This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: Xx0aMLnOb0jq5u3zBXRnGG5ZAjGqAN3QYCI7Iab9rzc=
Subject key identifier: 14:80:3B:78:D0:CC:D7:32:EB:7B:F1:A2:B7:95:D3:16:95:C9:E4:6E
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 021E
Signing time: Sun 25 Jan 2026 01:27:58 +0000
Manifest this update: Sun 25 Jan 2026 01:27:58 +0000
Manifest next update: Sun 01 Feb 2026 01:27:58 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: cnKP5p8AxFUAYPSPKvyUif10Ry8appLoqr0wW5YHf8w=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Jan 25 01:27:58 2026 GMT
Not After : Feb 1 01:27:58 2026 GMT
Subject: CN=6975719e-e39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:56:0b:b8:8f:44:e4:1a:31:0c:83:a1:3c:
21:62:c4:a4:da:7c:58:4d:dd:35:8b:7f:c4:e9:11:
7a:f7:b0:7c:d9:53:91:6d:30:4f:e8:6e:fb:4a:1f:
74:cb:3d:29:fe:f9:cf:af:29:ad:38:82:9f:9f:ad:
20:55:b2:bd:a7:65:d0:84:36:23:d0:d7:be:f8:32:
54:b0:27:30:72:a0:6f:51:77:fa:fd:94:17:b7:fe:
92:7e:6b:14:53:1e:d2:5a:5b:5c:95:de:c2:5b:ac:
b9:b3:60:25:ff:03:5b:f2:c9:e5:73:90:ae:c9:30:
ec:f8:f1:45:fa:85:33:5a:d7:3b:ff:29:80:d9:a4:
6e:29:1b:7c:40:02:60:81:48:e6:13:4c:ef:5a:e2:
0f:f0:84:72:04:a5:8d:a4:c8:92:d7:06:52:40:4a:
b0:f4:7e:de:c3:20:1a:fe:55:12:7a:a0:81:63:ad:
aa:36:5d:06:c1:5b:e3:b9:63:e0:85:2d:f7:fa:d7:
56:fd:b9:49:ce:f3:87:3f:ed:ea:d9:c9:dc:44:08:
ef:b7:d0:4f:36:27:cf:5a:b6:3b:57:b4:60:72:14:
c9:68:53:ed:da:65:8f:47:63:f3:51:6c:68:55:38:
a0:0a:99:1f:00:34:9a:83:d2:28:90:df:f5:b7:01:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:3B:78:D0:CC:D7:32:EB:7B:F1:A2:B7:95:D3:16:95:C9:E4:6E
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:77:25:5e:be:29:e5:d1:19:16:f1:7d:ed:93:96:37:8a:66:
0b:ba:7d:9c:0a:23:21:2f:27:c8:30:de:62:c1:aa:c3:c5:4b:
59:e8:24:67:41:72:1c:02:bb:f8:2e:c3:eb:13:2f:f6:90:e9:
d1:00:ee:19:f2:69:a1:97:eb:49:6d:c3:b2:c2:90:ed:bf:b7:
6d:a2:a9:d6:6a:56:a1:ca:81:3f:3a:c5:59:22:3f:07:14:81:
a3:71:f2:2d:1b:06:4f:39:71:4f:4e:ec:9f:28:ac:96:24:61:
b4:f9:79:83:91:03:fe:3c:66:fd:ff:8a:e1:3a:b7:dd:1d:97:
bf:66:c9:3a:59:b9:87:76:34:77:fa:f0:f7:c5:12:25:c1:b3:
08:2a:c0:b2:28:27:4a:20:c4:50:20:49:7b:b5:41:9f:d2:d8:
8f:c5:d8:35:41:ea:6f:c5:38:8a:1e:80:35:b1:f1:a6:66:9f:
5b:e0:7b:90:a8:f8:8b:63:2b:bf:f0:a3:dc:6f:81:36:58:97:
20:93:e4:e0:d1:eb:71:49:c3:e0:f5:e6:b5:25:df:ef:61:07:
34:60:78:b9:dc:64:8b:6b:36:8a:62:67:f5:6a:56:83:81:ef:
de:e4:a8:75:55:e9:94:8b:97:14:ed:1c:75:3e:bf:42:f6:3c:
54:29:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:11 2026 by rpki-client