This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json)
Hash identifier: X13C20v3Wp2S600SpZtidnknpka8J2d0MXRcP8FZp6I=
Subject key identifier: 07:C9:49:B0:C1:BE:06:8C:81:E0:77:A8:7D:33:D7:77:39:51:84:10
Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7
Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
Certificate serial: 066F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
Manifest number: 0667
Signing time: Sat 24 Jan 2026 21:52:33 +0000
Manifest this update: Sat 24 Jan 2026 21:52:33 +0000
Manifest next update: Sat 31 Jan 2026 21:52:33 +0000
Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: r47jYs3I5GxH1OLqKMmBcMq6xHaiHg+Wr9C8gm7S2Sk=)
2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 60Txo6gAZcJLQXsyFOEwAUgH1sTvvk2S/lm7zu2sz3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl
rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7
Validity
Not Before: Jan 24 21:52:33 2026 GMT
Not After : Jan 31 21:52:33 2026 GMT
Subject: CN=69753f21-2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:a9:64:64:38:23:42:76:fd:37:9d:58:cb:
78:2e:b3:d4:2f:d3:0e:20:e5:ce:5a:8b:8d:c4:ca:
ca:f6:00:05:f7:18:de:c3:0f:d5:e5:00:d1:94:38:
31:fe:71:c4:a8:56:84:82:d2:49:01:82:7b:24:29:
c4:11:c2:27:9c:12:72:67:eb:40:f0:58:74:de:b2:
12:8a:73:43:31:68:ea:11:39:41:3e:73:d2:e0:ea:
d9:89:c8:32:38:74:9e:3e:1f:db:1c:fe:ef:c4:c1:
02:36:9e:3b:cb:1d:1f:dd:57:15:e5:87:40:0c:b7:
2f:ce:60:86:8c:4f:17:c9:4d:ff:dc:1e:24:2c:5a:
19:87:bd:b1:48:f2:47:ca:36:05:d1:9b:65:0f:52:
b1:c6:dd:57:53:3c:43:bc:00:b5:9a:56:e9:dd:19:
ef:ae:5d:20:f1:48:32:d8:d7:eb:65:e4:35:fc:6d:
7b:7d:b9:ed:ea:a7:03:ed:de:c2:69:03:08:5c:db:
b9:86:e0:ca:49:b5:c6:9f:50:20:94:78:e5:f7:60:
40:70:12:7b:50:09:1d:42:e7:ee:27:2a:3b:bb:23:
29:1d:9a:0b:36:58:67:38:01:63:98:c2:2e:6a:dc:
53:dc:29:d5:7b:ab:07:8a:1a:12:b2:64:b5:18:89:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:49:B0:C1:BE:06:8C:81:E0:77:A8:7D:33:D7:77:39:51:84:10
X509v3 Authority Key Identifier:
keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a3:8b:0b:4d:d1:6a:2e:36:5c:91:27:e5:a2:3a:e9:0e:75:
e9:4b:51:74:31:a7:e2:e1:69:ff:0e:c8:c6:0f:16:3d:3c:bd:
3c:3c:e0:12:f4:84:68:2e:28:49:ee:5c:37:13:90:de:f8:9f:
4e:e5:bf:c0:f6:fe:bd:bb:e9:77:26:af:aa:9e:d6:47:55:c4:
49:f7:c8:e9:28:a5:f0:cb:74:2a:9a:c2:6a:cc:dd:af:dc:1b:
6a:f7:28:e0:b9:1e:d2:58:ee:92:79:c4:50:b8:d4:a4:be:3d:
d4:74:ad:69:f5:c5:c1:3a:a7:9a:04:94:3c:a3:90:e2:44:4a:
57:f2:a3:50:6b:12:03:78:eb:8a:26:7a:41:66:6e:51:04:93:
f0:ef:91:18:c5:19:b1:7d:7c:e8:9a:f4:85:73:af:70:8d:2d:
e3:e8:4b:96:8c:37:92:47:51:dd:35:1f:6a:55:55:0f:91:7c:
6a:1c:64:d4:3b:9d:3d:69:91:d6:b2:6d:42:c1:af:67:5e:bb:
1e:62:ed:28:9f:d6:b6:03:52:51:85:2a:8a:3b:4d:59:83:6e:
0b:97:32:1b:f9:d9:ab:4d:4d:7e:1e:3d:b1:19:ec:3a:e9:53:
9f:f9:b1:d4:11:4a:c7:54:ea:c2:8d:fc:75:a2:15:a1:91:be:
c4:41:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:21 2026 by rpki-client