This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
File: fCyheDCTqbmvjuRX2glIgkIVJQs.mft (raw, json)
Hash identifier: 0n2ssuB86/unzTgVByFpO925ddVGwDferuIB1px36rM=
Subject key identifier: 87:1D:35:D4:C8:2B:F7:7D:32:74:D2:81:D8:0C:95:76:AF:A6:7F:A2
Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
Manifest number: 5F
Signing time: Sun 25 Jan 2026 06:12:25 +0000
Manifest this update: Sun 25 Jan 2026 06:12:24 +0000
Manifest next update: Sun 01 Feb 2026 06:12:24 +0000
Files and hashes: 1: fCyheDCTqbmvjuRX2glIgkIVJQs.crl (hash: 3LJGrlrC2Q8HgKoepxdWmdMHBBGfgFVjNGY7i3fp6CQ=)
2: B1B36E8A691911F08409AD61C4F9AE02.roa (hash: MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Validity
Not Before: Jan 25 06:12:24 2026 GMT
Not After : Feb 1 06:12:24 2026 GMT
Subject: CN=6975b449-b9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:70:f3:83:33:44:ae:da:7e:45:77:05:16:
02:46:13:1c:64:5c:f3:c5:af:f3:10:8c:73:55:00:
ef:47:b1:11:14:b1:99:9d:17:9d:7d:4a:a7:c8:c3:
79:aa:37:4c:43:08:e6:f1:2e:68:21:2a:dd:95:3a:
ba:1f:4c:2d:14:40:91:d4:b7:6e:0b:a7:ea:45:70:
12:85:3a:da:7e:75:08:a9:63:da:d5:5a:8b:c1:b0:
28:f4:07:df:2c:b4:40:84:10:ef:e8:9c:73:1b:7a:
3a:5a:55:01:f8:c6:b9:d2:f3:ef:71:cd:41:98:23:
6d:9d:d1:c5:5a:45:c3:74:1f:08:a1:90:da:5f:63:
a9:a0:92:19:64:b4:6f:00:4d:27:f1:d6:0c:af:40:
6b:fb:6b:79:be:ec:a6:e5:35:39:c0:b3:14:0a:43:
33:0e:04:ad:af:4b:69:6a:3c:01:f8:24:89:03:30:
c9:12:05:85:14:01:0c:bc:93:84:c4:87:13:31:42:
a8:f7:75:bb:64:e2:d4:3a:0f:7b:10:1e:5b:5c:41:
2c:24:30:b7:2f:5e:b9:73:62:19:82:4b:76:92:14:
0d:08:b1:75:7d:3a:80:02:5f:82:d3:80:89:6c:23:
9e:9b:66:91:98:fc:93:c6:57:c5:89:4a:63:ae:8a:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:35:D4:C8:2B:F7:7D:32:74:D2:81:D8:0C:95:76:AF:A6:7F:A2
X509v3 Authority Key Identifier:
keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:76:b1:5f:aa:7b:15:36:b7:cb:7f:2f:fa:a2:60:cf:ff:46:
c2:01:71:bc:50:bc:2a:94:4b:99:c2:7c:cc:ab:bf:c1:cf:b4:
a3:1d:5a:c2:14:37:75:ce:cf:1e:98:f3:d6:ec:8b:e9:ea:56:
e2:05:05:de:75:41:ad:03:1d:04:cf:ea:89:a9:17:5d:c8:2c:
a5:94:e9:ef:d1:7d:b2:09:bd:c6:1e:01:73:a5:e5:f1:18:e6:
8f:b3:e0:fd:70:50:2c:f1:02:62:28:29:fb:81:a4:39:f0:28:
fc:01:a7:77:b8:32:21:21:51:e5:21:5b:e9:3c:09:9a:e3:91:
c9:fc:48:53:55:3d:3f:00:37:83:3b:9b:40:62:ea:8a:e7:a6:
af:65:72:b2:c2:11:e6:25:e2:1e:fc:36:26:54:5d:b3:84:1d:
6d:6e:8a:e9:b5:08:88:8d:f8:8f:18:75:6b:9c:7e:fe:c3:b2:
42:94:e3:93:e5:a0:92:a9:22:b4:e6:e9:d2:c4:2d:0c:3e:26:
18:0b:a3:de:16:b3:8f:f8:f3:b3:52:4c:34:63:f7:5f:cb:a9:
6f:b2:ed:63:4d:be:ad:0c:0f:ae:ff:5f:eb:9a:c4:f0:74:63:
ae:54:ec:89:f6:cf:ee:ae:21:e8:85:80:9e:fe:71:12:7a:e7:
17:d0:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:44 2026 by rpki-client