This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: PcAOUgZKH5d468iAAm3zy7ecGAr7RZsdw5gNlen4htc=
Subject key identifier: 7D:73:02:D3:87:98:60:24:89:F6:9B:90:CB:37:A4:D9:7D:A3:31:C5
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 3517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 3508
Signing time: Sat 24 Jan 2026 15:02:06 +0000
Manifest this update: Sat 24 Jan 2026 15:02:06 +0000
Manifest next update: Sat 31 Jan 2026 15:02:06 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: IUnl/brIJMHid+ERsZ+fZl1leKmycGrDgIpjBayDoFg=)
2: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
3: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Jan 24 15:02:06 2026 GMT
Not After : Jan 31 15:02:06 2026 GMT
Subject: CN=6974deee-0e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:b5:f4:78:42:3c:ab:52:c2:5b:16:22:14:
77:57:98:2c:72:15:52:3e:d9:ba:dc:24:03:fd:41:
26:dd:e0:e1:54:14:5f:d3:57:bb:07:8d:5a:ad:9c:
e4:d4:84:82:ec:6c:f1:ea:ae:ba:ef:c6:96:ca:fb:
f7:9b:6a:b4:d1:e2:dd:55:8f:c4:bb:3e:44:93:1a:
47:79:08:73:18:b2:d1:6e:13:c4:1f:68:57:14:ed:
78:b8:30:3a:4c:e7:28:2a:a4:f7:9a:ad:f5:7c:24:
fa:5a:cf:5f:8a:b8:90:a8:c4:b5:13:b5:b9:55:85:
02:3a:de:0c:9f:4f:ab:38:bc:cc:51:7e:5b:ae:88:
0e:10:f7:1d:5b:c1:e1:7c:d0:35:f5:fa:a1:11:9c:
6e:16:5e:66:55:36:a4:87:61:fa:70:d2:27:93:72:
fd:8a:7b:c5:9a:71:95:70:2e:3e:53:92:ec:00:2f:
af:6b:f4:31:73:b0:02:94:74:b9:b3:1a:01:93:82:
3e:30:21:31:7d:db:c3:0c:ee:e7:32:61:03:8d:cb:
f3:ba:6c:88:5d:6d:5f:f7:3a:e8:4d:ed:8d:e3:cc:
64:95:93:2c:0a:20:f1:8f:f6:3c:15:11:28:7a:fc:
2b:ac:3d:20:96:4f:f1:f7:a0:7b:33:6b:17:5e:0f:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:02:D3:87:98:60:24:89:F6:9B:90:CB:37:A4:D9:7D:A3:31:C5
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:46:34:76:25:09:a8:59:e1:fe:0b:ea:70:fe:33:1d:f1:
40:dd:67:61:7a:83:fa:c8:53:bb:82:2b:c1:84:f6:23:74:d2:
61:7d:39:1e:de:43:28:d9:55:fe:b3:94:2f:5e:85:2d:82:16:
8a:56:5a:36:20:2d:8e:e5:fe:8a:0a:f0:07:64:5a:aa:f2:0e:
73:a9:80:c5:e4:4a:35:6c:bd:c6:d2:39:3d:9c:5f:1c:eb:7d:
bf:9d:d7:49:ce:9c:81:21:ee:19:dd:67:68:b6:03:83:c3:49:
d1:7d:8b:d4:7f:96:fb:65:1e:66:39:b9:ef:19:32:0e:09:7d:
3a:e8:14:b5:a7:57:7d:ca:3f:5d:78:13:a3:58:ab:a3:10:4c:
2d:94:d0:88:3b:eb:b9:21:f0:4e:dd:5f:fe:83:82:c4:21:36:
fc:46:56:47:7a:a5:32:f5:5f:c2:ba:3e:0d:39:93:e4:f4:77:
b5:cc:84:f3:9e:63:cf:2e:6e:52:91:4b:4e:2c:13:a0:2a:25:
ce:4e:29:b0:fa:f2:e6:58:9c:7a:04:b6:2a:be:3d:54:70:e4:
fb:f0:fb:2d:2b:b2:a9:7e:21:5b:c7:36:fa:c4:e6:3b:63:cb:
7d:a2:b8:be:6b:42:59:67:f6:dc:8d:f0:15:1c:f3:c9:ef:ee:
98:1e:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:48 2026 by rpki-client