This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier: WxSTqP8iEHXNA1/FtnkpB31tiaVjkp7GT/9oUJe6eB8=
Subject key identifier: 23:95:14:69:29:26:2A:B3:31:94:6A:BC:12:42:58:36:AE:89:7C:BA
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 0991
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number: 1FD7
Signing time: Sat 24 Jan 2026 16:28:34 +0000
Manifest this update: Sat 24 Jan 2026 16:28:34 +0000
Manifest next update: Sat 31 Jan 2026 16:28:34 +0000
Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: LB6JUJzC5bG8IQVy7RvSKCxHylIqEQMgNx+9mSL5ywc=)
2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Jan 24 16:28:34 2026 GMT
Not After : Jan 31 16:28:34 2026 GMT
Subject: CN=6974f332-31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:a8:43:ff:cd:12:88:77:2c:6e:fa:ac:2c:
af:b2:ab:ff:1f:29:a7:3e:3a:bf:08:e8:cb:e3:e2:
e5:41:16:90:52:ac:82:50:e9:d3:c7:1c:b9:3b:28:
dd:5e:92:8a:07:19:14:45:15:f6:af:1f:d1:53:ae:
f7:2e:ff:f8:1d:e5:4d:7a:41:9a:fe:49:2a:e1:6e:
f7:b1:ac:94:0a:d6:37:9f:7e:8e:96:55:d2:3d:3f:
84:b2:2e:b9:dd:de:31:eb:c5:18:f8:59:6d:9a:a6:
0e:45:ee:c3:1a:10:7a:e1:7c:c1:57:72:0a:a2:0e:
b2:8d:69:14:0b:bb:13:54:1f:09:c6:dd:c3:c8:52:
2b:92:15:42:bf:23:4e:ba:81:1e:71:ab:12:07:78:
bd:d8:a7:26:51:fa:c4:c7:be:d8:35:aa:52:fc:dd:
d6:2a:ab:e2:b6:77:0a:31:80:e1:c5:5c:0b:f4:f0:
a3:d0:87:cb:96:31:ee:37:43:ef:90:1a:f5:30:cd:
c7:cd:7b:f2:8b:7a:a9:6c:e1:f6:62:55:f8:31:ef:
57:36:ed:7a:17:9a:3e:28:54:f3:4a:9f:8e:0f:a0:
23:f4:ac:da:c0:12:7f:27:34:34:4c:c5:b1:dd:0b:
ae:4b:bc:3e:ec:6a:b1:61:3c:a3:08:7f:be:7b:9e:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:14:69:29:26:2A:B3:31:94:6A:BC:12:42:58:36:AE:89:7C:BA
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2f:ce:ad:1f:a9:56:bf:db:72:6f:0b:37:33:9f:ea:35:a7:
5f:ba:9e:92:5d:bb:5a:6c:66:0a:ff:89:27:ee:3c:4d:45:0f:
5a:cd:01:90:f1:b6:cb:87:63:af:d0:ff:89:d4:d3:d1:73:63:
98:74:cb:d2:f4:94:c7:4b:55:bb:26:c6:e9:90:82:e9:75:84:
9b:5c:b5:c4:ba:5d:45:9a:66:59:a3:6d:1b:f6:b4:1a:76:9e:
04:2b:83:a1:14:b9:8a:d3:ed:70:84:b8:b2:ae:de:b1:37:99:
47:e5:01:c9:08:f2:ea:4c:09:26:a3:2e:d8:a0:88:25:04:a4:
00:22:18:3e:a3:6e:12:e4:74:3f:81:d1:ab:7a:27:3a:8b:7f:
85:a4:5b:05:7f:22:67:d7:6c:d6:33:0a:ac:07:31:ed:f3:82:
47:47:08:eb:1a:02:25:71:a0:51:e9:92:b3:2e:91:4c:e6:80:
6b:d2:82:29:2c:b6:8f:be:c1:72:08:bf:45:57:7f:e5:85:69:
71:ff:db:9e:07:a7:a4:b9:21:4c:8c:8a:af:de:49:d2:2a:d6:
35:84:59:67:05:71:32:34:b8:4c:3b:4c:e6:f5:06:77:1c:dc:
61:14:f6:7b:81:0f:04:6d:49:7f:72:3a:ec:85:df:a4:0e:2e:
cf:38:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:16 2026 by rpki-client