b4:e2:5b:93:85:63:
85:e9:3f:d8:56:03:d5:35:a2:35:f1:ce:77:8d:e6:78:1e:49:
06:e0:2e:c5:02:f6:00:a1:d6:25:8c:e6:8b:20:2d:c8:10:35:
52:dc:da:d7:44:75:b1:99:61:05:c3:78:1a:d7:4a:cd:fe:a4:
50:f2:62:fc:f8:37:8f:44:c4:ee:06:d9:f8:e8:86:c2:94:a7:
2c:9b:80:a9:71:a8:1a:e6:09:38:01:82:ea:a9:69:43:64:e0:
95:c2:c3:dc:56:a4:3f:0f:d3:fb:82:f8:46:19:00:ab:fe:53:
1e:bd:b8:32:09:d5:54:f6:33:18:c5:05:9e:44:0d:45:bd:70:
49:81:97:ed:0c:13:4c:1b:55:f5:34:6a:b6:57:ab:2e:84:b3:
1c:08:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:15:13 2026 by rpki-client