This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json)
Hash identifier: 1Q8Etp6ltyo3/UQ5D6PXLhNpxMNfY36A5eFgfaewzYI=
Subject key identifier: B9:AA:65:75:F7:22:13:D6:2D:C6:1D:3E:CF:3E:95:10:4B:A8:8B:5E
Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
Manifest number: 0A6B
Signing time: Sat 24 Jan 2026 19:06:05 +0000
Manifest this update: Sat 24 Jan 2026 19:06:05 +0000
Manifest next update: Sat 31 Jan 2026 19:06:05 +0000
Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: y/PMrWX7zq/77m1MEPs8t5ipGCLOXjhUV/IUasWtMRI=)
2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: nUoqbzPBqO5Qfl3zlBTSEebEApTuxvVCag9G5bXfHJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl
rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918143E, serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
Validity
Not Before: Jan 24 19:06:05 2026 GMT
Not After : Jan 31 19:06:05 2026 GMT
Subject: CN=6975181d-85e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:b0:c3:61:be:95:fd:50:54:83:f8:eb:bc:
42:b0:ce:d8:7a:eb:d5:44:4e:b3:b4:8b:08:f8:4c:
11:f9:15:8a:b1:f9:eb:09:a7:af:ad:34:6a:95:22:
1b:dc:2a:43:84:b4:39:4e:fe:03:4a:27:6d:d7:10:
0d:e4:0f:95:eb:56:61:a8:9b:5c:1d:3f:ea:75:b0:
da:0d:0d:60:5e:3a:79:02:5f:4f:ab:e3:4f:79:d0:
29:3c:96:35:6c:33:0b:5c:b0:4c:8c:de:c8:30:8d:
ed:8c:3b:b1:12:ce:51:46:19:86:ad:a3:57:bf:4a:
fd:37:06:5e:1e:4f:eb:64:bb:6f:b6:a5:27:f8:cc:
57:b8:1d:b0:00:a2:6f:ef:a1:11:cc:97:ec:24:20:
fe:27:10:09:c0:0a:3b:a3:54:35:1b:37:0f:8c:1a:
9c:9b:13:43:5a:a6:e8:d9:8c:15:c6:ed:19:c5:7e:
5a:a3:db:08:05:b5:15:db:b7:31:6a:2a:51:39:e3:
3b:b7:4a:9d:e3:ee:4e:a1:62:d8:b4:37:bb:6e:85:
da:78:53:4a:ff:2f:cd:87:16:0f:20:2d:e0:2d:a6:
6e:75:b7:68:4f:76:cb:f6:c9:3e:43:39:a2:63:92:
28:32:e5:55:dc:69:29:f6:91:61:84:0e:2c:af:32:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:65:75:F7:22:13:D6:2D:C6:1D:3E:CF:3E:95:10:4B:A8:8B:5E
X509v3 Authority Key Identifier:
keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c9:c8:6e:29:23:d1:ea:80:11:fc:0c:40:9a:d0:fa:fd:3d:
cf:90:ad:84:a1:fc:02:01:e4:88:ee:2c:09:b5:34:d4:82:03:
9e:f9:11:4b:9d:97:d7:2f:2c:70:8c:b1:9b:91:9f:ab:1f:57:
27:b7:07:5f:b6:cf:33:18:d8:89:f4:eb:db:5c:b9:c3:56:cb:
9e:c1:ff:e6:9c:5d:87:49:5d:c6:99:84:e3:b9:0b:42:b0:83:
44:d3:60:5b:1b:5f:2d:25:2f:78:f6:32:38:77:41:cd:f8:50:
37:12:98:d7:e9:f3:a9:17:33:19:20:4f:0e:23:15:4f:ee:23:
35:19:ff:b0:a9:d4:de:a8:78:ab:1f:0d:1f:ea:03:de:e0:df:
4d:c0:d8:87:5b:3a:b9:03:24:cd:17:2e:2f:11:fc:c8:df:f6:
7b:3d:81:40:cc:40:80:79:07:8c:3b:5c:44:09:91:d3:4c:97:
9d:95:58:e3:e1:72:3e:37:03:15:36:56:ea:14:32:a6:93:59:
64:17:7c:4c:12:0e:0c:a4:95:04:65:ce:38:f3:26:b0:43:f2:
64:09:16:d1:90:13:e2:33:8c:c1:3d:2b:e4:a9:e2:0c:49:2e:
7b:42:9f:fb:65:68:a5:91:10:39:ed:50:55:aa:7a:05:c3:53:
d0:0b:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:10 2026 by rpki-client