This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier: 9mP5D+vgR1z7uzXjF6W5s0LowT0ccP0P8ubV7RVPyaE=
Subject key identifier: 28:B9:A8:7F:3A:89:9C:3A:39:FC:54:CD:D9:1E:FA:D0:7B:BF:9A:A3
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 3535
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number: 351B
Signing time: Sat 24 Jan 2026 14:36:50 +0000
Manifest this update: Sat 24 Jan 2026 14:36:50 +0000
Manifest next update: Sat 31 Jan 2026 14:36:50 +0000
Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: YCMHmkaSBhODOgRQ1z78Q1h60zTnwwnbdQnwu4IXGkk=)
2: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=)
3: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13621 (0x3535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Jan 24 14:36:50 2026 GMT
Not After : Jan 31 14:36:50 2026 GMT
Subject: CN=6974d902-a42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:02:33:8b:8c:e7:1c:5a:dc:10:69:db:8d:
f5:0a:30:73:17:f5:be:4d:0c:6c:82:91:e7:d0:9f:
d1:fb:d8:27:1b:c5:96:00:cb:89:8d:70:5a:41:a7:
8c:d4:c2:f7:e9:4c:04:26:67:95:20:e6:1b:a4:7e:
79:89:2a:38:c5:5c:ec:8f:8d:22:75:21:8b:a4:d5:
4f:e3:0a:8a:62:d4:02:73:61:07:36:6b:96:2f:11:
e4:8c:db:97:bc:64:83:39:94:b1:6d:60:2f:2f:fa:
31:3b:b2:2d:74:b6:d0:6e:ef:0a:14:ee:11:2a:ca:
32:6f:c3:2d:a8:37:f5:b0:1a:15:da:b9:e7:04:e3:
c5:51:01:f9:42:8f:b1:da:63:ce:97:2c:93:08:47:
b5:54:df:52:d6:55:b9:96:b9:47:a2:d8:3c:d1:85:
41:db:a7:0c:11:9e:d8:65:77:ea:4d:21:be:4c:86:
a7:b5:84:31:d3:b5:e6:a0:ee:77:24:ad:2f:27:df:
dc:b8:60:5d:fe:ad:2f:88:b8:44:0f:02:39:6c:78:
37:39:a9:66:8c:25:7e:f5:88:30:42:d5:af:7b:35:
1a:80:6f:f1:0e:5e:57:86:74:93:aa:c2:6a:f1:a0:
d7:16:2f:bf:c3:f7:f2:e6:91:1f:d0:d0:a8:63:3c:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B9:A8:7F:3A:89:9C:3A:39:FC:54:CD:D9:1E:FA:D0:7B:BF:9A:A3
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:84:94:2f:c1:27:00:b5:6f:21:79:51:9e:37:62:c7:da:
3e:5f:f4:47:86:90:49:56:85:31:2d:9a:62:f9:64:3c:28:8c:
92:57:24:b0:b2:c4:47:a9:b7:9d:90:ee:30:e7:0b:86:64:2b:
24:01:68:17:0d:89:d4:14:eb:8d:cb:34:ee:d5:5f:b8:39:bf:
b8:c8:c3:48:48:21:d8:2a:1c:74:3e:b8:52:63:85:1d:3c:c6:
36:14:c1:ae:20:5b:20:5c:87:d6:f3:75:90:27:c3:e2:bf:75:
4b:cc:08:49:94:a3:60:4e:f1:ec:c0:51:b6:79:50:7c:38:4a:
bb:ef:6a:e5:99:a1:81:61:5e:f2:d3:0e:66:12:61:aa:2a:78:
14:a6:b6:fe:d8:42:35:55:e4:fa:a7:d8:3a:bc:b8:bf:59:35:
05:25:9d:4d:67:ab:4d:8a:8b:43:db:8e:5f:62:2d:ff:c8:98:
04:01:65:9a:41:b8:ef:a5:b0:9d:ab:ee:b6:5b:57:78:3c:ed:
32:87:0d:89:7d:1e:78:32:c2:ba:3f:bf:c6:12:36:57:11:c3:
19:3b:ea:d1:57:71:1a:f9:6e:35:2a:f5:be:6e:7b:22:8c:71:
48:a9:2a:16:66:fe:c6:5d:55:1f:e1:8e:40:8e:5b:56:8a:b7:
f1:3c:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:21 2026 by rpki-client