This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier: M009N86kJ3C22SXw+qD6Gq3d0/RN1SXSLYuGBz1eYIk=
Subject key identifier: 1E:E9:ED:FE:1D:2F:3E:04:E7:E9:EB:90:33:3A:64:94:A3:40:F8:47
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number: A8
Signing time: Sun 25 Jan 2026 05:22:38 +0000
Manifest this update: Sun 25 Jan 2026 05:22:37 +0000
Manifest next update: Sun 01 Feb 2026 05:22:37 +0000
Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: pt4kPlYO2gteAqPNsRIN3hK5iiZSIF3SfZjbIWCIhXk=)
2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: blGbXq2yiWVicTOuyyoxLGQafJr97/lYQbfApO8b37w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Jan 25 05:22:37 2026 GMT
Not After : Feb 1 05:22:37 2026 GMT
Subject: CN=6975a89e-9301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:48:b9:eb:05:fb:dc:fe:47:22:e9:f0:36:
71:f1:34:e6:56:92:ce:5f:6f:e3:46:ba:59:39:7f:
87:6f:56:42:71:20:35:33:69:99:e3:a1:26:a9:01:
ff:ef:3a:c4:24:c3:cb:5a:2b:28:91:a9:32:3c:6c:
09:71:dd:c2:b4:01:de:c2:bf:a5:1e:93:be:d1:ef:
68:47:3f:1e:df:e9:ca:68:eb:2f:fb:1e:24:f6:2d:
4e:6d:96:aa:a8:6e:1b:e1:6b:4f:bb:6c:6a:b3:94:
ea:f0:c5:6f:b7:87:00:8c:2a:34:5a:c3:02:56:f8:
58:40:17:47:75:d9:7e:e8:24:8f:01:d7:c8:ce:53:
bc:fe:c7:30:ff:3c:c1:5d:ca:1d:30:4a:12:19:a1:
aa:0c:5f:76:a1:5a:fb:90:11:0a:e2:ba:ce:80:f1:
f0:c5:58:f6:6d:0a:a9:59:de:e7:c9:bf:07:86:65:
8c:63:9d:b5:cb:e4:16:5d:30:07:1e:aa:6e:29:20:
69:f4:d5:81:06:bf:4c:71:3b:e8:71:a4:5c:c8:05:
83:f6:6c:f4:c4:d2:be:93:0d:39:fc:fc:9a:c3:f2:
ab:f9:05:3c:07:af:bb:13:2d:4e:72:ee:4a:36:75:
76:e6:32:3e:24:03:fd:db:13:f5:ca:60:b1:98:10:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:ED:FE:1D:2F:3E:04:E7:E9:EB:90:33:3A:64:94:A3:40:F8:47
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:db:8e:f8:1e:06:91:e6:b8:31:dc:92:1e:13:77:01:46:
2a:7a:57:ec:26:23:50:cc:e7:67:1c:bf:1c:6c:0b:a4:97:f2:
4b:b3:08:d0:f4:ea:cd:c7:9a:fb:9d:f2:cc:77:71:76:a9:7a:
46:5e:c0:13:e5:38:39:9c:71:fb:15:9a:84:ba:c1:69:55:dd:
9b:a6:ce:33:3e:cb:53:9b:e6:ec:0a:01:3f:bb:d7:6e:19:2e:
bb:b7:08:d5:d3:95:75:d3:07:8a:06:52:5b:71:1a:f4:ad:f8:
0d:5b:86:dd:bc:c5:03:41:df:d7:d6:26:66:35:6d:e0:df:74:
a7:82:f1:73:08:b0:a0:a1:96:90:16:cd:4e:1c:92:77:9e:68:
73:4d:ec:d6:37:78:25:5e:b6:f0:5f:2a:e2:44:cb:8a:2a:15:
e1:df:ef:22:04:e4:0e:c9:fd:a3:02:24:e2:1c:76:bb:13:f4:
ee:f8:0e:0b:ca:df:f9:2f:80:50:0a:db:2b:a5:7e:14:d6:ad:
01:3e:26:18:ad:44:2c:80:1b:f0:ab:eb:aa:f7:71:c4:61:f0:
71:ef:01:65:a8:1b:29:e1:26:87:19:74:76:fb:66:cd:5e:6d:
87:16:05:c0:11:63:82:63:bf:08:71:ca:3c:bb:ec:43:d9:8f:
0b:9d:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:18:00 2026 by rpki-client