This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier: jCCaWpAglEyyxxvzbPy69S8xvaX46AYAZ8C+as2u/u8=
Subject key identifier: 09:BC:1D:0D:2B:B4:46:06:BE:C9:76:9D:FA:24:5C:3A:A8:BA:39:81
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial: 34FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number: 9B91
Signing time: Sat 24 Jan 2026 15:08:44 +0000
Manifest this update: Sat 24 Jan 2026 15:08:43 +0000
Manifest next update: Sat 31 Jan 2026 15:08:43 +0000
Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: f1HOrc2m3Q4+Nm9yH+3l0Lpk4QMVxga43ZXoMCVIAcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13564 (0x34fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Validity
Not Before: Jan 24 15:08:43 2026 GMT
Not After : Jan 31 15:08:43 2026 GMT
Subject: CN=6974e07b-a9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:1c:e5:3b:85:3e:58:e2:42:7c:94:db:55:
f8:cc:3c:9e:d2:9d:c7:ea:d4:20:9f:47:40:71:97:
c9:32:f8:39:cf:5f:18:70:a0:b7:bb:1b:56:66:83:
5d:42:c6:89:de:72:06:51:99:b8:42:79:a9:c6:12:
3a:69:72:f4:33:42:3d:f7:95:40:ca:c6:cb:a5:29:
c3:27:a6:78:0f:dd:74:42:85:62:cb:6f:fb:f6:8e:
a3:14:45:63:e3:02:a4:1f:99:ee:a0:f8:6a:14:e1:
7f:ca:b3:96:09:73:73:2a:26:10:51:a0:0b:49:28:
8b:45:e8:2c:77:2e:d6:e0:2a:e9:43:36:51:f9:91:
b0:f5:ae:df:fa:bc:dd:6d:2b:e6:7e:51:85:3a:d6:
6f:10:47:e4:96:9b:75:56:54:2d:a6:51:4e:79:4f:
a3:2e:67:13:cf:ec:cb:d1:0f:bc:95:91:0c:eb:07:
b9:5c:49:a1:7f:c2:7e:3a:0e:fa:b7:5c:c9:2a:dc:
37:7e:8b:f1:50:95:e6:c1:3b:bf:9a:da:8c:d3:d4:
38:41:f1:12:fc:dd:6f:31:03:3f:5c:f6:ab:8b:64:
f2:b3:35:1f:b7:37:aa:a5:3f:51:c0:cc:77:8a:85:
88:57:1c:76:1b:30:70:9c:1c:e1:c4:9e:dd:75:c5:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:1D:0D:2B:B4:46:06:BE:C9:76:9D:FA:24:5C:3A:A8:BA:39:81
X509v3 Authority Key Identifier:
keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:a8:92:3a:cb:af:62:d0:17:fc:3d:b7:dd:8b:f3:5a:27:
c1:23:ed:e5:da:64:ff:5c:1b:aa:53:5f:b7:97:8c:67:33:f7:
6f:1f:7d:5c:f4:36:54:83:bd:e3:54:5e:6a:bd:a5:27:5f:80:
64:06:9d:94:e1:82:eb:00:1d:94:cf:44:9b:06:3e:a5:96:b1:
d5:f4:45:ca:85:79:59:d1:ff:0e:ff:f1:3c:75:33:b1:3f:a6:
1d:c4:85:57:f7:02:5d:8c:ea:de:81:f5:7b:25:b2:58:e4:79:
49:54:6d:1d:b0:e3:35:4a:4a:ff:ed:df:9a:4b:91:54:2e:9e:
79:d0:96:59:4f:64:41:64:9d:b6:f3:fd:34:62:19:ff:11:38:
3b:c3:f7:9c:c2:d7:d1:78:a7:35:0c:54:16:7c:03:4c:a9:db:
21:73:75:75:28:80:79:37:2c:f0:c9:2f:cd:cf:ff:cf:1b:25:
ca:a1:fe:5b:23:8f:de:8b:99:41:96:cf:7a:40:78:29:74:79:
8c:18:18:c8:af:34:9f:fb:38:1a:0a:25:12:54:04:5f:67:65:
71:ff:89:48:38:d3:41:8f:24:52:76:8e:95:a5:f2:a2:75:61:
fd:88:e9:30:df:44:6c:87:46:04:92:c1:96:4e:59:e2:74:6d:
81:b2:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:26 2026 by rpki-client