This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
File: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft (raw, json)
Hash identifier: ifK0ul20CLK34X5iULZoFV0JnqAyTpWj2Lhk1FlFvQc=
Subject key identifier: 07:E9:2E:68:59:3B:AE:32:04:25:6C:91:5D:05:F9:19:24:4A:2E:52
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial: 0A75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
Manifest number: 0A64
Signing time: Sat 24 Jan 2026 19:07:41 +0000
Manifest this update: Sat 24 Jan 2026 19:07:41 +0000
Manifest next update: Sat 31 Jan 2026 19:07:41 +0000
Files and hashes: 1: 3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl (hash: WFR7KuB7/DXVCp7ztM2+k9e6jz7qKlz7bPP5xC4TS6g=)
2: C1B3DE082BBE11EF809E1831C4F9AE02.roa (hash: lx///Z7Da35SlsWklk353QqekT8yYXigifaMtdugzeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2677 (0xa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Validity
Not Before: Jan 24 19:07:41 2026 GMT
Not After : Jan 31 19:07:41 2026 GMT
Subject: CN=6975187d-aa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:86:2f:7c:99:ff:90:9c:eb:fa:17:c4:00:
54:aa:a1:ce:ef:19:77:d6:53:f4:25:9c:4c:d7:d3:
15:70:26:5a:83:ba:a3:2e:d7:52:db:c0:03:ad:2d:
dc:10:f2:43:3d:92:61:60:23:49:03:2c:e2:76:c3:
db:fa:7b:7b:13:74:c8:88:8b:32:b2:b7:56:02:9b:
b8:01:17:aa:a4:a1:c2:a7:8e:f3:05:fd:c2:a7:16:
7b:75:3d:b3:b9:f9:25:98:67:0a:e6:10:26:9a:98:
ae:97:fa:51:43:93:62:95:c6:1c:e4:9b:2b:85:08:
3c:e8:2c:fd:0f:ef:21:99:75:c3:ae:1b:18:30:d4:
03:cd:6c:b8:fc:8e:3a:dd:3a:3b:62:83:d6:18:84:
7b:89:f6:b2:05:0b:b6:f2:c8:19:75:26:2e:33:11:
d3:d1:c5:82:3e:19:21:c0:bc:37:c5:13:ea:bb:eb:
3c:24:a2:37:30:b5:97:da:77:cd:6f:04:f5:c4:e8:
5b:1d:d4:d5:7f:56:50:16:66:b5:52:92:9d:70:73:
ea:4f:7c:ea:9a:3e:f6:38:a8:5b:d3:e8:91:d6:b9:
11:8d:f5:f9:e1:96:b4:b5:7a:4d:64:a3:ac:d0:cb:
11:97:a9:b9:5d:0b:9a:80:1f:df:a0:24:e2:9e:56:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:2E:68:59:3B:AE:32:04:25:6C:91:5D:05:F9:19:24:4A:2E:52
X509v3 Authority Key Identifier:
keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:36:1e:17:8b:a9:5c:f0:8c:82:17:80:40:1a:98:78:b3:
56:24:ec:5c:d0:18:fe:85:85:68:f7:67:55:1d:4c:ff:56:7c:
ff:74:92:b0:69:bf:ea:62:88:29:ea:e7:b1:83:30:29:06:46:
4d:c5:5f:f2:c3:61:90:41:27:b9:9e:fb:13:ce:87:58:c6:9d:
85:6f:85:2c:ae:00:60:82:94:37:89:97:7d:a6:e7:c3:11:ad:
8f:e1:2b:9c:65:18:07:db:71:01:68:ed:27:40:e2:34:49:9d:
b1:70:49:0b:db:35:af:16:f2:0b:d4:dc:d9:08:63:34:15:0a:
c5:68:b5:ba:ee:e5:18:20:fc:a8:43:45:a2:fe:8a:dd:00:e3:
f9:c1:fc:2b:ab:bc:95:59:61:47:fa:74:e7:ef:af:02:dc:a9:
7f:8c:e1:f5:3a:28:7f:50:5f:27:12:ab:8d:e5:68:9e:55:36:
90:ee:71:60:cc:06:e1:4c:89:11:0f:bf:87:82:63:a4:41:3d:
d8:b3:83:cc:dd:62:99:4e:89:d2:61:6d:ba:6a:ad:f4:f1:e9:
6b:a3:99:d4:61:9f:2a:c3:ee:a4:b1:83:5d:09:f3:9e:a4:dc:
65:01:da:cb:38:8d:91:60:b9:7b:f0:8a:a2:c4:2c:24:36:b1:
0a:c7:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:46 2026 by rpki-client