This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
File: fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft (raw, json)
Hash identifier: lhQ+Z8wkKex2SNoW4aCM3Hke9yY18EQBfikPx5zMCaE=
Subject key identifier: 0C:F5:8E:29:EE:B8:22:DB:FF:F6:C0:58:6D:58:1C:C3:87:40:C7:ED
Authority key identifier: 7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67
Certificate issuer: /CN=A919C7D0/serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
Manifest number: 28
Signing time: Sun 25 Jan 2026 06:43:26 +0000
Manifest this update: Sun 25 Jan 2026 06:43:25 +0000
Manifest next update: Sun 01 Feb 2026 06:43:25 +0000
Files and hashes: 1: fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl (hash: wzbJh2494NqJ9RXG3On4wUeGs2aaV8PEgQ8+g+DNj5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl
rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7D0, serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167
Validity
Not Before: Jan 25 06:43:25 2026 GMT
Not After : Feb 1 06:43:25 2026 GMT
Subject: CN=6975bb8e-ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:29:5d:45:f0:5f:64:5d:f9:ca:f2:2a:ab:
5e:16:05:bd:16:e6:12:1e:60:f4:85:47:fd:23:7d:
1d:4c:a8:c7:e8:fb:ce:25:3d:cc:82:ae:5f:2b:df:
42:01:0f:22:34:f7:1b:ae:4f:73:62:91:d3:de:0b:
8e:5a:72:85:df:31:df:b4:a8:df:ea:de:38:76:6a:
33:ec:8c:c0:5a:99:06:92:21:c5:60:25:7e:74:87:
fe:d1:c9:e8:dd:d3:0f:c5:d7:ed:b4:1f:3f:a1:08:
53:43:25:ca:2c:3e:f9:e2:c9:82:b0:9f:dc:9d:5c:
67:46:6a:07:2c:9b:ed:b6:8e:63:65:ec:d7:99:96:
ad:0a:79:52:fd:51:5b:7d:ee:61:31:da:2e:cf:35:
d2:e6:f9:ed:de:1b:ff:b4:fb:d2:7f:4b:b9:4a:7b:
d0:46:28:3a:78:e0:b3:6a:eb:f4:d8:22:a3:06:3f:
88:f1:df:ce:86:58:0f:6c:5b:ec:46:cf:9f:fb:19:
8f:c9:a8:63:56:00:2e:8a:1d:42:ca:5d:17:88:f7:
98:83:34:79:69:77:5e:31:2f:32:f1:83:16:1e:cd:
83:99:ab:6b:43:52:44:c2:20:e2:2a:70:db:0d:72:
bc:ec:1c:12:a9:06:8f:f2:2e:5b:e3:b2:61:34:10:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:8E:29:EE:B8:22:DB:FF:F6:C0:58:6D:58:1C:C3:87:40:C7:ED
X509v3 Authority Key Identifier:
keyid:7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:63:c0:ce:a8:f4:e4:81:4d:e2:70:44:d8:32:90:1b:4b:
e5:72:a5:51:a1:2a:ba:61:03:3f:4d:2b:d6:17:23:d4:89:fe:
41:34:0e:97:1d:4b:de:79:af:c2:5c:78:e2:fd:6d:59:0e:d8:
e5:94:f6:af:76:0a:7d:57:f8:4d:13:56:5e:54:55:1b:87:e4:
7e:36:fb:88:c2:31:f2:62:da:de:5b:ea:5c:0c:c8:9f:d5:28:
38:95:53:1a:03:a2:7c:5f:18:86:75:a8:c9:53:c4:c6:d0:d8:
a0:fb:dc:d4:6a:c7:c2:53:2c:58:9a:2f:09:c3:88:a7:03:35:
4d:da:d6:a8:eb:09:a1:9c:a0:e9:5f:68:c0:91:b6:e0:11:06:
73:06:c6:e0:bb:f5:0f:70:f5:fc:1b:e2:e6:38:62:32:3f:b8:
a7:68:fd:86:14:a6:ab:ea:b4:9c:2e:23:9a:30:8f:61:db:d9:
19:ed:da:88:6e:a8:fb:4c:2a:76:c5:84:2a:f2:d0:08:1e:74:
5b:dc:bd:16:af:44:27:07:97:2f:5e:ce:7b:a6:25:c5:4d:b6:
84:f0:a8:92:8a:0c:00:79:81:f4:9c:9e:8b:13:94:44:af:9a:
1b:4d:07:0c:0b:e3:83:41:24:98:97:8e:0e:9d:18:e6:5d:73:
9a:7f:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:47 2026 by rpki-client