This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier: b7hHYqK9lz0oepG8kCr3ImdYJGPhkoHylzoYrchFl6M=
Subject key identifier: 60:F1:4D:17:73:7B:27:35:E2:D9:82:D4:97:40:E8:94:81:11:42:D9
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number: 02FA
Signing time: Sun 25 Jan 2026 00:24:53 +0000
Manifest this update: Sun 25 Jan 2026 00:24:53 +0000
Manifest next update: Sun 01 Feb 2026 00:24:53 +0000
Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: VTWpqptKQrFaoO48fVQrcYoOx8ubnuFhPpLBLy9Z7LM=)
2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: nulXjcOrSFFLkbb+9xp8u7rKBr37IkDLnEDnosvhdVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Validity
Not Before: Jan 25 00:24:53 2026 GMT
Not After : Feb 1 00:24:53 2026 GMT
Subject: CN=697562d5-0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:f3:0a:8a:be:c8:28:1d:5f:90:cc:27:17:
e7:18:d5:bd:be:16:63:6d:c1:d6:9b:fb:66:11:9a:
29:30:3e:b7:b3:70:1d:d0:a5:13:a9:93:a9:71:02:
6b:e9:c5:1f:62:2d:74:49:29:2e:ea:62:57:7e:03:
f6:50:e5:88:9b:f1:06:70:c0:69:05:3b:d0:82:3a:
5a:48:ea:1c:24:c7:6d:23:b3:7b:d8:51:5b:84:c9:
73:73:bb:41:13:45:1c:4d:37:4d:79:63:c7:e5:a5:
ec:64:bc:a9:79:12:7b:20:af:8a:4b:5b:58:66:e8:
6c:9d:53:cc:a0:64:38:b7:0d:bf:e4:12:c2:1a:e6:
40:6c:c4:12:52:84:68:8f:34:12:b2:17:e9:0b:08:
cc:70:3d:de:35:e2:1d:33:fb:cd:61:47:44:ff:51:
98:4b:38:d4:b2:3f:d5:7a:23:d9:77:50:ff:44:bf:
d7:02:0b:84:43:c0:08:85:7b:6f:c8:e9:db:a5:d3:
5e:50:39:c7:7c:00:ef:ba:3c:b0:f4:db:f7:18:5c:
74:65:78:2b:7a:fe:80:83:31:9f:ce:09:62:01:3b:
01:a6:13:b6:28:3f:fa:05:11:4c:1c:6a:20:da:f3:
ba:9b:53:cd:f3:54:ff:e0:5a:4f:84:df:d7:4c:b8:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:4D:17:73:7B:27:35:E2:D9:82:D4:97:40:E8:94:81:11:42:D9
X509v3 Authority Key Identifier:
keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:9f:01:f8:1e:f6:d3:df:48:f5:a1:cf:be:39:00:ba:60:
21:90:b0:0f:35:68:f4:4e:64:69:54:a3:10:81:f4:24:72:fd:
79:e5:70:75:c5:8e:0f:32:55:d8:2f:cf:59:bb:8e:04:ad:e5:
ea:9e:a3:72:15:9f:28:27:6f:9b:55:79:e3:bf:f6:34:40:49:
e8:f0:f8:a1:85:7c:5c:a6:09:a8:a6:09:e9:15:28:33:24:5c:
b4:8a:a0:39:ad:6a:85:c6:be:44:4d:97:f3:44:aa:8b:ad:46:
88:9c:45:59:62:c4:3f:31:1a:42:7b:d0:21:b4:e6:3c:8f:4e:
b4:97:f7:13:ed:85:8f:63:0d:2e:b0:4f:5d:07:4a:cc:80:bf:
c0:fc:06:32:20:9a:31:43:72:d3:42:47:51:40:0b:21:b7:5f:
e4:d2:b0:d4:1e:c3:b3:bb:52:6e:52:17:9e:97:6d:09:d5:85:
67:08:6f:44:b0:a9:cf:96:99:ea:14:0f:1a:e6:ca:74:a3:fd:
1e:a4:43:2d:66:04:a2:4f:fd:d9:e3:8e:13:f8:89:3f:f4:c3:
59:2c:98:f1:03:61:2a:88:b9:fe:0d:4a:8d:27:d0:52:8f:a7:
6f:89:d5:2d:93:09:b5:e2:76:ff:d3:8b:09:bc:ba:91:30:6f:
bf:90:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:12 2026 by rpki-client