This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier: LJadRXLtrNMEsiCt5lNYUxYcmMx2BWWzMkJUdUU5ql4=
Subject key identifier: 03:C5:AD:AE:C7:8A:C7:31:C8:A9:F4:2E:EA:1B:52:EB:78:7D:65:F3
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 03E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number: 03D8
Signing time: Sat 24 Jan 2026 23:46:29 +0000
Manifest this update: Sat 24 Jan 2026 23:46:29 +0000
Manifest next update: Sat 31 Jan 2026 23:46:29 +0000
Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: sCg536EIlcVYV3jJkS/TuL4d42QMLG/z82Ss9pUX/S4=)
2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=)
3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Jan 24 23:46:29 2026 GMT
Not After : Jan 31 23:46:29 2026 GMT
Subject: CN=697559d5-aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:da:94:ea:16:19:52:a4:0a:99:35:3e:c8:
9d:6f:2f:8c:67:e6:95:51:01:56:04:26:5a:9e:36:
e6:d2:34:54:10:43:86:20:bc:cd:0d:0d:91:93:e9:
47:2a:a4:3e:15:9b:67:f2:a5:6c:68:26:bb:5d:c1:
92:96:36:ab:e3:5a:ae:cc:2a:b4:41:3a:b5:0b:ef:
1d:89:66:a8:69:9c:e3:31:b6:c1:90:1b:c2:fe:83:
5d:b6:67:42:c9:da:ab:5f:fb:4d:f0:22:e0:ce:fb:
0e:a0:22:e4:c7:5f:ad:2c:6f:77:04:15:da:64:b4:
2e:d0:15:18:1e:80:8f:65:07:6b:ec:3d:46:c6:47:
96:68:8c:73:3d:02:09:90:c7:5f:d6:7a:1f:b8:33:
a9:fa:3f:b6:d9:e0:03:2e:ef:21:d8:db:12:90:ab:
d5:46:d0:7a:cc:18:5d:c1:d4:7c:1c:1a:ec:c3:e6:
93:ec:e7:a5:85:00:75:43:b4:74:0c:30:04:32:57:
4d:50:f9:e3:9f:b8:f4:cd:63:31:ab:67:ce:94:c5:
34:31:98:6a:6d:df:40:98:0c:f7:0a:74:d7:19:d8:
cf:35:03:e8:16:25:64:44:94:2e:0e:8e:6d:92:43:
75:49:fb:2c:e3:3b:1d:88:56:56:7e:cb:3a:6e:ae:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:AD:AE:C7:8A:C7:31:C8:A9:F4:2E:EA:1B:52:EB:78:7D:65:F3
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:78:fc:e0:b6:d2:b6:2b:3f:e1:18:76:14:6b:ed:bd:8c:89:
34:8b:86:13:87:f4:f3:69:67:fb:7a:38:c8:10:7c:2d:fb:8d:
fd:76:c3:a5:96:6b:77:bd:56:c0:f0:b3:e6:bf:a0:e5:c4:e7:
22:1e:51:8b:06:36:ea:c5:a5:c6:27:da:f6:f9:47:2b:93:eb:
6d:ea:38:33:49:d5:7e:0f:19:2c:8e:f3:b4:c9:56:10:b1:88:
1e:ed:a6:46:a5:7a:d2:3e:2c:b9:4d:05:09:25:ce:ea:1b:ae:
cd:9f:88:18:7b:61:f3:80:36:4d:8f:0f:47:0c:d1:e3:3a:3a:
06:20:dd:e3:d7:76:f1:5a:87:d2:13:6f:58:16:fb:4e:f8:de:
cf:e6:95:36:20:4c:15:ed:90:0a:bf:b1:a6:5a:be:d2:ab:25:
00:86:cc:3e:10:6a:f6:bf:99:ea:a7:b9:97:da:14:ee:0f:db:
b4:aa:ab:bf:b5:df:45:d5:8f:bb:d9:f5:59:70:d6:81:16:57:
ea:90:81:1a:2b:2b:8d:57:91:cf:95:f3:fa:01:98:a9:21:dd:
28:7f:a9:f2:d8:90:7d:96:df:d4:4f:d8:c2:b4:56:64:0f:47:
a0:76:19:1b:95:cd:b7:61:83:06:66:15:8d:8f:25:94:db:38:
00:8a:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:11 2026 by rpki-client