This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier: AQTH3vJFYUCVw3+X6T5sfp9bPsFPkqCUn+K2QCTR9HI=
Subject key identifier: 4B:48:BC:35:BF:04:58:37:20:1E:F9:2B:FA:C8:BF:74:B8:F2:D1:1D
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial: 06AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number: 069D
Signing time: Sat 24 Jan 2026 21:43:25 +0000
Manifest this update: Sat 24 Jan 2026 21:43:25 +0000
Manifest next update: Sat 31 Jan 2026 21:43:25 +0000
Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: EGao944Op8Dm15ZVqnArFQET2sU21lgvdy/r9vm9QtQ=)
2: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=)
3: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: KQvzfFoZ8+mG1PwqX29gc/leNzp6B+eUlYg2ecJeyn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Validity
Not Before: Jan 24 21:43:25 2026 GMT
Not After : Jan 31 21:43:25 2026 GMT
Subject: CN=69753cfd-8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:0b:a9:2a:59:88:4f:1d:cf:d8:db:66:93:
c0:96:9f:d4:a5:22:ad:ae:92:49:ee:d3:7f:ab:de:
06:04:95:29:ff:c1:8c:29:39:b9:79:b9:1f:a8:a3:
85:b8:04:27:d4:30:06:2e:6b:e7:8b:06:8d:0d:7c:
e4:14:a8:3d:30:af:f0:f3:33:62:c1:b3:5a:9b:30:
fc:aa:fd:e4:1d:06:48:f8:9b:41:7b:73:fe:1b:49:
47:59:46:ff:73:eb:c6:dd:b0:88:53:52:e7:07:c1:
b3:ad:b3:83:a7:e2:8a:d2:17:ec:0d:96:31:f9:e3:
ce:50:f3:98:fb:ec:62:56:a0:f2:59:f7:98:25:2a:
63:38:66:b0:48:f3:e8:85:1f:72:72:07:2b:6c:b3:
76:cd:13:5b:c1:b3:d0:79:1b:4d:55:5b:af:1d:fe:
85:78:51:dd:9c:17:b7:49:85:2b:83:20:c6:20:5e:
de:9a:1e:dc:f0:58:d6:ef:df:a1:0a:9e:fb:a6:1f:
33:6f:0a:51:16:5b:5e:0f:83:f3:48:7e:45:34:b5:
30:6c:d2:3e:83:db:af:b9:ff:cc:da:83:ea:44:bb:
de:2c:91:39:a5:1a:22:93:2f:29:31:1f:d8:f8:2f:
f1:d3:99:ec:10:5c:da:54:2e:6b:da:71:e7:a5:71:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:BC:35:BF:04:58:37:20:1E:F9:2B:FA:C8:BF:74:B8:F2:D1:1D
X509v3 Authority Key Identifier:
keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7f:29:f2:ad:5e:a0:a6:8f:12:4a:7f:1c:54:41:15:54:2c:
c4:04:5a:e4:56:d6:d9:d4:ce:5e:04:51:16:b9:dc:78:4a:d4:
73:34:1b:1c:8c:05:e9:3c:69:d0:ad:b9:0d:81:86:07:7b:6e:
6d:16:ac:cb:73:ac:53:68:83:d8:da:d8:2d:cd:d9:e6:58:79:
1d:5b:fc:80:55:04:d1:76:96:87:62:71:52:90:ba:c8:fb:73:
7d:4f:d2:f6:44:4d:4a:41:d6:ba:52:cd:8f:a1:42:3b:ca:dd:
f0:ea:eb:fe:6c:1c:e9:e0:b1:45:c2:64:a2:2b:c4:39:38:3e:
f7:90:2a:a5:97:7b:2a:a7:ed:c0:e9:50:a9:9e:b6:f6:31:bf:
2f:ee:1d:d7:1b:18:ac:3e:97:fe:7b:91:01:a8:83:55:76:72:
00:d9:32:0c:4d:78:d6:b5:cd:f1:62:8a:64:d8:b7:7a:71:39:
b0:7d:c5:31:2c:bb:9d:e7:50:87:6b:3b:13:db:b2:bc:64:88:
07:5b:d5:14:4e:50:25:4d:f3:32:11:39:b9:bc:f6:e9:43:33:
18:0d:60:5d:67:42:65:87:a9:24:c0:bd:b8:24:95:d5:b1:cc:
f6:a5:39:63:55:4c:4f:31:b9:a1:92:0d:52:8d:2f:99:c7:b1:
78:5e:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:59 2026 by rpki-client