This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier: okNp8A1Rx/ovcy7rLwncv/viwxAYERmkHuJg3slekF8=
Subject key identifier: CF:6C:02:3D:8D:4A:81:8E:2F:89:28:18:B3:A8:D7:C4:11:75:27:C2
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial: 0D17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number: 0CF9
Signing time: Mon 26 Jan 2026 17:44:49 +0000
Manifest this update: Mon 26 Jan 2026 17:44:49 +0000
Manifest next update: Mon 02 Feb 2026 17:44:49 +0000
Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: X5mQnRPWGRP5HT0jrTD3QZIyCoj+odV/SiHr4vl97g8=)
2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 17:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Validity
Not Before: Jan 26 17:44:49 2026 GMT
Not After : Feb 2 17:44:49 2026 GMT
Subject: CN=6977a811-0eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:a6:c4:e0:07:a5:c9:cc:d6:06:26:0d:bb:
70:f4:58:ce:50:9c:7a:18:9d:5d:8b:03:3f:1b:7c:
a6:65:32:ed:13:35:20:46:bd:8a:09:ee:6c:7c:81:
55:3f:28:8d:a3:28:82:cf:cb:83:fa:58:1f:70:e6:
5a:c1:bd:fe:b8:7c:08:c9:43:f4:46:23:a6:8b:84:
21:bd:6b:f3:e2:43:95:c7:09:cd:20:59:4d:38:1e:
da:f9:15:03:75:96:8d:d4:04:25:31:3e:31:9f:b7:
40:02:3f:b4:af:06:d3:f4:4a:93:c3:e8:e4:50:d9:
c1:2c:93:d5:12:6d:34:fc:54:e6:e7:a4:17:03:0c:
d5:91:90:e6:5e:90:59:a5:d1:35:15:3e:97:fc:83:
5e:70:38:22:2d:ff:24:4f:5a:e6:5f:67:55:58:95:
46:3b:7b:4d:11:0d:5a:df:b4:d5:ef:76:8d:b0:76:
2a:c3:21:6b:4b:b2:9a:ab:54:08:1c:ce:35:93:06:
ec:55:08:89:4f:0a:b4:d5:3f:2a:a3:77:19:5b:e7:
70:2c:f7:75:6d:a9:60:5b:f2:a6:29:17:67:86:4c:
26:32:de:3f:db:af:e9:ee:17:ec:90:fc:9b:46:f8:
1f:d2:09:51:7f:25:87:56:33:2d:70:06:dc:9f:85:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:02:3D:8D:4A:81:8E:2F:89:28:18:B3:A8:D7:C4:11:75:27:C2
X509v3 Authority Key Identifier:
keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:6b:80:53:60:9e:c7:bc:62:4e:02:77:c3:20:76:46:25:
71:b6:9a:2a:33:61:ee:ad:2c:ec:05:5f:18:0a:b6:0a:31:bf:
f0:e1:e0:15:d7:23:18:e1:1b:0b:0c:b4:3a:1d:79:c8:9d:ad:
1e:d0:3b:c3:a3:6d:2f:31:1a:5a:9b:f8:2f:8b:09:d5:78:c1:
c8:e8:ef:9a:0b:e7:20:77:46:b3:b9:27:9e:12:18:be:b4:2c:
83:78:ad:71:8c:ea:10:c6:52:97:31:7a:0d:ae:7e:a6:47:bb:
1b:ed:75:d2:04:5a:73:f1:c4:20:0a:52:d7:8e:53:23:b8:1b:
5c:1e:96:66:b2:96:ca:72:26:c3:28:d5:5b:3e:72:ed:63:b5:
bf:6c:f4:80:26:bb:73:a8:e3:a5:ec:87:90:f9:63:22:b0:ac:
57:72:dd:a8:16:f2:21:21:ae:33:50:d3:27:c3:c0:96:1e:d9:
88:43:86:54:b3:59:25:32:d4:ce:11:74:e3:89:e3:b0:c2:28:
61:73:1b:77:59:f2:b0:8f:95:7c:06:79:19:c1:fc:82:f2:5d:
0a:e5:d2:ed:64:64:31:07:38:fe:24:1e:53:a7:9f:55:53:8f:
d9:65:46:ad:e7:a7:7a:f3:f7:f1:e4:f3:c3:db:a7:f9:5d:71:
dc:40:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 13:38:31 2026 by rpki-client