This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier: ChM3iWR6NCmqV2qiVyHs+rblHpnrK03UUBIeazXEhjA=
Subject key identifier: 75:F3:45:33:5E:42:6B:8F:48:C4:62:20:17:85:74:71:B7:43:20:79
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number: 36
Signing time: Fri 23 Jan 2026 06:31:37 +0000
Manifest this update: Fri 23 Jan 2026 06:31:36 +0000
Manifest next update: Fri 30 Jan 2026 06:31:36 +0000
Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: 85kWYtoC7O1ZF+pB7OdhCKePV+JTevXtclR3NNLFmCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Validity
Not Before: Jan 23 06:31:36 2026 GMT
Not After : Jan 30 06:31:36 2026 GMT
Subject: CN=697315c9-abe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b3:41:71:a8:93:fd:61:f1:e1:b3:06:c6:e3:
98:a7:52:08:0a:32:89:17:eb:7a:05:ef:ff:aa:bc:
82:03:c2:cd:b3:e5:81:c4:40:52:49:4b:82:57:f2:
13:91:ed:ae:06:11:c2:4b:5e:cd:cb:61:48:6b:23:
d7:7e:a4:48:54:90:3a:67:da:7a:89:75:8e:b4:70:
11:48:08:2b:b4:cd:9b:06:56:10:01:04:a7:ce:bc:
6e:5d:59:77:cf:a3:45:dd:88:c0:d5:8f:7b:51:b1:
9b:41:8d:27:a4:15:84:9c:2c:d2:a0:c9:7a:2e:15:
32:ed:0c:a2:da:14:f8:b5:81:48:c5:b0:61:c6:56:
f8:8d:25:0b:83:7d:50:c7:2e:76:e7:07:26:5a:e2:
d2:33:30:be:ba:18:05:46:f7:2a:43:64:89:cb:65:
63:c9:17:2f:53:fb:d7:18:f9:0a:a6:ef:32:59:1e:
d2:92:7e:87:a6:8a:4f:fb:2c:74:8d:0a:83:7c:65:
0f:14:75:a6:50:13:d8:33:bf:35:38:47:52:49:53:
e9:8e:89:fd:54:a9:de:c7:67:67:67:b6:5f:0a:bb:
29:e2:93:1d:9d:fc:f0:33:f6:06:b9:c3:3c:0f:0e:
df:7c:61:d6:9e:12:2c:fb:8a:90:ab:f9:bc:a5:e6:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:45:33:5E:42:6B:8F:48:C4:62:20:17:85:74:71:B7:43:20:79
X509v3 Authority Key Identifier:
keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:62:d1:2b:30:56:39:c0:3c:8f:49:4f:75:60:62:b3:df:c3:
15:13:1d:89:55:f8:e6:78:ac:5c:8b:11:9b:3f:95:c3:dd:db:
d8:d5:70:1e:c7:a0:7d:e0:5a:4f:ed:84:af:cc:76:f2:5e:99:
14:28:80:2e:04:22:f2:80:3c:f9:55:83:ac:4a:32:a3:8c:ba:
66:ca:53:0c:13:5d:77:54:07:4b:a1:84:a4:af:f2:50:6f:04:
e6:50:3a:c1:e5:b6:48:56:d6:7b:6f:35:ec:04:2f:c0:05:f8:
a4:5a:b3:67:1a:ac:b1:61:9a:f3:00:0e:7d:68:4d:e0:11:28:
ae:b2:c9:56:31:d3:96:d5:25:c9:5e:7b:34:02:e3:ba:55:5d:
0c:13:e0:00:7c:cc:e7:43:84:5e:44:d8:80:16:15:8c:6b:24:
e0:8a:77:72:53:1f:af:9d:20:d0:ab:31:0d:3e:2c:01:90:79:
19:a9:9d:5e:03:5d:59:07:b1:5f:f8:91:40:de:27:0b:a0:6e:
ac:f1:e2:03:db:8a:8d:31:17:06:68:9f:3e:d6:b3:55:e4:91:
0f:c6:b0:66:b1:31:a2:52:cb:ce:21:28:ec:b2:52:ed:fe:15:
de:3c:71:01:bb:b5:43:46:99:02:33:44:eb:fe:f4:38:1a:77:
1c:5d:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:06 2026 by rpki-client