This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json)
Hash identifier: Us3JEKlt/evajDv+EiH/6GR0ltWQta2g7d/7KOqteLQ=
Subject key identifier: C6:DB:32:13:70:BE:EC:06:98:3B:57:B8:BC:2F:65:26:4C:10:EB:62
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
Manifest number: 06EA
Signing time: Sat 24 Jan 2026 21:19:25 +0000
Manifest this update: Sat 24 Jan 2026 21:19:24 +0000
Manifest next update: Sat 31 Jan 2026 21:19:24 +0000
Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: fibNWwEDiqG9Ic/LitKfcpncj0JogTAfhfu7B3GAXws=)
2: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=)
3: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Validity
Not Before: Jan 24 21:19:24 2026 GMT
Not After : Jan 31 21:19:24 2026 GMT
Subject: CN=6975375c-8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:7b:62:ed:bc:cc:18:cc:db:7c:8f:b0:24:
e5:4d:02:8b:07:bd:8a:9c:69:85:d8:dd:9f:79:35:
4d:a4:96:fb:eb:9c:60:f4:20:74:08:33:5b:1c:df:
09:ec:29:ae:19:45:b8:81:a5:1d:59:7d:6c:4d:3a:
78:dd:8c:e3:6a:35:f6:db:30:e8:5f:26:13:f0:38:
64:3e:6a:99:66:35:01:a0:0e:54:16:29:be:26:18:
93:f9:8a:be:cd:0b:ac:5d:31:b2:b9:17:7e:36:d8:
2a:73:b0:db:96:3d:7f:c7:a0:53:66:2f:7c:5e:9f:
6e:66:d9:df:4f:22:83:3b:4f:e3:cd:48:f9:8d:d5:
cb:d4:71:47:0b:59:58:b9:9f:34:60:c6:01:e2:9f:
94:e7:4c:69:39:46:63:58:11:09:ea:37:04:1a:da:
c7:43:58:81:29:55:79:06:ed:4f:34:f1:e0:6a:27:
9d:aa:ff:bd:17:3e:80:4b:8a:99:c2:80:f3:4f:9a:
34:64:09:f6:a4:d8:13:68:6e:f0:97:22:db:99:bf:
63:f2:e3:97:af:52:b5:5d:43:e7:f6:72:89:66:4f:
70:96:b4:e3:0d:3c:93:49:d6:f2:0e:23:4e:93:bb:
b4:33:fe:bb:32:4a:f3:02:44:ca:e3:80:61:10:75:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:32:13:70:BE:EC:06:98:3B:57:B8:BC:2F:65:26:4C:10:EB:62
X509v3 Authority Key Identifier:
keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d7:22:60:b4:7a:65:fa:dd:3e:87:f7:a8:07:98:69:c5:b7:
cf:f5:33:6a:e6:68:f6:ad:ee:9f:9b:ac:e3:70:f4:21:63:d9:
b9:d8:cb:51:c7:52:af:0d:ba:a0:f6:13:1c:35:7b:b4:e0:6f:
24:4a:86:16:33:66:49:69:0c:74:ea:cd:30:8c:7a:d1:93:ae:
22:42:50:f1:d5:90:ce:75:f8:c5:c8:b5:27:73:4b:b3:ec:66:
ba:08:99:2a:4f:52:7e:d7:12:04:c8:53:15:95:a1:43:51:99:
e4:c9:7d:e1:4e:0c:71:cb:33:26:15:fb:75:a7:47:0c:49:e8:
4f:33:46:bd:fc:33:27:03:51:d3:b7:95:f8:20:a5:24:57:55:
5c:2f:b2:9a:06:00:6a:9a:c5:24:2b:60:c6:31:8b:df:20:b5:
3f:4f:97:86:f9:6d:e5:09:ff:be:0e:3a:b7:6d:5e:23:44:78:
87:63:81:59:d0:89:86:7d:13:46:02:00:f3:ce:5e:75:75:57:
36:fe:43:d9:40:39:a9:43:b9:d4:af:6a:43:57:69:cd:f3:6a:
d9:fc:62:5e:b6:e5:12:ee:e9:23:55:09:3b:d5:87:f1:27:43:
3d:ac:2e:24:aa:d4:96:d9:71:62:df:71:c4:7b:bd:c5:fa:b2:
d2:7e:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:10 2026 by rpki-client