This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier: +BFV7DsjeAcbTvCAwWjIV2O5KpR1qz1WFGYRUl6EOI4=
Subject key identifier: 7E:BF:2D:06:52:5B:74:B7:E5:15:4B:34:26:59:FD:92:A5:2C:4C:0F
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial: 0859
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number: 0843
Signing time: Sat 24 Jan 2026 20:13:09 +0000
Manifest this update: Sat 24 Jan 2026 20:13:09 +0000
Manifest next update: Sat 31 Jan 2026 20:13:09 +0000
Files and hashes: 1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: XQM2YfI9FjXe1R1f8mOfLCB6R2PePAlkJD7gZrFDdEI=)
2: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (hash: riyQ4tMzQ09xCak6IobwkZ17KBT1t0gIAkDuZwr3i8A=)
3: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: i3kN9zOmW8MzS2ERJPX+9kG2NDm4ZC2xsgwcobtDT9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Validity
Not Before: Jan 24 20:13:09 2026 GMT
Not After : Jan 31 20:13:09 2026 GMT
Subject: CN=697527d5-8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:57:2d:21:6b:b8:4d:1a:ef:cf:08:84:77:
86:7d:df:64:59:c7:61:64:2b:a5:39:ee:d2:07:ea:
51:b0:6b:97:c9:0a:55:19:9a:0f:c1:05:08:9e:58:
21:99:02:55:ef:a6:bd:12:ba:1e:34:db:33:fa:8e:
67:9f:09:d1:19:95:f4:52:99:5e:c8:ba:07:2a:ea:
e3:53:24:a5:7f:9e:9b:a4:9e:86:0a:02:59:fc:fa:
c9:ce:15:01:0b:90:2a:48:70:40:af:75:6f:f8:d2:
f5:8f:7c:dc:5b:ff:bc:ae:37:87:78:b9:64:e8:24:
4e:7a:98:a2:38:f7:96:52:0f:12:da:b3:12:57:bd:
dc:9b:e8:a3:1b:cd:17:82:70:e5:a9:43:0a:80:8c:
c0:e4:59:fb:c9:8f:77:1d:6f:24:18:9e:74:b8:5e:
bd:10:15:00:d1:22:c4:bd:80:fd:80:85:de:12:f2:
c4:c0:6c:53:70:67:99:aa:38:41:87:23:62:5a:c0:
42:cf:d6:f6:97:55:da:6e:0d:d8:8f:df:ac:db:7c:
0d:a9:e7:42:9f:26:77:d1:49:85:f8:e1:0f:02:90:
5f:3d:97:3f:3e:18:25:7e:6f:8e:6d:93:e4:7f:72:
d0:40:d1:d6:dc:a7:2f:6c:38:37:83:37:a3:9e:20:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:2D:06:52:5B:74:B7:E5:15:4B:34:26:59:FD:92:A5:2C:4C:0F
X509v3 Authority Key Identifier:
keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:60:9a:42:1e:48:4d:6e:99:49:8d:e2:0c:96:09:3a:ea:
77:7d:cf:c1:27:7b:ee:49:6b:41:be:2b:05:d5:52:70:f3:a1:
1a:9a:e7:8b:d8:87:25:d9:da:6b:09:32:a3:dd:11:9e:3c:1d:
72:3f:39:e9:31:e2:36:fc:49:18:8d:d6:e7:65:f6:97:1a:23:
08:c9:57:ce:a3:7e:22:5e:94:fc:56:57:b1:c9:94:23:3f:61:
3f:1b:de:e5:b7:7e:bf:51:d2:20:95:2c:a8:a8:10:5d:74:b6:
1d:78:35:55:4a:e8:71:fc:f2:9d:77:21:43:c5:e1:de:4a:f2:
2b:c5:73:0d:ca:56:50:ba:f7:ca:65:47:76:99:da:ad:c7:b6:
17:5b:35:f2:ba:58:14:fd:3c:ff:d8:fb:73:fb:c3:a6:b2:3e:
cd:7f:6c:1a:bd:a0:b4:07:c3:26:3d:0f:e6:11:3e:d6:00:38:
af:0b:f5:90:b5:d9:27:42:8e:ea:2c:99:fc:87:be:c2:60:1f:
76:96:37:8d:16:f2:31:b5:72:56:49:12:08:7c:e1:fb:5e:a5:
07:1e:67:0f:af:99:f0:7d:45:98:03:0e:fb:e3:de:70:ea:2f:
50:e6:f0:ee:58:08:b7:e4:2f:13:06:cc:89:bd:73:62:95:fa:
01:cc:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:29 2026 by rpki-client