This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: chxiGRFgBo7qKVVTgoS6tZyd0T13GaHGI6GN2LNHCLw=
Subject key identifier: CD:37:43:4A:87:89:6A:AA:CC:97:6F:E2:87:D6:C9:6F:B4:0E:7E:41
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 107E
Signing time: Sun 04 Jan 2026 17:23:23 +0000
Manifest this update: Sun 04 Jan 2026 17:23:23 +0000
Manifest next update: Sun 11 Jan 2026 17:23:23 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: wymboCiB3B+e0MPCT1g/WAZ8d2VkAnJc9xswgfY0vEA=)
2: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: lVZtk3rXSWGH6BUISL7misVs4z7ng11CmdDCy24Mv9Q=)
3: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: 3oiampbA/mKeGxHpOV5bIoLjzOeO7r+/CBblTwk8fs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Jan 2026 17:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Jan 4 17:23:23 2026 GMT
Not After : Jan 11 17:23:23 2026 GMT
Subject: CN=695aa20b-db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:30:68:4b:a1:86:89:b6:1a:aa:3d:dd:b3:
82:b0:3d:9e:73:ad:59:d0:2b:4b:91:31:d8:82:f8:
e8:9e:32:de:df:c3:52:63:ad:52:6e:ef:cd:d6:ed:
ee:31:a7:77:b7:0b:d3:09:09:d9:cf:f8:e3:a0:14:
dd:b7:43:85:9c:23:73:0c:e9:7d:a6:86:9e:22:29:
9e:54:cf:11:5b:21:e3:eb:61:2b:4d:f9:ef:bc:e1:
04:9b:9b:ad:38:c7:75:f4:4c:5f:c5:d7:76:02:fb:
22:41:8f:3e:dd:76:bd:c3:13:30:6b:e9:c4:ad:55:
96:59:4e:6b:a3:e1:a6:a0:79:56:d2:e1:cd:dd:8e:
22:bb:87:76:90:4a:79:9e:c3:54:e0:f6:d7:43:98:
25:1b:b0:07:3f:7c:d2:c6:84:6c:ec:26:17:50:5b:
5f:70:9e:c8:1c:89:cf:16:2a:59:1d:33:8d:68:1a:
15:e6:46:60:a1:aa:0f:79:71:bc:af:7d:c9:de:0d:
c7:4d:f9:0e:26:50:71:fc:35:9d:59:4e:d1:95:6b:
6e:98:95:89:58:6e:0f:d0:5f:51:b1:6d:ce:cc:44:
ff:4c:36:3c:7f:3b:12:34:5c:9a:67:b5:11:96:9b:
80:61:1d:f6:48:53:42:04:a5:2d:e3:09:56:8a:57:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:43:4A:87:89:6A:AA:CC:97:6F:E2:87:D6:C9:6F:B4:0E:7E:41
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a6:1a:59:55:6f:83:1d:d4:c3:88:f7:b9:6f:17:40:95:7c:
c0:52:52:c1:d1:b0:78:45:c6:91:60:1d:79:fc:77:ec:08:25:
f5:53:7a:9c:07:59:27:90:b0:a4:32:9d:ca:32:1e:5e:82:2f:
7f:6b:85:97:2e:32:11:fc:44:8c:43:21:d0:77:9b:08:a8:19:
65:76:af:bc:e7:50:7d:e5:4b:e5:6c:82:bb:16:9b:8d:df:dc:
a1:6d:77:46:57:71:dc:49:f7:3a:e7:28:cf:39:2f:5c:ef:99:
53:f4:ec:88:aa:68:be:d0:65:61:d9:d3:29:53:d9:8f:2b:4d:
bf:68:d6:8b:98:e1:83:09:49:00:92:d2:da:b6:13:bb:60:8b:
61:e6:ec:8f:c7:e4:98:99:15:80:b3:4a:d5:87:fd:05:ea:22:
40:4e:d1:6e:36:31:86:a2:1e:24:de:08:b2:07:8e:26:37:87:
78:43:67:0b:50:47:40:23:3c:fd:1e:62:61:96:ae:90:37:8f:
b9:8e:6d:ff:f9:31:ed:5a:8f:b6:39:92:09:ad:91:74:93:ae:
1e:ef:25:d0:84:67:56:11:87:bd:79:9d:c8:df:8d:3c:4a:ac:
e4:e0:4a:11:01:c1:df:37:3c:44:3d:30:43:c8:d0:c8:a5:ae:
3e:bb:fa:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5
ODM4MTQyMjUwHhcNMjYwMTA0MTcyMzIzWhcNMjYwMTExMTcyMzIzWjAYMRYwFAYD
VQQDDA02OTVhYTIwYi1kYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhFowaEuhhom2Gqo93bOCsD2ec61Z0CtLkTHYgvjonjLe38NSY61Sbu/N1u3u
Mad3twvTCQnZz/jjoBTdt0OFnCNzDOl9poaeIimeVM8RWyHj62ErTfnvvOEEm5ut
OMd19Exfxdd2AvsiQY8+3Xa9wxMwa+nErVWWWU5ro+GmoHlW0uHN3Y4iu4d2kEp5
nsNU4PbXQ5glG7AHP3zSxoRs7CYXUFtfcJ7IHInPFipZHTONaBoV5kZgoaoPeXG8
r33J3g3HTfkOJlBx/DWdWU7RlWtumJWJWG4P0F9RsW3OzET/TDY8fzsSNFyaZ7UR
lpuAYR32SFNCBKUt4wlWildbCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM03Q0qH
iWqqzJdv4ofWyW+0Dn5BMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF
QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY
Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+phpZVW+DHdTDiPe5bxdAlXzAUlLB0bB4RcaRYB15/HfsCCX1U3qc
B1knkLCkMp3KMh5egi9/a4WXLjIR/ESMQyHQd5sIqBlldq+851B95UvlbIK7FpuN
39yhbXdGV3HcSfc65yjPOS9c75lT9OyIqmi+0GVh2dMpU9mPK02/aNaLmOGDCUkA
ktLathO7YIth5uyPx+SYmRWAs0rVh/0F6iJATtFuNjGGoh4k3giyB44mN4d4Q2cL
UEdAIzz9HmJhlq6QN4+5jm3/+THtWo+2OZIJrZF0k64e7yXQhGdWEYe9eZ3I3408
Sqzk4EoRAcHfNzxEPTBDyNDIpa4+u/qi
-----END CERTIFICATE-----
Generated at Tue Jan 6 02:14:37 2026 by rpki-client