This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier: XPOGSWIIAiN+bLyi+slzv8fHUuWYf1Xy4hnbAIJb40g=
Subject key identifier: EC:9B:35:16:BF:9D:CF:3D:2E:9A:C9:E4:A9:8F:9B:35:03:A4:6C:26
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1C6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number: 1C4B
Signing time: Sat 24 Jan 2026 16:00:01 +0000
Manifest this update: Sat 24 Jan 2026 16:00:00 +0000
Manifest next update: Sat 31 Jan 2026 16:00:00 +0000
Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: ZZELkcXUW3RCjnBc+Q0uyPpkse4rzGfUbNE9LYS1Pe8=)
2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: gkf5l1306jNCZlXkzkzc37H/VOhptBWvvDD29cbTyo0=)
3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 7vSMEGE2WKILnDsupDw245nI6InVKo+5RlyNwkMHa0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7274 (0x1c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Jan 24 16:00:00 2026 GMT
Not After : Jan 31 16:00:00 2026 GMT
Subject: CN=6974ec81-a3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:e6:e3:83:e5:86:d6:e8:09:18:6c:88:14:
cc:af:32:3c:e4:2c:d2:1f:63:66:29:f1:27:e9:49:
8a:56:be:82:2c:4e:0c:1d:27:44:ba:7a:95:06:43:
7c:ed:be:c7:06:53:1c:a1:ae:47:04:24:0a:0d:0b:
81:89:5a:da:d0:e5:fe:63:9b:0e:ff:41:a9:d9:e3:
c2:91:51:64:29:f2:d7:54:f7:61:ed:9b:d1:8b:d6:
5f:5e:91:ee:b8:cd:c7:fc:e2:61:a3:b7:f4:f1:91:
2b:66:ee:6b:90:59:c3:90:c3:58:3a:17:65:db:40:
59:9f:c6:dd:cb:6d:f3:d3:77:8b:dd:e8:da:0c:6b:
bb:77:ce:97:d8:23:1f:b5:a6:97:4c:b7:c5:c8:89:
b0:8d:4d:f7:26:49:1b:93:39:7b:65:1b:79:c7:15:
ea:82:f0:d8:1a:6c:67:f7:06:93:a6:e6:85:8f:13:
27:6b:02:65:e1:97:f4:26:d7:6c:6e:84:05:5d:e0:
e8:f4:ec:dd:10:1a:53:b4:7d:85:29:44:af:3f:a7:
da:a3:37:71:d0:f7:c7:ab:d5:82:46:8b:3d:9c:a7:
be:59:f4:08:22:c8:3c:8b:f8:c9:b0:a8:59:f4:e2:
f9:53:a3:47:e3:00:f8:c0:6d:0c:f0:7b:50:32:50:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:35:16:BF:9D:CF:3D:2E:9A:C9:E4:A9:8F:9B:35:03:A4:6C:26
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:ab:f5:5a:43:23:1f:4a:fa:e0:0a:71:71:b4:7b:a3:50:
2c:6f:9b:c7:b2:45:4d:7c:02:9f:d5:7a:11:45:b5:a3:3e:8c:
01:83:8a:5a:29:20:96:9d:99:40:02:6c:46:e0:63:e7:d2:41:
6b:d4:22:10:e0:d7:eb:0e:9d:08:61:c9:2f:3a:52:23:aa:06:
15:a2:c9:11:76:9a:29:78:f2:d8:a6:26:4b:81:c4:35:d4:85:
35:ba:ea:ea:e7:66:e3:68:02:fb:a8:be:3c:32:1e:4b:df:64:
e6:11:04:b7:83:6b:e1:8b:fa:d6:60:a5:51:49:81:80:c0:dc:
61:c9:da:77:7c:b3:af:0a:37:3c:59:c6:09:77:55:77:03:f3:
43:55:68:79:03:65:65:15:e9:96:97:fd:86:57:85:ad:6a:dd:
f9:0e:ab:0d:eb:90:f7:52:dc:4e:f4:a2:30:9c:53:d0:d4:0e:
2b:f5:36:7b:01:38:1d:80:0c:7f:dc:96:51:fb:79:63:47:43:
d2:09:08:3d:1a:d8:20:6b:ec:41:4b:6e:19:1b:80:b6:6a:be:
e5:99:b7:66:93:32:7a:ca:26:c6:2f:0c:e1:09:93:94:0c:f3:
c3:df:6d:58:f8:c0:80:47:dc:80:87:ee:aa:f1:d7:4d:49:d7:
fa:aa:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:18 2026 by rpki-client