This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: Fft26WYai/vG9hPAjdFpSFEfnUH4MF+RgMm510LKUpk=
Subject key identifier: 13:59:14:E3:07:95:BB:11:2A:0C:28:16:84:D7:73:6C:20:74:2A:A2
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 0160
Signing time: Sun 25 Jan 2026 03:17:35 +0000
Manifest this update: Sun 25 Jan 2026 03:17:35 +0000
Manifest next update: Sun 01 Feb 2026 03:17:35 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: wYTcgD2d5A9h1CaRL5wrzEd1hIIFn0h+IVmvztS2Ypc=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Jan 25 03:17:35 2026 GMT
Not After : Feb 1 03:17:35 2026 GMT
Subject: CN=69758b4f-862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:5b:ea:be:c9:48:f5:43:b1:d5:2c:fc:3d:
25:df:a8:48:bb:e0:f1:3e:d4:99:bc:8e:ee:2b:37:
3e:df:95:26:df:13:e1:18:35:9b:ed:41:34:0f:46:
24:b9:28:93:8b:68:fc:80:87:23:89:94:12:33:c4:
1d:53:14:8f:81:d0:b2:03:aa:24:4a:db:25:63:5d:
de:03:2d:f0:85:f0:86:8f:05:55:04:ff:ec:dd:5c:
f1:49:b7:b1:79:49:1b:ea:e9:e3:72:35:22:01:97:
2b:03:d2:cb:ff:60:36:26:ac:c6:95:ff:52:4e:cb:
9d:8c:9f:b7:f9:43:25:00:4b:d7:60:93:92:4d:34:
00:23:54:58:fd:74:2c:be:c1:f8:d8:47:03:bc:9a:
55:b5:9e:d2:6a:9b:43:21:6f:67:87:dc:b4:76:23:
5e:91:b6:f1:c7:db:67:f9:47:aa:e2:cb:66:62:e7:
05:7c:eb:4d:06:d8:1a:90:53:84:08:e8:7c:02:62:
0a:a3:16:b1:15:0c:3c:66:c8:d5:4b:d6:18:82:af:
07:09:41:76:49:90:11:60:0f:d8:b5:2e:80:c8:53:
37:9e:16:52:04:c3:b8:f0:7a:52:1d:43:50:53:e2:
46:6d:61:da:cb:b7:74:d3:03:84:01:b4:2d:b5:ae:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:14:E3:07:95:BB:11:2A:0C:28:16:84:D7:73:6C:20:74:2A:A2
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:be:14:18:86:55:d6:06:80:ee:70:1b:90:1a:e0:a6:a0:53:
6a:ff:41:09:97:81:29:8a:9e:e1:50:39:88:bb:70:7f:1d:ac:
39:6e:27:40:b3:25:f5:d7:da:d7:14:28:7b:5c:39:f2:d5:25:
6e:ad:e2:7e:4c:f2:c5:fe:bc:29:06:07:06:b3:e9:4b:ba:2b:
0e:74:5c:25:03:80:b4:90:dc:4b:09:e6:6a:db:74:73:40:9f:
88:ca:04:70:9b:31:ce:5c:e0:c2:51:63:34:1d:63:07:0f:f9:
e4:89:41:c7:af:39:63:09:83:36:86:0e:16:d2:53:99:9b:27:
87:8f:ef:04:01:5b:c9:38:f1:10:de:45:e5:a0:fe:0d:23:a1:
3a:be:cd:99:b1:99:f4:8f:4c:1b:a5:5c:55:c5:0e:56:9f:1c:
6a:32:e6:0d:49:c2:c5:d4:56:3d:bd:f5:e4:52:87:01:90:c4:
27:8e:a1:5d:28:35:42:cf:af:7e:77:20:a4:ca:1d:f3:70:40:
f7:23:2c:3b:84:84:8b:9b:d4:db:fa:c4:8e:c7:20:e7:49:e3:
89:79:96:02:a9:75:69:55:bc:f0:e5:2d:63:5a:2c:5c:27:39:
c1:b2:b3:06:98:4e:dc:29:c1:6c:98:de:ca:b5:7a:03:5a:ef:
70:d6:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:52 2026 by rpki-client