This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: CEPmnmtsPRZPnsboKU9ghOpHmKYOyEFh0Ou8COvLWJU=
Subject key identifier: 91:FC:4C:6C:F2:8A:15:0D:7A:3C:BB:B3:C6:B4:C1:C2:46:66:FB:3F
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: 74
Signing time: Sun 25 Jan 2026 06:00:33 +0000
Manifest this update: Sun 25 Jan 2026 06:00:33 +0000
Manifest next update: Sun 01 Feb 2026 06:00:33 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: r4MqHDNV8C2OAbhLq1wpDz0tm7wbT3faep89zwZsKEg=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Jan 25 06:00:33 2026 GMT
Not After : Feb 1 06:00:33 2026 GMT
Subject: CN=6975b181-413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:f2:90:99:67:9c:50:ee:5a:fa:d4:9b:fd:
3c:a7:8f:84:47:fc:e9:c8:cd:1a:59:5b:fe:46:b2:
d7:66:77:a1:bd:3b:c8:34:fc:ae:60:32:f1:96:04:
1a:69:76:c4:fb:92:85:7e:34:a0:3e:cf:8b:5f:61:
fb:02:73:b9:85:2f:11:de:fb:07:ba:18:b1:b1:e8:
58:3d:f2:0e:36:01:3b:87:ed:dc:ee:9f:f2:6f:c1:
90:fa:9d:9a:59:b9:f1:35:92:44:32:db:55:b9:ea:
76:b5:8d:ed:54:60:8e:67:23:42:57:9e:7e:5a:fe:
04:28:4b:0d:78:91:ca:27:15:6c:5d:f8:bf:9d:60:
99:f0:25:0a:f8:c3:ce:1f:66:c5:a2:54:ea:84:b1:
c1:e9:e6:1f:11:03:34:48:60:15:03:6a:63:4e:02:
dc:cd:0c:a5:47:43:6b:e5:70:21:a3:02:c1:58:bf:
57:57:90:a9:46:25:0e:15:c6:ee:93:1b:92:98:24:
46:57:be:08:a0:b1:54:1c:b3:b8:69:ea:4f:81:ac:
c7:fc:82:f1:8c:c2:5c:7c:49:8f:cc:fb:6c:e2:7d:
25:48:fa:35:f0:20:49:b0:01:e0:16:b5:94:df:df:
09:06:9a:20:14:a1:8c:e3:7c:89:67:0f:cd:25:90:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:4C:6C:F2:8A:15:0D:7A:3C:BB:B3:C6:B4:C1:C2:46:66:FB:3F
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:e0:da:0c:08:41:a1:b6:8c:0a:6e:16:97:5e:42:a6:ef:9b:
7f:c5:7d:03:b7:a7:c6:4c:d7:05:c2:3f:8e:35:c8:74:4a:34:
f1:cb:b0:5f:d3:8a:aa:a8:96:ed:1f:05:78:07:57:c5:f7:8a:
cd:94:69:82:21:d4:27:8c:6a:7d:33:e8:c9:01:07:64:c9:72:
70:e6:ac:3a:76:e9:14:5a:d4:72:15:8a:8f:37:a2:50:ec:b0:
c8:46:d1:0c:4c:9c:28:b0:8c:83:78:67:46:c3:92:ce:4a:8c:
78:8b:b2:62:e7:0a:5e:4d:3a:f2:7f:ab:53:5d:6f:4b:5b:52:
3a:0c:97:51:fb:eb:e6:ff:33:4f:71:eb:ea:7d:76:d8:bf:9d:
05:7f:81:7d:1c:d6:5b:ac:0f:ad:dc:81:be:84:95:67:06:59:
27:55:f3:39:1d:8e:f4:33:34:63:f4:56:8a:a4:ce:44:fb:85:
c2:e9:cd:76:5b:4c:0e:90:f5:e2:23:f5:49:bb:30:01:34:20:
7c:ee:fb:01:04:aa:50:3b:1f:87:48:96:cb:58:4a:55:ab:ef:
66:78:36:99:60:ca:2a:76:4e:57:3b:13:07:fa:5b:27:4e:21:
5e:4b:d6:b7:02:94:8e:a0:9f:b5:72:1c:6f:50:9d:ee:0c:fe:
cf:94:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:24:15 2026 by rpki-client