This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier: jAUaFpK77S/vjtnPSxXYVg3XWEHA92kg7R1Gb/PZaSY=
Subject key identifier: D0:37:B7:62:9F:A7:3B:C4:8D:60:B7:F2:75:47:28:25:04:22:47:0C
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number: 01C4
Signing time: Fri 23 Jan 2026 02:11:42 +0000
Manifest this update: Fri 23 Jan 2026 02:11:42 +0000
Manifest next update: Fri 30 Jan 2026 02:11:42 +0000
Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: SFIWEGOKAxY3fj4ylKdTxBhUuGn8rjtL2ZEls/Bgb80=)
2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: Pq73PgAG6oMeQVEVi6eMUHjuXX4heTdR3HOjLtOdzzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 02:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Validity
Not Before: Jan 23 02:11:42 2026 GMT
Not After : Jan 30 02:11:42 2026 GMT
Subject: CN=6972d8de-38b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:37:5e:6f:47:7b:da:c3:46:b5:44:da:b8:
16:d6:bc:94:cf:bc:e5:aa:c1:43:24:08:d6:50:8b:
14:d5:d8:5c:35:ab:e1:e1:52:60:32:70:38:ce:61:
9f:51:e2:50:98:04:61:5e:b6:53:70:88:90:16:7d:
fc:46:6c:78:4e:99:68:0e:4f:e5:8e:dd:f5:90:54:
03:6a:43:d0:84:d3:e2:ee:16:32:72:03:05:3a:57:
8f:15:7d:6a:e4:ef:b1:84:e8:17:08:c8:82:a4:80:
46:20:76:58:17:ab:c6:17:e3:18:40:d7:56:48:58:
10:b4:80:88:ab:be:b6:09:cc:3d:7d:20:61:0d:80:
87:81:53:64:b2:57:3b:18:ab:63:0a:97:98:fe:20:
35:4b:5f:a1:35:66:b2:80:bc:72:bc:c7:d9:d0:9c:
40:ce:51:c9:ac:83:f9:74:fe:19:05:06:85:fb:79:
99:c7:8a:d9:c2:85:f8:72:05:67:01:2c:48:52:f7:
72:c0:19:d6:6e:5d:6e:f1:d2:1a:49:0f:d8:7f:a6:
c5:fd:64:4e:1b:12:f3:45:de:b3:05:19:14:d7:53:
f1:c8:45:30:b6:a0:2f:a9:11:8f:aa:b0:10:18:5e:
66:ba:c5:49:db:04:87:aa:0c:11:ca:ce:de:67:a9:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:B7:62:9F:A7:3B:C4:8D:60:B7:F2:75:47:28:25:04:22:47:0C
X509v3 Authority Key Identifier:
keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d9:99:51:15:4b:02:fc:78:10:c4:52:b5:00:01:03:27:ee:
a3:d7:cc:97:61:46:a8:f7:e2:91:34:55:9b:78:5c:39:ca:74:
1c:1d:a5:ea:22:2a:7a:9a:9c:6d:cb:28:da:ac:61:ec:00:e0:
11:7a:a7:54:5b:b8:17:42:0a:5c:8f:f8:c1:df:d0:e6:26:a2:
7b:40:62:0b:f7:73:c4:15:80:aa:67:ce:74:a9:56:e5:bc:b1:
dc:51:3a:cc:c5:6b:fd:85:0d:6f:fe:ef:3b:46:b3:0b:66:a2:
4f:c2:f8:bb:86:67:1f:df:81:5c:08:c3:34:b5:68:a3:be:27:
ed:c8:7b:c2:73:83:66:89:8b:d3:49:d3:ec:dc:90:a1:e2:54:
71:d8:91:33:39:0d:b2:af:b9:4b:ef:7b:e8:8b:bf:9e:fb:27:
59:f4:f3:29:be:72:e7:65:15:dd:22:e4:83:e6:e4:f1:e3:be:
64:e1:ac:7d:50:31:3b:71:1d:8c:9c:ec:ae:78:07:ee:e0:6e:
7e:ed:74:84:29:f9:7f:28:0f:6b:31:97:91:74:16:14:ae:f6:
e9:97:09:d2:69:1f:cc:5c:b4:a0:4f:bb:76:94:d3:90:cc:a9:
18:0e:3e:ff:c8:5c:04:c2:49:1e:86:cb:a1:1e:fb:23:f6:1c:
77:ea:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:52 2026 by rpki-client