This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json)
Hash identifier: 38Bre+hjvNC64zR+tpp8Pwb+aJvNhXt1B5bVApKbVXw=
Subject key identifier: 5D:C4:D2:B2:AB:4C:DC:30:91:1D:8E:C4:E2:BB:D9:29:A7:71:7C:D2
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
Manifest number: 013A
Signing time: Sun 25 Jan 2026 03:46:50 +0000
Manifest this update: Sun 25 Jan 2026 03:46:50 +0000
Manifest next update: Sun 01 Feb 2026 03:46:50 +0000
Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: TAv5PDsnFkbet96j4oNsHjeEA3Aowp4wqAMfnRPjcnk=)
2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Jan 25 03:46:50 2026 GMT
Not After : Feb 1 03:46:50 2026 GMT
Subject: CN=6975922a-d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:36:40:e0:79:7e:1b:a1:9d:46:3e:c8:0a:
7a:b1:e5:82:d6:b4:55:93:3c:58:b8:a5:10:a4:d7:
a2:af:c9:70:7d:d9:4e:6a:42:a6:85:60:7c:42:94:
46:1f:d9:a9:ae:44:b0:b7:92:39:92:2a:30:f4:c7:
6c:a2:b1:44:d6:13:9e:53:f5:fe:40:88:eb:92:f0:
80:ce:e3:37:92:18:0a:9e:e9:b0:e5:32:db:76:8a:
47:ca:ab:2d:b3:4d:30:8e:cd:bb:27:47:7d:77:3c:
f5:b9:56:f3:6b:9f:9e:72:ac:fa:13:78:96:24:7b:
a7:46:64:f5:36:c5:c0:ed:23:cb:55:c1:7c:ea:5f:
22:22:2b:50:d0:0f:46:9e:59:c9:8e:0a:5c:91:91:
ef:cb:aa:7c:39:6c:29:3c:9d:65:8e:77:0b:8f:f3:
39:c7:18:28:d3:45:02:23:b4:a1:82:19:00:f2:99:
a9:d1:94:8f:81:87:9a:34:9d:33:e1:e2:90:99:b2:
5d:d1:4f:9d:f9:82:2a:21:1c:3c:a2:de:d9:56:c1:
a9:2f:5a:10:fb:fa:42:57:79:fb:25:c1:a5:e7:2f:
bb:85:c2:f3:58:09:0d:6d:80:8f:5a:38:a9:4d:38:
3d:c9:f9:8f:0c:61:f3:6b:ec:fb:78:7d:7a:d5:1e:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:D2:B2:AB:4C:DC:30:91:1D:8E:C4:E2:BB:D9:29:A7:71:7C:D2
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dc:7d:c6:95:96:fc:a4:78:78:a6:6c:c8:48:74:70:d3:d7:
38:fe:c0:7f:8a:54:a8:b4:46:06:d6:9b:22:d1:91:d0:ee:7a:
57:bd:ea:36:54:1b:6a:a5:28:ad:f2:8a:7a:21:e9:04:bd:19:
7f:88:f4:70:38:fa:6d:e9:39:5d:85:e1:01:d3:20:51:96:b8:
ab:da:8a:09:e1:c9:30:b4:20:f9:fd:02:3b:06:dc:fa:0a:28:
70:63:a8:bc:b9:3b:a0:29:45:f3:f7:f2:fd:fd:f2:4e:0a:24:
17:3a:d0:c7:2c:1e:fd:90:ff:56:21:2f:93:9b:53:95:a8:5f:
ab:3a:f4:a7:39:92:28:2d:8e:dd:bc:61:5a:34:20:33:b7:3d:
30:dd:e5:fd:0d:25:30:f5:e0:64:c7:61:ce:95:29:f2:40:a0:
98:ab:56:df:d3:e6:47:41:94:eb:42:32:fd:79:ea:b4:1c:42:
f3:69:cd:ef:10:ad:6f:bb:3d:cc:86:5c:d3:dd:9c:50:3c:d1:
b1:85:88:ad:06:ab:ac:6f:03:66:bb:81:b7:5c:56:32:e7:0a:
e7:e2:47:c6:8a:97:73:e2:b4:d3:27:d8:2e:a6:13:0f:bf:0e:
43:2d:fd:e3:f5:1f:b0:02:ab:b0:46:08:28:23:fb:5a:35:be:
e3:92:73:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw
Njg5MzFCNTcwHhcNMjYwMTI1MDM0NjUwWhcNMjYwMjAxMDM0NjUwWjAYMRYwFAYD
VQQDDA02OTc1OTIyYS1kODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ZI2QOB5fhuhnUY+yAp6seWC1rRVkzxYuKUQpNeir8lwfdlOakKmhWB8QpRG
H9mprkSwt5I5kiow9MdsorFE1hOeU/X+QIjrkvCAzuM3khgKnumw5TLbdopHyqst
s00wjs27J0d9dzz1uVbza5+ecqz6E3iWJHunRmT1NsXA7SPLVcF86l8iIitQ0A9G
nlnJjgpckZHvy6p8OWwpPJ1ljncLj/M5xxgo00UCI7ShghkA8pmp0ZSPgYeaNJ0z
4eKQmbJd0U+d+YIqIRw8ot7ZVsGpL1oQ+/pCV3n7JcGl5y+7hcLzWAkNbYCPWjip
TTg9yfmPDGHza+z7eH161R5/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3E0rKr
TNwwkR2OxOK72SmncXzSMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1
QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB
dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC03H3GlZb8pHh4pmzISHRw09c4/sB/ilSotEYG1psi0ZHQ7npXveo2
VBtqpSit8op6IekEvRl/iPRwOPpt6TldheEB0yBRlrir2ooJ4ckwtCD5/QI7Btz6
CihwY6i8uTugKUXz9/L9/fJOCiQXOtDHLB79kP9WIS+Tm1OVqF+rOvSnOZIoLY7d
vGFaNCAztz0w3eX9DSUw9eBkx2HOlSnyQKCYq1bf0+ZHQZTrQjL9eeq0HELzac3v
EK1vuz3MhlzT3ZxQPNGxhYitBqusbwNmu4G3XFYy5wrn4kfGipdz4rTTJ9guphMP
vw5DLf3j9R+wAquwRggoI/taNb7jknPX
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:39 2026 by rpki-client