This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier: F6oplx3y3ETUc2K2Apv2EZILGdvmgRfQzlLWwJGWurA=
Subject key identifier: 31:00:B9:C2:B1:49:D0:1D:34:5A:92:9A:65:99:FF:A6:3D:B5:09:62
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 34FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number: 34FF
Signing time: Sat 24 Jan 2026 14:36:40 +0000
Manifest this update: Sat 24 Jan 2026 14:36:39 +0000
Manifest next update: Sat 31 Jan 2026 14:36:39 +0000
Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: c5jNxKe+dHD4cOQbbXixFwCQhmeHrIT+UTo2m5iVJbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Jan 24 14:36:39 2026 GMT
Not After : Jan 31 14:36:39 2026 GMT
Subject: CN=6974d8f8-4476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:03:1a:d9:2c:27:b3:cf:b6:5a:db:f4:0c:
c7:7b:00:3a:33:e8:e4:02:53:9a:7c:c6:ef:dc:0e:
80:40:41:e5:64:e5:62:92:97:d0:67:53:26:67:74:
9e:d4:98:1b:df:4a:04:15:0c:61:9b:e0:99:c2:a3:
12:4c:2d:45:a8:ac:ce:a9:38:09:d3:86:aa:fb:a7:
77:3f:ff:0d:8a:70:77:cc:c1:dc:57:4b:90:9c:30:
07:3a:08:6d:2d:d8:dd:64:d4:7f:45:7c:0a:d9:24:
bb:f0:51:ee:4b:58:95:c5:44:c8:70:91:6b:81:d5:
65:0e:91:80:1b:70:7a:f8:89:bc:03:f3:64:61:2e:
65:23:7e:01:b3:6c:7b:bb:ed:9e:32:7a:36:cd:15:
d1:9b:3a:7a:42:f5:70:5a:fd:df:9d:31:5a:9d:c4:
e8:e9:71:3e:29:5f:3c:43:4c:8f:4c:90:a3:15:00:
b4:60:14:a6:9e:71:67:c9:3e:14:9b:e5:aa:2a:26:
e4:cd:4f:30:da:97:33:74:ce:9c:0e:10:ae:68:18:
2b:18:c1:b1:97:bc:d3:0d:6a:95:fd:ec:24:f5:8b:
40:52:ca:b3:ff:be:83:4d:47:67:5e:76:2a:ca:ec:
5a:6e:9b:4e:02:9a:8e:04:79:fd:bf:7c:35:87:e9:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:B9:C2:B1:49:D0:1D:34:5A:92:9A:65:99:FF:A6:3D:B5:09:62
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:38:61:30:e9:9d:b4:48:2e:4f:da:37:4c:91:29:9a:2c:cf:
5f:bc:ce:30:ef:2e:7e:1b:53:c9:c0:86:6e:d6:6d:e7:77:cf:
c7:6e:a8:eb:9f:4f:b2:d3:40:db:39:ec:75:e9:ae:8a:f0:da:
7b:46:06:90:95:f5:39:ba:90:d6:92:90:5e:5d:2a:fb:06:f1:
b4:0d:b9:2d:3b:bc:93:e0:3f:f8:3e:bc:91:b2:51:8b:aa:5a:
d2:28:88:53:7e:bb:5a:b7:67:bf:e9:4b:6f:74:c2:6b:88:43:
b5:1d:3a:eb:d6:8f:93:40:51:bf:49:1a:d9:11:33:9c:e7:c8:
2c:1b:fe:68:2e:cf:da:10:04:06:f4:72:bf:a8:75:5b:26:0e:
07:47:f1:52:c4:10:18:a4:1f:cf:f2:4b:40:a1:37:6e:e1:0e:
4f:c0:a9:00:6e:87:92:dc:ac:42:c4:ec:60:5e:da:13:53:62:
24:90:5b:53:65:2f:83:10:ef:78:cf:04:2c:aa:c6:2b:b7:7f:
55:2c:a4:e5:36:1d:a3:ec:89:56:84:f2:55:f3:c4:ca:a8:b5:
5e:51:4b:16:c8:24:08:7e:94:4c:e9:99:2d:22:34:75:2a:0d:
55:7f:0f:e6:cd:92:10:0f:e1:5c:a9:4a:5c:0e:c2:0b:a2:0a:
71:5c:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:31 2026 by rpki-client