This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier: 2QKaakVMq7TJspvQS7nGR4r8bw1LEQSq0mRTbBelsTw=
Subject key identifier: 3B:46:99:6B:41:E0:FA:54:2A:3C:A9:5E:26:4E:28:5F:D7:2E:32:A7
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number: D8
Signing time: Sun 25 Jan 2026 04:56:24 +0000
Manifest this update: Sun 25 Jan 2026 04:56:24 +0000
Manifest next update: Sun 01 Feb 2026 04:56:24 +0000
Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: pFNjnMS2iz5j6pLUk676aUA5eaNWHIQmMjcQcbR4Qaw=)
2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Validity
Not Before: Jan 25 04:56:24 2026 GMT
Not After : Feb 1 04:56:24 2026 GMT
Subject: CN=6975a278-ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:37:c2:83:dc:b0:28:ad:39:ab:c1:98:2b:
3c:9c:0e:f7:76:d9:9e:30:59:3a:01:51:42:e7:74:
84:45:f2:9b:2b:72:3e:ff:ae:24:8d:c2:48:84:18:
e3:4b:f6:57:83:83:cd:66:2e:33:9b:32:50:c0:96:
59:8e:46:25:47:ac:76:d3:74:31:e9:6b:74:00:02:
b8:15:5e:d5:2f:ac:73:90:7b:45:dc:32:73:c3:b8:
d2:8d:c9:92:34:66:ac:a2:4f:c9:4a:67:86:32:04:
ea:ad:d5:90:10:60:f0:2b:5f:10:f4:7c:fe:6a:ee:
9e:24:1e:e2:d7:be:90:2f:7b:fe:4a:52:82:e5:f9:
f2:29:03:48:0e:fd:a6:7c:1c:cc:42:9d:a9:41:34:
d6:ea:32:5a:25:bb:55:fc:59:16:11:03:00:19:ae:
49:71:89:0e:11:0f:6f:34:20:c8:e6:88:44:a3:fe:
7b:43:01:f7:e1:7e:2a:02:08:e1:79:a7:59:9a:98:
11:a1:3e:ac:7b:f8:06:e1:80:f8:7f:3a:5e:fc:bb:
41:1c:07:88:7a:27:18:0e:fb:60:28:b4:0c:aa:7d:
39:a4:d7:c1:06:f2:b9:0e:73:b9:f2:de:1d:94:ad:
e7:f5:29:37:0e:44:a1:84:5b:1d:c7:29:a3:cf:67:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:99:6B:41:E0:FA:54:2A:3C:A9:5E:26:4E:28:5F:D7:2E:32:A7
X509v3 Authority Key Identifier:
keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f0:0f:c7:14:48:a7:61:8a:36:d7:d8:0f:51:b0:84:74:4c:
34:61:9c:6a:6e:90:ba:e1:e0:38:63:ae:22:cf:c4:8a:14:96:
36:e6:ee:c7:fe:84:d0:4b:1f:65:6d:d8:62:f6:b9:a5:44:f4:
ae:23:fe:04:f8:16:1e:6e:89:7a:49:24:9e:21:51:10:7e:0e:
d1:58:cf:4a:5b:89:74:9f:eb:47:4f:cb:c1:3c:2c:f6:05:53:
63:c4:70:60:60:4b:c8:2c:f9:da:e6:3e:b7:dd:f7:bc:cd:c1:
72:84:ca:6e:98:14:58:30:c2:fa:22:fb:d3:7f:a2:11:4c:41:
25:06:45:50:42:45:9d:d4:1a:1e:b2:ca:c6:c6:8c:88:90:37:
be:a4:87:c0:14:e0:be:7d:b5:c1:0e:6b:64:14:0f:e4:82:cb:
b4:b3:39:68:f9:d3:ac:f0:8d:57:13:5a:96:89:44:1d:ca:56:
18:08:4b:72:1a:24:6f:bf:f8:74:9f:45:16:cc:ce:85:b2:f1:
18:79:cf:42:45:d8:5b:f1:0a:7e:83:14:7e:f5:6d:fc:38:1f:
3d:7e:4d:41:6d:af:ab:9e:80:cb:6d:04:46:fe:19:dd:f0:fe:
f2:d9:fc:ab:b8:d4:1b:bc:93:28:54:96:f0:35:30:21:97:48:
ae:eb:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:50 2026 by rpki-client