This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier: Fh2Uvk5TNkAt6xb8kDGVtqGqH0tLoj+9TneRmV37Yu8=
Subject key identifier: A0:63:84:0E:23:87:9A:75:D2:D6:46:4B:3A:E8:21:26:87:6A:D4:C9
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number: 0236
Signing time: Fri 23 Jan 2026 01:09:14 +0000
Manifest this update: Fri 23 Jan 2026 01:09:13 +0000
Manifest next update: Fri 30 Jan 2026 01:09:13 +0000
Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: 6TqOKk1vK0e3pq93O3Hp3LdSquYD6UxY8xX5wR8Y1bE=)
2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Jan 23 01:09:13 2026 GMT
Not After : Jan 30 01:09:13 2026 GMT
Subject: CN=6972ca3a-f095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:cf:19:0e:c2:c0:f3:99:9a:35:32:cc:a2:
6a:55:d2:77:40:b2:8d:6e:5e:5c:8d:e5:b3:65:a4:
3b:ed:6d:47:8d:87:56:19:10:45:b0:dd:e8:44:dc:
8a:d7:6f:27:fe:60:e4:56:a7:4a:1d:9b:d1:ce:52:
91:aa:f9:28:26:9b:8f:81:ad:cf:54:e7:ab:5c:b8:
5b:26:6e:8f:56:98:0d:b6:b3:5a:12:e9:87:f6:2d:
d6:0f:4f:76:72:ba:04:ae:89:6f:2e:69:cf:55:25:
22:33:5f:e4:48:1b:41:2d:f5:1a:0a:f1:82:58:0b:
bf:56:8f:06:72:81:4f:9a:e1:42:c1:ac:15:18:46:
22:82:a8:a7:af:e5:a9:d9:ad:a6:6d:58:cb:61:ba:
74:2a:81:ea:32:43:f4:87:d4:08:4c:cf:7b:c4:e7:
3c:40:a4:33:28:ff:27:11:02:a7:93:f2:d3:3d:5d:
bc:ea:b1:59:f7:1d:0b:20:68:7e:4f:02:3a:81:ab:
8f:cc:8e:3f:cb:2a:10:03:43:67:5e:c2:9f:ca:a2:
36:9c:ed:f3:2e:a2:a0:83:12:e9:a3:4e:da:a2:a9:
5c:23:5b:66:b5:9a:1b:14:c5:c1:38:cb:82:bb:61:
8c:a0:92:7b:36:3f:4a:73:08:85:2d:8a:33:50:1b:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:84:0E:23:87:9A:75:D2:D6:46:4B:3A:E8:21:26:87:6A:D4:C9
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:42:5c:84:fa:f8:11:35:34:cd:c9:93:67:e0:e2:96:5a:33:
fa:99:18:50:34:10:f9:22:38:26:dd:cc:f4:1a:93:6f:57:d7:
59:ea:e6:08:47:38:55:54:55:e8:f3:f6:3d:8e:20:64:13:9a:
15:97:c1:cb:7b:e8:06:b3:0c:e3:ba:42:b6:a6:cb:32:3b:80:
ff:ee:e5:3f:1a:cc:f9:eb:cd:9c:57:5d:cd:9e:f0:59:c3:07:
a6:15:bd:c3:26:96:a5:64:3e:0a:29:31:74:13:bc:0a:d4:21:
04:2e:51:ee:1c:49:7b:94:a2:3b:84:31:6e:d9:fa:38:04:58:
bd:2c:14:5a:54:cc:2a:4a:92:ea:2f:24:57:0c:32:e4:40:46:
c7:a0:76:d1:be:c0:12:12:0f:16:3a:6f:ab:eb:55:0d:e7:2a:
4b:18:65:24:36:93:ed:f7:02:3f:f5:f3:96:eb:13:aa:5f:e2:
ea:ef:4e:b3:5c:67:f9:72:51:da:c4:95:a6:cc:99:44:00:48:
08:a0:b3:17:cd:52:6d:03:7b:53:ce:90:30:db:3d:f6:ff:fe:
28:1d:12:7b:f0:89:14:44:d3:f4:c7:31:f8:55:18:83:07:fb:
87:47:10:81:73:f0:c3:b6:63:9c:c0:43:a3:df:bf:5a:44:a8:
47:7e:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:56 2026 by rpki-client