This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: kstGaNvquOBs6yE4zdoQrvLfpjqlFQFlJ2CQ77EVQvQ=
Subject key identifier: A2:54:52:BD:53:CE:51:C3:54:55:54:44:DF:CD:50:C9:A7:D2:6F:40
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 0175
Signing time: Sun 25 Jan 2026 03:11:26 +0000
Manifest this update: Sun 25 Jan 2026 03:11:26 +0000
Manifest next update: Sun 01 Feb 2026 03:11:26 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: xSO3/2ivMOVmj8no1vxxLVQwxtlJhWugzd+HSbeTVrs=)
2: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Jan 25 03:11:26 2026 GMT
Not After : Feb 1 03:11:26 2026 GMT
Subject: CN=697589de-01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:28:4d:f3:f5:d3:de:77:00:4a:71:4e:1c:
91:b4:9c:c2:13:ec:6f:4a:7f:50:c0:89:02:4b:fd:
2e:30:3a:d1:e5:8f:b2:9b:51:3a:1f:7a:3a:b4:5f:
5d:cd:4f:f2:76:9e:4e:21:2c:26:ca:2f:81:f8:51:
17:92:a8:3a:fa:d6:30:6e:65:b0:ab:84:ff:62:f1:
17:56:60:53:ad:92:4c:6a:4f:7c:87:72:f2:92:88:
36:93:b4:75:aa:8a:4a:67:07:d1:a8:9a:62:04:c2:
11:b3:03:df:aa:a6:ff:cc:9b:4c:9c:2f:74:02:5c:
3c:14:bd:34:f8:bb:5f:3b:d1:51:af:48:07:0c:d0:
e7:f0:14:66:c4:fa:98:9e:b7:a2:f7:69:8d:85:49:
3c:e0:9b:97:49:b9:f2:44:fa:37:86:ef:a6:27:f5:
55:67:8f:c5:5b:46:89:b4:ee:4b:6e:54:8b:4b:b2:
9a:e0:86:cb:2e:2f:36:5a:c3:e4:5c:60:b6:89:bc:
4d:4d:1f:b3:89:41:0d:d2:af:a2:97:71:aa:55:44:
29:bc:2b:44:42:de:ff:7e:28:65:38:99:b7:30:20:
5a:b6:31:56:42:08:a4:2c:f3:fe:9f:b1:ad:a1:6b:
a7:14:75:7f:4d:b7:f1:81:a7:b5:fe:8f:e2:8c:91:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:52:BD:53:CE:51:C3:54:55:54:44:DF:CD:50:C9:A7:D2:6F:40
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:03:34:ed:39:fe:03:8d:8a:bb:fd:1c:24:22:08:cf:bf:c9:
4e:8d:97:c7:c7:05:94:6c:4d:64:63:e0:3d:2d:7c:cc:6e:25:
f3:66:30:47:56:c1:0f:26:f7:45:1b:ee:c6:4a:ed:96:72:08:
44:a9:92:ff:f9:52:f6:d8:2f:cc:94:30:13:09:68:a5:8b:f4:
39:8c:e7:c0:8f:3a:4a:7c:6a:5b:88:f8:c1:99:11:40:ce:6d:
89:a4:0f:3f:c4:cf:9d:63:c0:ae:ef:13:c8:59:ce:81:90:6f:
38:ad:d0:6f:9e:f6:2c:78:65:aa:13:5b:e2:a0:ac:7e:89:03:
eb:cc:19:8b:3e:5c:e2:18:93:a1:55:33:70:f3:bb:ce:5e:a2:
a6:b7:c4:ca:10:22:0c:6f:38:72:53:47:2d:5f:98:8e:09:34:
f0:ea:39:bf:54:ea:02:34:0b:38:bc:9a:6f:2b:51:6c:d5:91:
aa:09:66:50:53:e0:76:73:bf:9d:e7:58:11:47:d1:40:e7:2b:
3b:84:44:48:91:ca:94:c3:27:f0:d3:7c:16:60:72:56:15:ea:
c9:dd:03:a2:72:51:93:42:92:85:2a:d4:06:a0:e2:bc:a2:97:
30:1d:b8:63:88:ec:70:cb:b0:27:e1:e3:94:bf:ac:5b:a5:8b:
1a:f0:eb:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1
QjFEMUI3Q0MwHhcNMjYwMTI1MDMxMTI2WhcNMjYwMjAxMDMxMTI2WjAYMRYwFAYD
VQQDDA02OTc1ODlkZS0wMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2VooTfP10953AEpxThyRtJzCE+xvSn9QwIkCS/0uMDrR5Y+ym1E6H3o6tF9d
zU/ydp5OISwmyi+B+FEXkqg6+tYwbmWwq4T/YvEXVmBTrZJMak98h3Lykog2k7R1
qopKZwfRqJpiBMIRswPfqqb/zJtMnC90Alw8FL00+LtfO9FRr0gHDNDn8BRmxPqY
nrei92mNhUk84JuXSbnyRPo3hu+mJ/VVZ4/FW0aJtO5LblSLS7Ka4IbLLi82WsPk
XGC2ibxNTR+ziUEN0q+il3GqVUQpvCtEQt7/fihlOJm3MCBatjFWQgikLPP+n7Gt
oWunFHV/Tbfxgae1/o/ijJHONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJUUr1T
zlHDVFVURN/NUMmn0m9AMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB
OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTgxQi9CQzVDRUFCNkNBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9I
QWlIYVhLQ1hoWWhiSFJ0OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAAzTtOf4DjYq7/RwkIgjPv8lOjZfHxwWUbE1kY+A9LXzMbiXzZjBH
VsEPJvdFG+7GSu2WcghEqZL/+VL22C/MlDATCWili/Q5jOfAjzpKfGpbiPjBmRFA
zm2JpA8/xM+dY8Cu7xPIWc6BkG84rdBvnvYseGWqE1vioKx+iQPrzBmLPlziGJOh
VTNw87vOXqKmt8TKECIMbzhyU0ctX5iOCTTw6jm/VOoCNAs4vJpvK1Fs1ZGqCWZQ
U+B2c7+d51gRR9FA5ys7hERIkcqUwyfw03wWYHJWFerJ3QOiclGTQpKFKtQGoOK8
opcwHbhjiOxwy7An4eOUv6xbpYsa8Ov1
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:48 2026 by rpki-client