This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier: nCFCNsI1VqJDfRu871KuL6yMzGX0tYR+yMQHFF5e4Ic=
Subject key identifier: 92:7B:C2:43:65:58:60:95:7C:E2:CF:D8:3E:F1:59:F2:94:CB:56:B8
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial: 1C4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number: 1C4A
Signing time: Sat 24 Jan 2026 15:59:23 +0000
Manifest this update: Sat 24 Jan 2026 15:59:22 +0000
Manifest next update: Sat 31 Jan 2026 15:59:22 +0000
Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: WCQfBzInbUpfnVU9IWUFGwm2gqFED3lys4Tmeb+ylzY=)
2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: alPFbBRcOswykY6CDpgLiaSVoTM2OjUAdTBuklnb8AI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7243 (0x1c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Validity
Not Before: Jan 24 15:59:22 2026 GMT
Not After : Jan 31 15:59:22 2026 GMT
Subject: CN=6974ec5b-a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:07:b1:94:70:6d:a0:9c:84:9f:c1:c9:90:
16:3a:25:e9:a7:99:8f:38:2c:12:06:91:1b:27:fd:
19:97:4a:80:8b:06:ae:94:58:12:5e:97:0a:bf:a9:
cb:cb:08:38:5e:48:30:01:97:01:8c:b1:0e:35:bf:
b8:7d:cd:19:09:ed:bf:a2:bd:f7:4e:51:f0:e9:d3:
3e:74:7f:11:46:96:fe:2a:1a:2e:ba:98:97:00:fd:
22:4c:e4:ed:0d:5b:0e:c2:04:44:e0:8f:cb:4b:d9:
04:a8:94:14:ee:a1:c2:03:2e:d8:71:bc:32:8a:9f:
86:14:79:41:2f:6f:02:3a:36:b7:54:f8:40:84:4b:
eb:8f:f1:76:8e:fd:27:39:22:8d:1c:87:a3:ff:6d:
17:7f:fb:48:94:b4:1f:82:8d:a6:fc:be:2c:9c:09:
cf:44:57:ba:a6:95:21:99:3a:0b:0d:84:f0:38:03:
ad:37:1d:d9:9d:c0:9c:fe:1c:dc:fe:93:80:0e:83:
42:44:1e:da:ea:23:44:fc:7a:fb:8d:7d:db:57:f7:
c1:4b:12:a5:5a:d7:1d:54:af:50:f0:2b:2f:ba:b8:
00:2c:41:dc:55:b1:cc:28:8e:be:87:59:36:ec:61:
ca:fc:88:60:49:ee:33:16:44:e7:69:6e:35:8e:63:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:C2:43:65:58:60:95:7C:E2:CF:D8:3E:F1:59:F2:94:CB:56:B8
X509v3 Authority Key Identifier:
keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:36:3e:b8:08:68:31:07:cc:f9:67:31:29:c5:75:9e:3e:
5c:b0:e1:e1:06:a4:72:63:ff:0c:b7:9c:be:94:6c:52:47:c6:
4a:80:51:56:bf:34:ab:02:75:9b:71:91:a5:8d:29:6e:65:14:
99:01:9a:ea:89:74:34:26:82:68:03:c6:d9:82:3e:1c:fb:c1:
c3:c4:c0:85:01:7b:1d:a6:a3:e0:13:aa:aa:1d:0e:72:c3:fc:
46:33:79:fa:7f:81:e8:3d:6b:a6:1d:50:6c:be:72:65:4e:e2:
09:e4:e3:4c:7c:98:7c:27:31:8e:f2:2c:31:5f:44:f7:b7:94:
f1:49:80:00:9a:9e:aa:a0:fd:12:8b:c9:07:34:89:db:59:34:
4e:bd:b5:8e:e2:5b:05:58:48:81:79:c5:3b:88:8d:3a:ea:dd:
fc:6a:06:00:b3:d5:03:9f:50:e0:af:65:7d:1e:08:c6:2c:7d:
c5:79:30:78:44:94:c2:58:83:00:22:11:4f:b4:62:17:03:04:
5a:85:76:25:1d:62:97:49:51:a6:d7:27:cd:45:d9:1d:da:f2:
5a:9b:95:dd:a3:cd:96:ea:fa:0b:3e:85:3c:0a:eb:61:7d:82:
79:c4:0d:62:56:68:b3:7f:c5:87:77:60:ee:9a:18:df:17:d9:
e5:88:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:05 2026 by rpki-client