This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: DIQ1rHedHe0+z8xB52nphyXANZmcEfxiGJJzDMIlH2E=
Subject key identifier: 21:9D:27:4E:05:2E:4F:00:37:0E:B2:27:6D:D0:D0:8D:E1:FD:4F:F7
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1C91
Signing time: Mon 02 Feb 2026 16:07:37 +0000
Manifest this update: Mon 02 Feb 2026 16:07:36 +0000
Manifest next update: Mon 09 Feb 2026 16:07:36 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: fO16S57NJCOzmSwwaA9Dx7LzU1DrSECOFfxinx6dhXM=)
2: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=)
3: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: jFhmcGLcWRMJb2NQjPMrP9b0nQzmycMaQ535WZNL3p0=)
4: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 16:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7398 (0x1ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Feb 2 16:07:36 2026 GMT
Not After : Feb 9 16:07:36 2026 GMT
Subject: CN=6980cbc9-6894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:a6:63:d5:1a:2f:2a:54:78:42:67:64:f5:
f4:2f:70:2e:1b:31:63:e0:fa:dc:c9:f3:f9:b2:85:
08:a8:44:14:28:1d:dc:fc:3a:78:9e:47:e1:e6:b3:
68:73:b7:08:b7:96:1d:f9:f9:00:a3:40:66:2f:38:
b1:ea:70:65:18:55:c9:51:54:64:93:39:04:6d:54:
51:56:d2:fb:81:ab:3e:09:6a:52:0d:b6:27:03:d6:
d5:5c:fa:b1:94:be:a3:e7:28:3b:4b:f2:94:94:16:
9a:45:e1:52:1f:fb:08:d4:75:1d:3c:33:de:5e:f8:
20:3d:67:c6:5c:fc:3c:d7:67:60:d6:74:b8:4e:e4:
a1:40:cf:4c:e4:41:c1:a2:a0:dc:86:50:8d:0a:08:
98:0e:6e:1a:57:c9:87:04:f7:73:c6:e6:0a:aa:89:
fd:c5:55:dc:6c:c7:f4:33:f8:d3:9b:1d:e7:03:d2:
96:0a:a6:a0:94:a9:f3:cd:08:6f:56:e4:17:3e:3b:
f7:60:1d:20:06:95:92:10:41:56:f6:79:ef:a8:9f:
c1:91:7e:7f:01:aa:24:70:39:17:91:23:d6:df:35:
c2:1d:22:81:01:c9:5b:b2:ff:60:5c:b8:77:e6:71:
6c:c0:dd:fb:0b:17:c7:9e:58:cf:1e:1e:61:06:17:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:27:4E:05:2E:4F:00:37:0E:B2:27:6D:D0:D0:8D:E1:FD:4F:F7
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:db:f5:99:90:d8:0e:67:8a:b5:bd:b1:36:c2:ad:51:9a:f2:
93:4f:4f:09:4f:64:00:0d:72:1a:32:71:65:39:e8:04:0c:aa:
98:cf:e9:6e:53:b9:a7:40:3a:48:88:d4:6b:60:c0:0f:e6:68:
f9:85:67:ea:9f:42:ac:1b:d7:f0:21:d7:1b:38:5d:3b:81:72:
fe:2c:20:a5:b0:bf:6c:00:d2:1d:75:ca:34:74:b6:66:51:0c:
ba:32:83:f0:11:8f:1a:f3:dd:17:28:42:f8:19:dd:a7:d6:1e:
32:f0:4a:4a:cc:2d:d0:81:e8:7c:d7:c3:75:38:01:eb:94:63:
d7:71:43:99:68:67:da:28:28:59:5c:9b:11:94:26:34:78:28:
4e:71:54:f9:60:71:c1:fe:49:a5:ce:20:f5:bb:ac:b7:cf:cc:
88:ea:f2:33:d9:ae:ad:ab:ae:13:8c:16:c5:c8:6b:8a:c8:b3:
41:0e:70:6e:e4:55:e3:91:7c:db:80:5e:43:fd:f6:29:aa:e4:
61:ea:21:27:1a:82:f5:a4:37:fb:e5:09:76:cb:1f:ee:0e:2f:
cc:18:d0:01:7a:36:10:4a:5d:3e:e0:d1:34:a3:61:dc:a6:c2:
62:8e:09:5d:43:6e:de:f7:e1:91:31:f8:4e:3c:68:82:2d:5e:
73:f6:20:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5
RThEMkIzMUIwHhcNMjYwMjAyMTYwNzM2WhcNMjYwMjA5MTYwNzM2WjAYMRYwFAYD
VQQDDA02OTgwY2JjOS02ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaemY9UaLypUeEJnZPX0L3AuGzFj4PrcyfP5soUIqEQUKB3c/Dp4nkfh5rNo
c7cIt5Yd+fkAo0BmLzix6nBlGFXJUVRkkzkEbVRRVtL7gas+CWpSDbYnA9bVXPqx
lL6j5yg7S/KUlBaaReFSH/sI1HUdPDPeXvggPWfGXPw812dg1nS4TuShQM9M5EHB
oqDchlCNCgiYDm4aV8mHBPdzxuYKqon9xVXcbMf0M/jTmx3nA9KWCqaglKnzzQhv
VuQXPjv3YB0gBpWSEEFW9nnvqJ/BkX5/AaokcDkXkSPW3zXCHSKBAclbsv9gXLh3
5nFswN37CxfHnljPHh5hBheIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGdJ04F
Lk8ANw6yJ23Q0I3h/U/3MB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF
MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4
LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBv2/WZkNgOZ4q1vbE2wq1RmvKTT08JT2QADXIaMnFlOegEDKqYz+lu
U7mnQDpIiNRrYMAP5mj5hWfqn0KsG9fwIdcbOF07gXL+LCClsL9sANIddco0dLZm
UQy6MoPwEY8a890XKEL4Gd2n1h4y8EpKzC3Qgeh818N1OAHrlGPXcUOZaGfaKChZ
XJsRlCY0eChOcVT5YHHB/kmlziD1u6y3z8yI6vIz2a6tq64TjBbFyGuKyLNBDnBu
5FXjkXzbgF5D/fYpquRh6iEnGoL1pDf75Ql2yx/uDi/MGNABejYQSl0+4NE0o2Hc
psJijgldQ27e9+GRMfhOPGiCLV5z9iDd
-----END CERTIFICATE-----
Generated at Mon Feb 2 18:58:58 2026 by rpki-client