This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
File: _fbWlYIK89Dw56dNs0RTLFfa7kA.mft (raw, json)
Hash identifier: sDGS2YjwXbd3b3EBcHxOrk1/zjj40KmuTxw3TQCH3i4=
Subject key identifier: C4:76:B4:5B:CE:A1:1B:36:E4:26:FA:E7:7E:29:3F:B2:A6:45:28:24
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
Manifest number: 07
Signing time: Sat 17 Jan 2026 07:05:48 +0000
Manifest this update: Sat 17 Jan 2026 07:05:47 +0000
Manifest next update: Sat 24 Jan 2026 07:05:47 +0000
Files and hashes: 1: _fbWlYIK89Dw56dNs0RTLFfa7kA.crl (hash: xmvCw5kYYwSoWV7YeouMtvcxbMjuxMY/3CCRMuoPYoE=)
2: 0BE73752ED1C11F0A0F1907B416F56BC.roa (hash: 5ROFr6FhFCMDLpMRePRIjwGrzjp0wCqcp0358tAYkyE=)
3: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (hash: qpGY0Ow+S8VVo+xxBbcRwXzwuRRM2kevRFMCw1xnUz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Jan 17 07:05:47 2026 GMT
Not After : Jan 24 07:05:47 2026 GMT
Subject: CN=696b34cc-aece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:1e:d5:60:80:41:c6:95:a3:6e:17:4e:39:
dd:88:b2:04:00:29:2a:f2:4a:77:72:b4:a0:ec:8f:
58:93:04:c3:82:95:66:27:fe:b6:a3:14:78:1c:03:
ff:dc:a9:fd:06:75:a6:db:31:39:52:d3:89:93:02:
62:35:86:71:59:4d:a5:f0:c2:90:08:e2:f7:6d:d0:
d5:11:f9:fe:8a:98:a3:28:c7:db:0c:ed:a8:47:4f:
d0:5c:cc:26:45:da:18:0e:de:55:72:84:8c:98:c0:
d8:62:0b:6c:b3:85:90:8f:2d:ad:56:9d:21:4e:3b:
7a:ab:40:65:ea:ab:0c:80:cf:40:2b:33:6b:34:46:
80:2a:5d:34:20:42:3b:72:43:db:da:f2:c7:fa:03:
4e:27:f8:65:38:38:cd:07:bb:03:0c:d0:45:2e:94:
88:02:f7:f0:d1:c9:96:bf:f9:1c:50:14:fb:21:43:
1f:65:ca:12:f5:f7:28:dd:57:af:10:a0:5a:39:6a:
4d:de:88:21:67:ba:cc:aa:ae:7c:cb:53:0a:ae:6d:
ea:b5:17:79:61:78:44:0a:69:df:b2:5c:41:19:f4:
e1:fc:dc:51:89:e1:97:fe:3f:82:d0:ae:25:53:57:
c0:bf:69:57:ed:03:e1:da:a3:4e:2d:55:6e:6d:63:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:B4:5B:CE:A1:1B:36:E4:26:FA:E7:7E:29:3F:B2:A6:45:28:24
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:10:f7:5d:41:c1:67:fc:d8:42:5b:67:e7:20:c9:55:42:e0:
4d:8c:72:a0:d0:61:bb:30:61:de:fd:23:c1:25:32:95:6b:43:
9c:f3:51:4a:d2:60:f3:b4:05:38:fd:44:db:90:06:31:59:dd:
f7:3e:2a:5f:f1:1b:b8:4f:fd:db:bb:2a:3a:61:a1:8d:b4:27:
1c:d8:d3:be:56:1d:f3:1a:09:2d:1d:f5:ad:92:84:f4:80:ef:
bb:b0:b3:cb:ca:34:35:ae:c1:4e:d9:c2:7d:af:12:cc:64:4f:
b6:a1:69:8c:ee:89:40:ea:c7:84:9a:70:f6:54:d1:b9:88:7a:
f1:43:38:24:9c:a8:f9:68:3c:75:96:76:5e:f9:40:14:1f:c2:
fb:51:06:7e:e8:32:20:c6:33:6e:6b:68:ad:3c:d8:d7:54:ee:
84:44:5b:e0:6f:0b:9a:8e:d0:27:2e:6f:6f:dd:56:1a:aa:1e:
ea:76:ce:15:b8:a4:f0:94:8a:22:5b:92:18:7b:f5:10:01:c7:
14:11:f4:ba:16:10:1b:93:d6:ab:86:2b:58:28:c9:74:31:f9:
0a:38:ec:99:5c:d5:87:13:b5:b7:5f:9b:02:e7:42:82:39:40:
e4:61:5b:c0:de:50:bd:c1:6c:b2:73:25:cc:8a:e6:4d:b8:93:
cd:51:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:03:29 2026 by rpki-client