This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier: EZWm6Ck4cXedBVo2jD4z4NbHGYkB8pjclCnSq1R57zk=
Subject key identifier: DE:B7:90:FD:6F:E9:9B:C5:10:F4:D9:19:43:C8:D6:69:3E:EC:E2:DF
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number: 0274
Signing time: Sun 25 Jan 2026 00:47:34 +0000
Manifest this update: Sun 25 Jan 2026 00:47:34 +0000
Manifest next update: Sun 01 Feb 2026 00:47:34 +0000
Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: tsH7fzz/tpEiZpH71x3+xmw4ukdTa2qDU9AqZ7A7w3c=)
2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: le+ae7l0/0qWR56hANLv1fsJQBcPcWZOxp+miW+bDYE=)
3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: haSQEcZvu+LWzkOvZzc7LOJTAEDY5W895cu5rNdoU9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Validity
Not Before: Jan 25 00:47:34 2026 GMT
Not After : Feb 1 00:47:34 2026 GMT
Subject: CN=69756826-4e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:61:fc:94:a1:29:2a:dd:1a:dc:39:d6:54:
12:dd:4e:74:01:ae:55:ca:05:15:8b:be:10:4a:c2:
6e:08:7f:6f:5c:de:2a:e0:9f:ea:99:f2:80:e0:31:
f1:42:e7:84:a7:7a:1d:f5:cf:fe:08:7a:92:b3:53:
e5:d6:ae:ee:17:aa:a5:5f:7f:74:94:c7:46:fd:bb:
e2:24:5b:ec:a4:43:bd:6d:d4:c6:d5:91:74:e7:3b:
fb:fe:5e:5a:54:84:17:b8:e8:e2:ed:5c:af:d3:3b:
31:e8:48:f6:ef:ad:f2:06:bf:5d:7f:a4:4c:d4:63:
eb:40:32:d9:7c:6d:c3:87:f6:2f:4f:cc:86:b6:39:
6a:a5:f3:d9:03:a2:c9:40:b4:ba:b6:3f:a3:4d:04:
0b:0a:b4:d3:60:3f:4a:b2:07:27:61:70:2e:6e:97:
06:3e:71:92:26:c7:2e:e8:c8:c8:ed:68:ac:c7:9d:
f5:d3:51:f6:c0:90:69:11:99:a6:4c:ab:c4:4d:c5:
6f:48:cd:46:81:9e:19:79:57:bc:03:e6:65:ae:b7:
68:81:d3:7f:b5:92:fa:45:ab:d5:ab:91:f3:a9:76:
f8:a7:3a:e5:e1:ca:d1:18:8c:14:9a:37:8e:fc:2b:
82:03:75:d4:05:48:81:ea:66:88:0d:14:c7:e7:15:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:90:FD:6F:E9:9B:C5:10:F4:D9:19:43:C8:D6:69:3E:EC:E2:DF
X509v3 Authority Key Identifier:
keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:f0:01:85:cd:78:65:3e:36:61:4e:64:08:2a:b7:11:8d:
87:bf:08:7d:fd:de:46:62:cc:c5:b9:e5:06:51:bc:45:8b:f6:
17:57:2a:95:7c:4d:55:d7:15:1f:7d:23:c4:3e:81:e0:81:81:
60:ce:70:9a:15:67:65:a7:ac:d7:22:6e:8c:b2:c4:d3:70:b1:
03:ee:b8:22:28:7f:92:1a:eb:6d:a6:8b:fd:c8:ea:2a:a9:41:
51:9a:c2:17:ba:2a:1f:cd:ee:2f:c6:41:0f:35:7a:49:93:21:
63:fc:a6:e4:ed:7f:2b:6e:72:a2:98:51:0c:08:a1:d4:d9:ad:
bf:0e:f3:08:d4:a3:55:46:9b:63:85:33:e8:4d:0f:36:f3:ef:
3f:60:37:2f:d5:14:61:da:31:aa:50:3d:68:fd:ef:bb:d1:63:
7a:1e:33:18:fb:71:ef:5e:ff:06:e6:6a:d1:1b:d7:a0:8e:c2:
9e:16:53:02:b4:dd:f1:1e:8e:10:70:ba:1d:c0:f4:04:e9:d1:
f0:5b:3b:ee:97:aa:3b:d9:53:86:f4:c0:9b:4d:41:4c:b1:62:
e5:98:48:99:b3:be:19:ff:fb:87:56:c0:d1:16:0d:f1:d9:f1:
e2:cf:eb:83:7f:5e:77:25:eb:5c:d1:ac:28:32:89:84:d1:c2:
03:f7:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:21 2026 by rpki-client