This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier: 6NzqBKlXjebgF0deezs3sRKf5E9BuiDJVxPalECeK/c=
Subject key identifier: C7:EA:0F:73:CA:4A:61:B2:02:C8:FE:F4:32:98:D6:15:52:A6:DD:5B
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number: 0142
Signing time: Fri 23 Jan 2026 03:40:05 +0000
Manifest this update: Fri 23 Jan 2026 03:40:04 +0000
Manifest next update: Fri 30 Jan 2026 03:40:04 +0000
Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: d7Lql9LJX/JbGe1nDfOeoba7BOcCGM5/61vJJKyUT/s=)
2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Jan 23 03:40:04 2026 GMT
Not After : Jan 30 03:40:04 2026 GMT
Subject: CN=6972ed94-335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:0f:a6:aa:1f:15:6e:c9:8b:ff:7e:83:ce:
de:18:d4:93:0a:c6:5b:16:89:df:fe:7c:24:5f:e8:
8f:b8:0b:82:b7:10:05:be:6f:53:6e:8a:d9:87:2e:
5f:88:0f:4b:5e:72:e0:f7:c3:68:c7:14:3b:9b:46:
dc:11:83:9d:7c:53:64:c5:68:92:13:7c:3b:bd:05:
ae:76:70:77:5b:8e:7c:f5:e1:99:e7:cc:34:a1:3d:
e9:79:bb:c5:f1:bd:1d:eb:71:d0:7f:6e:37:18:cd:
a5:08:95:d7:a3:80:2a:55:df:40:ba:33:13:dc:e4:
bb:65:5b:e6:68:f8:e4:3b:73:a9:86:e7:a9:0b:bf:
5b:ad:19:a0:56:da:0e:c3:67:25:a9:7d:2f:a5:e1:
aa:47:e9:45:41:7b:a1:1a:93:bc:4c:d3:a1:ba:b0:
e8:a2:34:e7:a8:87:1a:74:f5:b6:ff:80:d0:4f:16:
a7:22:bf:42:90:05:34:3c:63:ee:3e:cd:5d:42:3a:
9f:ec:51:d3:8c:df:24:f0:5d:f0:bf:e0:12:3e:26:
c4:3f:d5:13:bb:0d:ef:fa:3e:28:8e:60:14:59:05:
18:12:3c:b5:b0:70:12:8d:6b:92:db:72:7a:a0:6f:
fd:67:3a:c5:94:a6:00:9f:25:58:f8:78:bc:d6:c3:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:0F:73:CA:4A:61:B2:02:C8:FE:F4:32:98:D6:15:52:A6:DD:5B
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:40:96:bc:2a:05:0c:2c:dc:e9:1d:b5:14:65:98:4b:00:
ef:d2:c4:ba:fc:ec:78:d8:80:81:bb:dd:4a:97:9d:96:4d:e0:
9e:45:dc:72:98:51:c6:e1:b8:d0:a2:69:4d:10:77:e0:22:22:
7b:a5:38:97:cd:b3:28:6d:52:a8:e2:93:9d:a5:42:58:78:3e:
fd:d9:2b:ef:e6:81:4c:da:5c:48:09:b8:8d:c7:d1:c0:8a:98:
e9:77:5c:ba:7c:41:0e:58:c2:d2:c4:b6:9c:00:bd:1d:69:95:
3f:c6:24:2b:e4:8a:b7:12:f3:09:b2:bb:41:e2:57:9e:fb:ff:
85:00:59:e7:c0:b0:df:49:b7:66:a0:39:cc:d7:ba:3c:37:96:
b8:48:ed:ee:a5:9f:09:95:70:f8:46:d4:d5:d6:0c:c3:02:5f:
34:d9:bd:68:ce:ba:ef:36:25:5a:72:de:06:3e:a2:fd:aa:30:
e6:cf:ea:d5:71:c9:26:57:6c:79:38:31:52:92:9b:60:99:90:
e0:c7:20:37:58:e0:21:56:67:23:76:ee:4b:32:ec:73:0e:8f:
9b:7b:5f:01:38:2a:90:37:e4:91:37:93:69:78:e9:f3:dc:35:
55:07:c8:11:a1:21:42:59:e2:d0:e5:5f:8d:71:c0:c7:b0:de:
79:43:90:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw
QTYxRUU4NkQwHhcNMjYwMTIzMDM0MDA0WhcNMjYwMTMwMDM0MDA0WjAYMRYwFAYD
VQQDDA02OTcyZWQ5NC0zMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudUPpqofFW7Ji/9+g87eGNSTCsZbFonf/nwkX+iPuAuCtxAFvm9TborZhy5f
iA9LXnLg98NoxxQ7m0bcEYOdfFNkxWiSE3w7vQWudnB3W4589eGZ58w0oT3pebvF
8b0d63HQf243GM2lCJXXo4AqVd9AujMT3OS7ZVvmaPjkO3OphuepC79brRmgVtoO
w2clqX0vpeGqR+lFQXuhGpO8TNOhurDoojTnqIcadPW2/4DQTxanIr9CkAU0PGPu
Ps1dQjqf7FHTjN8k8F3wv+ASPibEP9UTuw3v+j4ojmAUWQUYEjy1sHASjWuS23J6
oG/9ZzrFlKYAnyVY+Hi81sNzewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfqD3PK
SmGyAsj+9DKY1hVSpt1bMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG
MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT
Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFaUCWvCoFDCzc6R21FGWYSwDv0sS6/Ox42ICBu91Kl52WTeCeRdxy
mFHG4bjQomlNEHfgIiJ7pTiXzbMobVKo4pOdpUJYeD792Svv5oFM2lxICbiNx9HA
ipjpd1y6fEEOWMLSxLacAL0daZU/xiQr5Iq3EvMJsrtB4lee+/+FAFnnwLDfSbdm
oDnM17o8N5a4SO3upZ8JlXD4RtTV1gzDAl802b1ozrrvNiVact4GPqL9qjDmz+rV
cckmV2x5ODFSkptgmZDgxyA3WOAhVmcjdu5LMuxzDo+be18BOCqQN+SRN5NpeOnz
3DVVB8gRoSFCWeLQ5V+NccDHsN55Q5AH
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:49 2026 by rpki-client