This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json)
Hash identifier: fQcZprZrzW3arKT7vnzhtoN75aO22kqYCyWOzt0iiV8=
Subject key identifier: C4:69:DB:59:B7:8F:BD:4D:66:85:E3:8C:DA:2F:F5:89:E6:6C:D6:81
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial: 0A65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
Manifest number: 0A40
Signing time: Sat 24 Jan 2026 19:13:39 +0000
Manifest this update: Sat 24 Jan 2026 19:13:38 +0000
Manifest next update: Sat 31 Jan 2026 19:13:38 +0000
Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: 5MTeZMCgAlqa9TtbRnm7eOOwM2AcrQgXyfnHrKkmUsk=)
2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=)
3: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=)
4: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Validity
Not Before: Jan 24 19:13:38 2026 GMT
Not After : Jan 31 19:13:38 2026 GMT
Subject: CN=697519e3-37d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:10:4c:3a:07:5b:72:2d:64:15:5b:83:33:
95:95:b8:3f:e6:ba:32:04:0f:6e:19:51:12:fa:4c:
fe:13:7f:f9:cd:ae:60:ae:7d:5f:85:65:00:2f:77:
27:5d:e1:09:4b:7e:4f:48:1d:76:bc:0d:1a:32:48:
83:00:66:d1:3f:70:f5:0b:4f:c1:0a:53:e0:49:e4:
fe:b0:76:f6:65:f2:3f:77:fb:21:3c:2e:c8:29:df:
90:6f:a5:0d:a5:4b:98:b8:0b:39:6a:a5:98:ad:f7:
16:25:8d:4f:5e:19:65:86:b3:ac:db:64:fb:31:7c:
d1:e8:62:f4:08:65:c0:ac:20:be:3f:cf:d1:75:a2:
da:3b:59:11:80:1b:47:e8:ef:1d:ff:5c:54:2e:95:
d5:7c:2c:45:4b:07:bf:1b:29:9b:dd:40:b3:e4:b3:
0e:88:c0:43:9a:f1:57:04:ee:13:af:12:f0:9b:f8:
d5:bf:02:4b:5d:84:0f:76:88:c2:8b:c4:2b:d6:0a:
6f:1a:35:c1:7f:42:2e:5c:99:03:17:2f:c4:74:c4:
65:87:d6:98:6e:ba:ab:b9:55:66:ec:69:63:62:1c:
f9:f6:5d:08:86:6f:b0:e4:d5:bf:87:97:c7:00:b1:
17:c5:29:23:e1:13:ec:36:b0:e3:8d:59:48:8f:4d:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:DB:59:B7:8F:BD:4D:66:85:E3:8C:DA:2F:F5:89:E6:6C:D6:81
X509v3 Authority Key Identifier:
keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ec:42:82:64:69:46:3a:1f:ae:42:82:70:cf:6e:6e:49:e3:
d9:86:48:e4:4b:eb:b7:03:4f:79:99:4c:55:83:dc:b5:21:be:
b6:58:ef:c4:98:d0:b6:25:b3:75:a5:c5:ac:7d:d9:2a:55:7f:
89:83:37:60:b5:ee:62:47:8c:e5:6a:32:0c:df:b7:64:ea:24:
e5:2e:b1:f4:0e:f1:27:42:5b:da:4d:5a:36:9f:4a:93:86:8f:
6c:71:c5:f2:a0:ea:5b:8c:72:fd:25:f4:da:d9:7e:34:64:b9:
91:44:e9:25:1b:b3:78:0a:4e:9a:aa:2e:e8:2c:ba:d3:d6:32:
43:ee:c5:5a:e5:94:28:0e:22:44:00:d2:23:1e:10:4d:69:b2:
14:e0:cc:c8:79:a9:24:1d:0d:c1:36:da:12:41:66:28:3a:d6:
c8:3f:14:2d:a3:33:b2:6e:f1:36:b8:17:97:4f:94:72:33:80:
de:f4:48:22:93:f3:6f:c8:5e:69:e0:ee:19:00:09:5e:1c:c0:
ce:56:b6:44:26:1e:2d:9c:33:7b:a9:a1:cd:07:cd:5d:42:7e:
56:6a:5a:49:03:66:15:60:1a:db:22:8d:41:ec:bc:56:ea:0b:
10:c1:8d:88:98:48:a4:df:1c:d4:61:ea:90:4e:1c:79:3b:61:
22:d5:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:26 2026 by rpki-client