This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: YFMzxH4W6VarMAucgR1F/LkBHPn7/IG0OMCsTGjRI4k=
Subject key identifier: 68:F3:C2:0E:B0:BE:59:11:62:91:7E:F0:39:36:E9:36:37:61:A1:A9
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: 73
Signing time: Fri 23 Jan 2026 05:58:20 +0000
Manifest this update: Fri 23 Jan 2026 05:58:19 +0000
Manifest next update: Fri 30 Jan 2026 05:58:19 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: q8LqYgTVk4adflQheJCS/6pE1C0Ob8Gj/yqqfzgU3gc=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Jan 23 05:58:19 2026 GMT
Not After : Jan 30 05:58:19 2026 GMT
Subject: CN=69730dfc-c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:e7:2e:af:c2:e2:63:55:1e:c5:ce:4b:fc:
2f:95:ce:96:4f:63:8d:80:f6:91:87:27:a8:3d:eb:
0d:8e:24:d3:0e:a6:78:e0:ba:a1:00:3a:1d:f5:94:
12:fc:f2:76:24:67:d3:c4:53:4c:2e:f8:d1:34:98:
52:c6:c7:aa:b7:d5:8d:54:6f:13:dd:9f:38:26:db:
96:54:93:4a:1e:b4:93:f9:8f:2d:2a:b6:33:e8:c1:
0c:09:d9:ec:8f:88:1d:4e:0e:19:4a:c5:5a:11:ff:
75:e0:81:09:38:f1:7f:c1:4e:b9:7c:9f:b3:c6:41:
02:b6:24:bf:8d:84:66:9c:14:df:6f:fa:86:66:e4:
03:59:45:02:d4:c6:67:da:26:33:15:8a:d7:2d:48:
2b:60:4e:b2:99:ec:9a:77:d5:ad:25:20:a6:71:ed:
14:a3:2f:5f:f3:79:56:40:6b:27:62:ca:98:ac:ea:
27:32:0c:bf:35:9d:fb:7c:d9:60:c9:d8:34:76:42:
de:81:5f:4e:e5:15:5c:31:97:ea:d7:69:35:3d:e5:
14:84:69:90:0f:d7:61:93:b2:cb:e7:71:de:eb:d8:
7d:81:c3:56:5a:80:65:3d:9a:e2:2e:83:d2:ba:5d:
db:5d:fb:23:94:f4:bb:6a:6c:1d:a9:52:5f:78:9d:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:C2:0E:B0:BE:59:11:62:91:7E:F0:39:36:E9:36:37:61:A1:A9
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:f5:35:e0:fe:9f:1f:62:eb:81:2d:26:fa:68:23:db:d7:
45:f6:a1:8a:60:8f:a6:79:d4:01:8a:7d:36:04:92:07:10:19:
f1:c8:4f:2f:e0:d7:43:17:55:4e:f5:b2:30:c2:3b:82:54:da:
7a:92:7b:53:32:b6:f1:73:f7:56:82:0a:e3:61:ff:3d:0a:fa:
29:e2:ad:c6:fc:f3:2f:6e:85:47:cb:73:1d:3e:e8:78:4a:ca:
3c:6b:f3:2a:17:e1:a3:e5:50:fa:89:e4:dc:e7:87:89:96:a0:
e3:58:84:e2:65:d9:c7:5b:51:c8:bc:5d:35:ba:a0:38:dc:43:
6c:d7:49:f0:cd:3a:73:51:50:00:88:b3:b2:2e:e9:44:45:55:
19:7f:82:60:36:05:0c:b8:4f:88:49:3c:a7:ab:e7:78:52:76:
7c:26:ce:d5:df:f2:b1:db:d1:8e:a2:d5:1c:fd:cc:92:f4:ce:
a6:ba:a8:df:c3:55:66:bf:b7:87:00:1a:a3:c6:9e:fe:c6:05:
14:30:94:60:9b:0c:40:9d:8d:19:01:e4:92:4f:00:5d:da:6f:
80:46:2f:4c:f9:06:4c:ef:1a:f8:3c:27:30:32:44:8b:50:3a:
01:ab:a1:fa:d7:5b:ed:cf:47:74:45:ae:10:9a:af:20:d3:3b:
46:ed:fb:da
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy
REQ2REEzNDAeFw0yNjAxMjMwNTU4MTlaFw0yNjAxMzAwNTU4MTlaMBgxFjAUBgNV
BAMMDTY5NzMwZGZjLWM0N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6v+cur8LiY1Uexc5L/C+VzpZPY42A9pGHJ6g96w2OJNMOpnjguqEAOh31lBL8
8nYkZ9PEU0wu+NE0mFLGx6q31Y1UbxPdnzgm25ZUk0oetJP5jy0qtjPowQwJ2eyP
iB1ODhlKxVoR/3XggQk48X/BTrl8n7PGQQK2JL+NhGacFN9v+oZm5ANZRQLUxmfa
JjMVitctSCtgTrKZ7Jp31a0lIKZx7RSjL1/zeVZAaydiypis6icyDL81nft82WDJ
2DR2Qt6BX07lFVwxl+rXaTU95RSEaZAP12GTssvncd7r2H2Bw1ZagGU9muIug9K6
Xdtd+yOU9LtqbB2pUl94nYHzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaPPCDrC+
WRFikX7wOTbpNjdhoakwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5
NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE
QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn
QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACA89TXg/p8fYuuBLSb6aCPb10X2oYpgj6Z51AGKfTYEkgcQGfHITy/g
10MXVU71sjDCO4JU2nqSe1MytvFz91aCCuNh/z0K+inircb88y9uhUfLcx0+6HhK
yjxr8yoX4aPlUPqJ5Nznh4mWoONYhOJl2cdbUci8XTW6oDjcQ2zXSfDNOnNRUACI
s7Iu6URFVRl/gmA2BQy4T4hJPKer53hSdnwmztXf8rHb0Y6i1Rz9zJL0zqa6qN/D
VWa/t4cAGqPGnv7GBRQwlGCbDECdjRkB5JJPAF3ab4BGL0z5BkzvGvg8JzAyRItQ
OgGrofrXW+3PR3RFrhCaryDTO0bt+9o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:05 2026 by rpki-client