This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: k6FadzYx8HIkVHNCdpCPc9vJRgcqkhmmYkOp2xj0fEQ=
Subject key identifier: 68:D0:C0:86:BA:4D:91:46:66:7C:ED:28:4D:6B:A6:5E:45:52:1B:A1
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2952
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 28CB
Signing time: Sat 24 Jan 2026 15:27:45 +0000
Manifest this update: Sat 24 Jan 2026 15:27:44 +0000
Manifest next update: Sat 31 Jan 2026 15:27:44 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: wAsH/+imPBfS20Rwy31mfjBosRnnCkvY/ir7be1xN1Y=)
2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: aWsfFKP86VYlsTA+7SgYR0hCFFT3XYQ13KPA9r+aJS8=)
3: BC85BF12986611F099AC837DC4F9AE02.roa (hash: 3fZwO0qDdCeu1Dl5+Ou0cMucQkUJwisYtiMHygk7+s0=)
4: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: cnexpv5zN9r6rnIgTQUrmJM/SHtcdXJM9S7GfH2pBWc=)
5: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: lCqRypmcyufFMEJ4cnLuBUW5AuH/Kafi4Z5xUeKeudA=)
6: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: wE/WOGyUabN4ieosmCuYcBFNNbo9PsulXJH2T1vpLPA=)
7: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: m9vn85iMhp8nUND+VC20bEfpfb8gwuJrnYL7AdZXCkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10578 (0x2952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jan 24 15:27:44 2026 GMT
Not After : Jan 31 15:27:44 2026 GMT
Subject: CN=6974e4f1-920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:12:84:68:51:ac:d4:f7:dc:74:00:15:b3:
19:77:69:6c:9a:ce:a0:86:35:d2:94:14:00:d9:9b:
00:81:39:49:ea:6c:60:34:35:f2:01:fd:f6:b7:ae:
6b:cd:3e:24:9c:09:56:d3:1c:cb:36:ef:fd:38:8c:
2d:56:86:3d:e4:02:65:cc:87:e0:0a:ee:87:94:ac:
27:9d:38:11:36:3c:09:0b:ad:5f:5b:2c:5f:90:33:
2f:52:8e:67:a9:66:33:39:08:85:20:f1:a5:35:f9:
3c:07:45:b3:68:73:a3:ea:04:22:0a:27:37:17:36:
0e:cd:0f:a0:cd:5b:04:16:be:01:0c:44:80:a5:4c:
1f:e1:5d:ca:88:63:7e:c4:ae:0d:72:67:9c:fc:3b:
0a:d5:ec:c4:ab:5c:de:5c:99:4a:50:95:4b:97:c9:
01:c4:44:54:00:0e:90:96:fe:c1:9f:7e:83:17:1a:
bf:b9:a8:9d:b3:73:fb:15:d4:6c:2e:a0:f8:65:0f:
e0:f3:85:02:16:44:0e:5a:5b:63:63:f6:68:63:08:
32:3b:23:4a:82:b4:4c:54:ae:02:b1:94:58:86:da:
8c:94:b6:76:f8:bc:50:88:3a:ec:4e:c4:b7:ad:4e:
87:d9:89:bb:f8:06:d2:39:1f:c2:5f:a7:93:c3:de:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:C0:86:BA:4D:91:46:66:7C:ED:28:4D:6B:A6:5E:45:52:1B:A1
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:fb:83:15:7b:06:8a:32:e1:3f:10:15:52:b5:02:38:a8:
2b:24:54:43:10:c8:ef:8d:df:4e:c9:b5:49:12:b7:0e:71:3f:
1b:db:aa:06:f0:40:fa:70:8f:df:90:91:e1:76:d2:58:05:6a:
a9:87:93:da:9e:a9:c7:9c:17:b2:f1:39:7f:89:23:d9:0f:fe:
83:e4:72:f0:0c:9a:34:b8:48:50:e4:3d:ed:94:1b:7d:80:18:
ee:0d:95:6f:23:f3:3c:d9:8b:75:1b:4c:c5:63:b2:0b:3a:45:
6f:7d:f6:b5:58:0a:13:73:68:4b:68:eb:e6:c6:4a:fa:4d:ed:
ef:42:01:eb:cc:93:ff:e0:c5:ed:fd:b8:c8:e9:f2:35:2b:d1:
b8:3c:40:c2:ed:77:39:ef:64:16:55:40:de:a4:0a:1f:03:73:
ee:79:d2:d1:7b:ed:e9:8f:fc:33:35:c2:20:fe:ad:21:a8:a2:
92:56:99:ed:7a:1b:e3:5c:fb:a7:44:07:28:7e:5c:9b:1c:cc:
39:8b:37:bc:03:ab:e4:e6:5a:2c:a4:67:de:4a:83:86:b2:91:
d3:38:d8:0d:50:cc:6d:7d:7f:c0:b1:ef:4e:6d:31:02:30:80:
fc:0f:11:e8:e9:8f:26:f2:c4:43:8c:4c:2e:81:33:d5:02:c2:
84:d5:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:57 2026 by rpki-client