This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: Z303LgSfQfl4gwykXK5ZeDafShkxBUin/hCaQ2O0nWE=
Subject key identifier: A4:98:1D:06:F9:C4:4E:5B:D8:75:62:6A:CF:09:AC:FB:E9:54:08:96
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 3603
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 3598
Signing time: Sat 24 Jan 2026 14:55:16 +0000
Manifest this update: Sat 24 Jan 2026 14:55:16 +0000
Manifest next update: Sat 31 Jan 2026 14:55:16 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: ld3BHoQPNzCZglCZ32ajtNVjDYETRO/Go6iaqb/gV7o=)
2: AF6B6318EFA011F08F11B2E3696F56BC.roa (hash: cZqSqRW+4kePvqCEtokXZn59gAFacyF2ESqb+2UkI80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13827 (0x3603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Jan 24 14:55:16 2026 GMT
Not After : Jan 31 14:55:16 2026 GMT
Subject: CN=6974dd54-ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:f2:6c:76:09:e9:3d:94:fc:18:6a:ec:08:
95:44:bb:05:f5:e2:ff:67:43:fe:70:03:d3:b1:b4:
21:00:7f:e8:02:bf:ed:1d:4f:11:cf:dd:84:51:a0:
5a:80:e2:a5:fa:45:0b:f7:9b:82:73:97:69:44:e4:
a0:26:7e:3c:d3:a8:3b:aa:14:57:ac:5b:ea:3b:b9:
a1:e6:3a:35:4d:e7:0e:ad:3f:38:d7:84:7a:d8:99:
50:f7:0d:4a:75:e9:2a:6c:3c:04:26:98:47:7c:12:
76:b8:42:79:27:fc:a9:4c:0e:d5:e9:a1:e8:f3:9b:
1b:55:95:59:54:fc:28:96:9b:8b:20:4a:17:40:24:
a4:03:6e:fb:76:d2:50:a1:5a:28:b4:08:7b:77:97:
9b:26:e8:b7:63:ed:8f:ec:40:b8:94:1b:a6:86:1d:
78:0c:46:a8:8d:6c:d7:ab:a4:6b:da:8e:a4:10:1d:
3c:28:e4:58:73:4f:8b:6a:8d:a2:fe:fe:d3:b7:be:
89:73:e6:c5:ff:90:2d:1c:23:55:d3:d8:5f:b0:1c:
09:45:4a:3e:ce:f7:45:9c:56:12:22:ad:e9:91:bb:
71:6d:a3:2f:c7:6e:72:1b:39:f7:97:9d:61:a0:3a:
4f:98:a9:60:f6:01:cc:6b:82:7f:57:b3:0f:01:2a:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:1D:06:F9:C4:4E:5B:D8:75:62:6A:CF:09:AC:FB:E9:54:08:96
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2f:dc:dd:4d:b9:08:e9:d7:82:82:8d:a8:dd:66:91:98:d3:
66:47:f6:28:36:8e:f1:17:49:da:e8:7e:61:2d:c7:fc:a9:f0:
78:fd:5f:4c:89:51:6a:a6:51:2d:71:d3:cc:fb:e0:56:6a:f7:
9e:b8:8f:e4:fc:c2:48:94:ac:77:b1:78:28:bd:73:2b:0a:17:
a3:4c:04:9c:eb:5a:bd:26:0b:fa:f2:e2:bb:bd:20:f5:72:8f:
e2:d6:49:66:f1:83:80:00:41:6e:e5:00:0d:9b:77:70:5c:c1:
d4:9b:ca:73:f5:4d:87:23:56:47:8a:41:c6:da:33:85:c5:09:
18:0f:ab:01:c2:ff:c1:77:f5:4f:23:52:50:24:5f:dd:a3:db:
df:21:bf:10:16:6d:10:46:39:5f:5b:12:00:cb:20:19:e0:73:
ad:69:61:df:6e:05:32:91:cc:f1:20:ea:6c:86:72:20:29:51:
50:0f:20:10:1e:9b:53:e7:d3:ba:7a:a4:97:3f:66:5e:39:9b:
ee:f5:a9:29:36:b2:39:53:f2:11:47:a4:8e:a5:a5:c4:18:8d:
1e:d1:c2:83:d6:04:ea:ea:a6:85:1c:fc:64:fb:e6:d5:0a:42:
53:2f:ae:d4:e7:08:cb:d5:ea:c1:e5:1b:52:1a:94:d0:d5:d6:
56:28:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:56 2026 by rpki-client