This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json)
Hash identifier: 5Qab4ISJ4mISCImXvP6tX579Tr7kT7YrPLv0mwAyo9s=
Subject key identifier: 6A:88:7B:CB:FB:5A:47:97:AE:EE:54:A0:65:F3:0D:A2:FC:3E:99:B5
Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0
Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
Certificate serial: 06BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
Manifest number: 06AF
Signing time: Sat 24 Jan 2026 21:37:56 +0000
Manifest this update: Sat 24 Jan 2026 21:37:55 +0000
Manifest next update: Sat 31 Jan 2026 21:37:55 +0000
Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: Ffio9ssKiGkdnynZB1Z6Sn4vYegZ7ehekyCMfyRngi4=)
2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: b5wzb1d4fSJIKgtQAD4tKlpBK8qMq3pXXUO2EIVFZ4o=)
3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: 8YKXLgBmjt4A8LGKsFF2WvwdLx1gjsD9BpALAirKEFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl
rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
Validity
Not Before: Jan 24 21:37:55 2026 GMT
Not After : Jan 31 21:37:55 2026 GMT
Subject: CN=69753bb4-9f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:d6:20:b3:89:c7:fe:f1:2f:83:3a:3b:2f:
a7:3b:c2:e2:d5:b9:57:f8:5d:32:79:31:9d:90:cb:
54:c9:82:87:ca:cb:4a:17:12:8a:b2:af:d1:43:da:
30:5c:07:a8:c8:dd:a5:ba:87:c6:77:7a:eb:86:57:
cf:d1:9e:19:cc:a9:5a:3f:d4:1d:e4:23:db:0d:29:
6a:42:d4:74:af:73:32:b5:36:26:3a:49:bb:79:d2:
88:33:99:ab:77:b1:eb:ed:a1:ab:e3:82:28:9a:71:
20:b9:40:d4:d2:2a:2d:bc:25:56:e0:17:59:c3:a5:
7f:b5:30:e1:67:cf:02:a1:9a:81:0c:7d:05:31:0c:
82:31:1b:fc:fd:8d:f9:ae:d6:f7:0d:80:1d:0e:69:
18:97:7b:b7:25:fb:92:b9:7b:d0:9d:2d:6b:90:2a:
97:e7:15:fd:89:ec:5f:d1:eb:7d:cd:76:25:09:29:
3a:ad:0b:29:26:de:d3:ab:a4:d4:80:5d:8a:0a:7d:
7a:76:3b:3b:1c:c9:cd:e1:65:2e:98:b3:fd:0f:e4:
79:d5:27:80:af:e9:53:92:64:11:71:fb:94:4f:69:
f2:5c:cd:79:b5:b8:37:65:f1:e9:c2:3e:3e:ba:b9:
fb:31:e3:b0:ef:bc:ea:55:ce:2a:6a:76:07:51:c1:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:7B:CB:FB:5A:47:97:AE:EE:54:A0:65:F3:0D:A2:FC:3E:99:B5
X509v3 Authority Key Identifier:
keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:63:cc:11:80:46:e8:7f:0e:68:34:0e:6c:bb:35:f3:65:
36:9c:27:13:26:fe:89:ff:9e:2a:6b:09:2c:de:5a:b1:bc:3b:
a8:f0:c9:67:cb:78:45:8b:5a:72:ca:fb:03:26:ef:39:72:eb:
d0:df:13:d8:ea:f6:99:e1:03:11:e7:ff:fc:0c:87:1f:70:38:
9f:98:32:eb:dd:71:b7:73:02:c3:73:95:6a:ec:18:51:0d:af:
86:66:6a:57:af:5c:7c:41:8a:b6:f8:04:76:5d:c4:27:e5:8d:
75:2f:21:d2:b3:55:b3:35:06:4e:ce:5b:9a:42:50:48:3a:f6:
af:14:90:c1:14:1f:36:44:4e:07:85:d1:d2:8d:ad:69:b5:b5:
e3:db:07:be:93:f2:2a:2f:96:ed:73:5a:a0:d2:69:91:91:32:
32:2a:79:38:c4:75:e4:d9:c2:9c:9f:ac:f1:9a:e9:89:a6:85:
36:a3:4f:f9:c3:8b:30:e3:b6:8a:9b:d2:45:5e:2c:cc:6f:dd:
a8:e7:67:bd:84:d9:58:53:e7:8a:2d:94:24:52:5b:8a:49:2e:
34:1d:b5:61:72:09:bf:d0:b0:df:07:8a:02:cd:d8:cb:f8:61:
3e:2b:fb:d4:e9:11:79:25:eb:15:03:3e:7c:e9:61:72:4b:17:
3f:2e:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:45 2026 by rpki-client