This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier: sjsoktnqYqkIX+6wzmEIIvk3azyIC4RFNmQoBSHgfRo=
Subject key identifier: FB:B2:89:AD:A7:A9:7E:0A:00:BA:4B:CF:84:DA:CD:A2:DB:9F:E5:03
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number: 0170
Signing time: Sat 24 Jan 2026 22:23:16 +0000
Manifest this update: Sat 24 Jan 2026 22:23:16 +0000
Manifest next update: Sat 31 Jan 2026 22:23:16 +0000
Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: t01jtftCLNZW1JhnT8+eIxIJ1DpOBperZjN8RCGe95w=)
2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: ZzX2pAU2hf9tsTLmwqMICAJ5lNGrFfo//Sr5B58TslI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Validity
Not Before: Jan 24 22:23:16 2026 GMT
Not After : Jan 31 22:23:16 2026 GMT
Subject: CN=69754654-ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:d5:25:16:8f:b2:47:6c:8a:85:d7:97:d2:
04:59:c7:ab:41:6b:9e:e4:2a:e4:19:48:9f:76:64:
7e:bf:15:b3:d7:36:62:2b:15:08:95:29:fd:f2:6c:
3a:95:3d:a6:67:17:73:63:1c:a1:60:bc:c6:f9:be:
c8:96:d6:0a:16:9b:d6:8a:15:f3:c9:47:74:f9:5d:
e3:33:98:90:19:0d:ef:a8:0b:1d:54:94:bf:6e:89:
6f:2f:7b:ba:c3:76:8b:d4:3d:9b:b6:48:05:88:45:
ec:2f:47:58:36:50:13:aa:bb:fb:a7:94:1f:3c:06:
e9:2c:8d:e3:58:66:2d:ff:56:17:cb:2a:6d:89:62:
4a:36:1f:88:51:60:0c:47:84:a2:39:5e:5f:96:85:
a7:ec:33:ba:d8:85:cd:f3:fa:bf:0a:8e:65:2b:88:
24:f7:8c:c9:cb:0a:f3:33:94:90:8d:43:15:f0:39:
6a:3e:8a:7e:ae:b5:47:59:f2:07:a0:9a:f2:0e:e2:
f1:1c:8e:7d:09:56:3b:dd:14:b7:03:8d:81:d7:e8:
c2:d4:a4:f4:2b:0a:8f:d1:13:15:5a:7f:40:db:7c:
d2:02:82:81:6f:2e:28:fd:20:73:10:bd:9e:8a:c5:
b5:28:08:e1:af:65:f9:4f:68:40:f1:63:df:84:25:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:89:AD:A7:A9:7E:0A:00:BA:4B:CF:84:DA:CD:A2:DB:9F:E5:03
X509v3 Authority Key Identifier:
keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:7c:57:80:a7:9f:0d:54:30:5d:b7:7a:1a:80:6e:a7:1f:
95:47:0d:8c:4c:8d:88:1a:eb:41:18:30:da:d0:06:b6:58:2a:
39:e1:f6:e3:b1:19:7d:23:73:f6:a3:66:b5:14:c4:ca:20:29:
07:f9:6d:1c:6e:ce:0b:9d:38:cb:cd:f3:8b:90:80:37:bc:cf:
61:cf:3d:f5:31:28:2b:16:1f:09:c1:43:49:79:ec:d6:f3:93:
d4:d3:09:7b:fa:41:87:17:23:2a:f8:08:a0:3a:37:00:9b:f5:
94:48:60:33:95:d6:67:da:67:2b:c2:c5:37:77:61:23:0f:ed:
65:70:42:50:20:5a:9f:3c:c0:96:06:03:6d:79:ac:1c:34:e9:
e1:c8:e3:3c:bc:55:86:b3:e4:ae:5b:93:29:39:7c:9d:d8:35:
f8:62:3a:dd:d1:9c:e0:8c:db:0c:c1:fd:60:95:e9:56:b9:1e:
d3:59:1c:ac:ec:6e:ab:1c:06:a4:17:4c:17:d0:6f:b0:48:65:
b3:23:91:1a:70:56:1c:da:d1:88:d1:79:bb:bb:40:aa:4c:c9:
85:42:9b:b5:f3:4e:f9:0c:dc:8e:e3:6b:cb:28:68:86:cd:83:
0f:5a:60:4c:00:3f:fe:b7:ab:a7:94:73:84:60:02:39:28:7d:
81:38:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:54 2026 by rpki-client