This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier: 6AWEjSqykLFF1R4sPCSzI8b6u8xMNFsYWRWfm3V3l0w=
Subject key identifier: 23:96:8F:6D:BB:0B:45:17:68:B7:01:A7:10:07:6B:35:B4:53:5F:CE
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number: 0216
Signing time: Sun 25 Jan 2026 01:31:54 +0000
Manifest this update: Sun 25 Jan 2026 01:31:53 +0000
Manifest next update: Sun 01 Feb 2026 01:31:53 +0000
Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: 9FTEehpHjqGJaTjtEFnmCS7ZoM4iarGc3s0NXNfyuwc=)
2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: Ne5P4RHs3YFSrDYzxUegdYs2bv4xvTKvncGb7wbf4vY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Validity
Not Before: Jan 25 01:31:53 2026 GMT
Not After : Feb 1 01:31:53 2026 GMT
Subject: CN=6975728a-572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:8c:f9:42:1e:67:bc:b8:6a:44:9b:46:66:
9c:bc:64:c7:59:25:30:4b:cf:15:dd:51:02:34:d0:
1d:c4:02:5e:7c:ad:14:98:58:9f:c9:4c:99:06:23:
20:ff:cc:2a:f1:aa:ee:2c:49:26:69:75:4d:53:a6:
72:69:16:9e:64:b7:8f:0a:01:85:9f:a4:70:b7:c2:
d3:3e:78:69:bb:e9:5b:ca:6d:25:79:1e:eb:db:aa:
9b:9a:61:9e:a6:a2:c1:35:00:a9:46:7b:c8:a3:a4:
58:f2:bd:32:0f:d7:52:0f:ea:25:c4:96:6b:4b:07:
ed:24:45:64:61:f6:56:b6:cd:bf:37:6c:7c:70:be:
f0:8c:d0:69:a0:23:85:a8:aa:86:4d:47:0b:04:03:
6a:98:4d:25:be:9a:ac:8c:b1:7e:dd:f6:0e:60:c9:
f6:66:ef:6b:4d:4d:e4:c9:d4:a4:56:fa:fa:d3:ed:
98:9e:8d:95:78:f9:39:57:8e:52:ed:94:88:5e:5d:
2c:87:11:7e:1d:de:bf:c9:a9:d9:88:15:a7:e5:2e:
91:c6:c1:93:54:d2:b9:b3:4d:50:3a:35:f5:36:6c:
93:4c:b7:f6:3f:ca:4f:b9:32:c1:71:22:70:cd:05:
39:b1:3a:27:c8:05:78:2d:47:90:46:ae:fc:ac:73:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:8F:6D:BB:0B:45:17:68:B7:01:A7:10:07:6B:35:B4:53:5F:CE
X509v3 Authority Key Identifier:
keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:05:65:83:3d:01:1d:ab:cd:6e:4b:08:35:12:7a:d8:00:
90:de:cf:54:c0:31:db:f3:ae:75:2c:6f:10:29:cd:a2:6e:bb:
8b:c5:de:28:a3:dd:d0:29:e9:b4:d9:ee:30:74:d5:c1:39:ad:
74:da:7c:70:09:4d:8d:e7:19:59:fb:0d:07:b1:2a:b0:42:9f:
53:48:df:8d:77:0a:a4:c3:09:28:13:38:d9:91:85:2b:dd:44:
50:16:d6:13:d7:8f:c3:54:15:2f:05:04:2b:d8:30:92:ce:aa:
8b:43:4d:32:8c:9a:64:07:c7:99:af:40:e1:d1:8f:35:e0:a6:
f8:2b:55:94:1d:e5:92:e9:24:86:1d:5b:ee:ce:0e:2f:76:db:
dc:b9:e9:b0:98:70:5b:0b:aa:81:b2:09:34:f3:1f:cc:b6:1d:
39:21:60:c3:49:fb:7f:c0:a9:eb:78:bb:7b:44:fc:76:c6:28:
c8:6b:1f:3e:ee:38:07:69:99:f8:6e:7b:15:38:62:02:e6:00:
50:66:d6:2a:3c:59:ba:74:3e:24:90:d2:96:b3:4c:f0:da:09:
32:90:c1:9d:5e:31:84:36:a1:b8:d9:89:86:93:c2:4e:d3:58:
a6:41:2d:ee:2e:57:f2:8d:42:e4:d3:ec:64:d6:47:04:7a:f6:
d6:f1:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:47 2026 by rpki-client