This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json)
Hash identifier: wDSkQ50FzitDekmAKTSb20Y5zxgsdI9aAhwUkLF9A3U=
Subject key identifier: 15:6D:B6:AE:FA:A7:05:FB:32:4A:0E:AB:B7:D3:7B:63:E5:4A:D4:03
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
Manifest number: 01BA
Signing time: Sun 25 Jan 2026 02:21:00 +0000
Manifest this update: Sun 25 Jan 2026 02:20:59 +0000
Manifest next update: Sun 01 Feb 2026 02:20:59 +0000
Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: grXTx1dUQgzrPRgM5S0WTUy+hzsNZD9+7PxiNU2L08Q=)
2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: yvW+7KEN1r2AnGybLD+cJdYpMMr9FOvcXCauGaGi/l8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Validity
Not Before: Jan 25 02:20:59 2026 GMT
Not After : Feb 1 02:20:59 2026 GMT
Subject: CN=69757e0c-6960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:85:7a:4d:a2:09:94:31:f1:3f:30:d0:0e:
9d:70:51:21:3d:91:27:ba:57:81:79:d6:02:4f:35:
1c:09:0e:5e:b2:de:57:d7:05:88:dc:31:c4:91:d0:
c6:10:a3:50:c0:77:47:2b:ae:1e:95:0e:b1:8c:88:
8d:71:44:b9:43:d3:68:55:41:86:06:6a:2f:15:cd:
b9:1c:bf:97:d9:ef:7c:4c:61:36:45:f1:7a:43:90:
26:9d:70:ed:9a:fc:e7:ee:79:9e:af:4c:29:bb:73:
6f:c0:a4:d5:6b:a1:f8:25:ab:cc:be:90:fe:95:f6:
34:3e:62:fe:e2:ec:4b:ea:b1:4c:9a:0b:1a:b7:9d:
98:05:b4:f5:1a:60:19:6e:d7:99:10:35:4d:cc:1e:
63:e9:56:3a:14:9e:96:a7:39:85:0c:cc:9d:2e:55:
4a:04:03:f5:92:59:ad:ac:3e:e4:09:b9:2f:23:ef:
a0:0b:e4:d4:36:66:2d:86:73:e3:28:4e:0d:ee:72:
8b:00:a6:75:2f:ac:8a:56:8a:81:35:69:27:2c:70:
71:5c:97:0f:23:03:1f:35:36:29:3a:12:8d:da:3f:
62:6f:c2:86:73:dc:63:7a:58:21:e2:c9:dc:d4:33:
05:08:85:86:38:11:4d:dc:3d:e3:73:ca:94:7a:87:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:B6:AE:FA:A7:05:FB:32:4A:0E:AB:B7:D3:7B:63:E5:4A:D4:03
X509v3 Authority Key Identifier:
keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f0:80:f9:af:4d:6a:79:e1:7f:97:c8:7b:38:89:18:d4:20:
dd:93:62:c7:48:91:27:06:aa:f8:59:27:28:73:5d:8d:5c:24:
eb:d5:22:ac:41:8e:2c:42:55:fd:67:63:c3:11:a6:59:71:77:
3c:87:cd:cb:34:4c:97:30:2a:94:a6:63:d1:45:8e:50:bc:cb:
c3:52:b9:09:63:b5:97:98:b6:74:79:bc:68:8a:4e:6b:0b:fa:
a8:e9:25:74:d3:37:c0:8a:bb:7f:01:4d:54:9f:e5:38:49:f6:
e7:4f:f1:86:d5:87:80:c1:8f:b3:29:d9:98:dd:e5:00:45:6f:
ea:78:42:c1:e7:42:6d:64:64:c4:2e:ce:81:02:9f:6e:a1:a6:
64:9c:5b:54:bc:70:d5:f2:eb:19:cd:19:57:88:62:76:d2:f8:
07:43:d9:fe:48:d3:a5:44:fe:11:7d:ae:46:56:b8:1c:b4:23:
93:7b:3e:e9:cc:44:fd:d8:0b:22:53:7e:0a:bc:0b:fe:4d:3c:
d8:5f:a7:b4:5e:f8:01:b7:8d:d5:18:8f:ab:09:ac:64:8d:07:
ef:02:ed:db:46:bb:5b:39:05:37:14:3f:29:70:0e:5f:39:de:
ed:b4:99:fe:3c:e8:77:7b:53:d9:12:48:af:32:45:c8:9b:85:
1c:90:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:32 2026 by rpki-client