This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier: l6SM33L3LsSh+1Cocc9Ndp72QI4dw+4k1A987tJ1OpY=
Subject key identifier: E7:60:AF:DA:E9:05:D7:A2:09:45:FB:86:05:65:E1:B1:24:A6:07:89
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial: 1643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number: 163A
Signing time: Sat 24 Jan 2026 16:28:47 +0000
Manifest this update: Sat 24 Jan 2026 16:28:46 +0000
Manifest next update: Sat 31 Jan 2026 16:28:46 +0000
Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: Zt6pSGCJGeopN0DQwR+dxZjH+9xPtUCQs9SOjdf1VoE=)
2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: yneq3VCU0xUuuWqz2yd6YieZf1M20T8Wk5aQncEi7bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5699 (0x1643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Validity
Not Before: Jan 24 16:28:46 2026 GMT
Not After : Jan 31 16:28:46 2026 GMT
Subject: CN=6974f33f-fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:6e:d1:cf:83:3b:f8:a8:01:d9:19:56:36:
aa:15:d0:6f:e8:03:50:47:08:e2:c2:71:f2:e8:77:
41:3f:7a:be:68:b3:30:97:51:85:e6:af:39:54:e8:
30:79:c2:82:a0:f7:dd:72:d0:e9:1b:31:92:65:a7:
13:fd:4e:4a:3c:98:29:09:08:e9:33:a3:ea:80:99:
5f:64:ea:90:aa:8d:e6:ef:1a:85:d5:ba:6f:f6:2a:
4a:51:06:1a:df:d2:a2:d8:46:04:a7:29:16:70:5d:
3a:5f:1b:58:ef:2f:e0:ca:3e:23:a6:83:76:5b:86:
86:16:32:7d:86:0a:e0:79:f1:72:3d:9a:85:15:e9:
fa:0d:f7:0f:5d:fc:22:50:91:4e:f9:a1:b7:af:b2:
33:50:78:89:cf:80:12:75:ec:8a:5c:6a:eb:5c:4e:
f4:50:3f:e4:a6:c6:8d:ce:33:bd:35:78:42:ef:f2:
a3:75:be:8c:28:58:e3:8f:24:0c:fc:e4:df:d3:6f:
47:cd:e7:f7:ea:5d:5e:a5:3e:06:ed:8e:39:c3:71:
42:39:3b:9b:f2:0d:e6:c8:81:10:26:65:52:e9:ea:
e2:5d:dd:70:ce:ac:25:9d:c7:9b:0d:da:c2:4e:ba:
16:4e:51:dc:97:33:71:6d:cc:4a:7c:9b:79:98:e0:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:AF:DA:E9:05:D7:A2:09:45:FB:86:05:65:E1:B1:24:A6:07:89
X509v3 Authority Key Identifier:
keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:2f:aa:1b:f1:2b:00:eb:7e:67:10:71:9a:65:73:4b:51:
87:ca:4e:54:7b:f9:99:6d:a5:8c:8b:e5:1b:5a:93:7a:13:e8:
93:47:74:b6:e0:78:e5:b8:ef:81:12:9c:49:55:c8:de:2f:b6:
bc:6a:5c:22:38:39:7c:c3:b2:fd:31:c3:6c:87:29:50:ae:29:
c9:b3:1e:4f:78:6d:4f:71:3f:db:3a:35:56:5d:ac:58:c6:9b:
3d:fd:c8:6a:33:36:89:2a:53:e9:4f:08:2d:f2:b8:29:ea:9f:
72:ca:27:c9:c3:b0:e8:29:6d:65:f8:f9:6b:67:04:42:8a:14:
7a:61:48:bc:db:c2:0b:f3:60:5e:da:b2:cb:7c:bd:70:41:95:
b0:d1:8f:f4:1c:02:cf:01:3f:79:94:2a:13:6d:71:bc:eb:c6:
82:3b:a2:3e:03:e3:e7:67:b0:16:c8:a6:de:0f:a3:1b:d7:cd:
83:0b:74:3c:00:88:7f:c0:bf:f3:01:ac:5e:59:ed:e3:92:13:
9b:b3:35:9e:58:6a:95:a4:8f:e7:f7:0d:2c:5e:a1:e3:f4:a0:
e3:10:11:9b:4c:ef:a4:8f:0d:de:10:69:e0:93:0e:cd:33:58:
8a:11:9b:2b:28:c1:f7:51:be:97:47:c1:8f:5e:a9:b3:42:5c:
02:19:a1:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0
MzRERjQ1NDAwHhcNMjYwMTI0MTYyODQ2WhcNMjYwMTMxMTYyODQ2WjAYMRYwFAYD
VQQDDA02OTc0ZjMzZi1mZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRJu0c+DO/ioAdkZVjaqFdBv6ANQRwjiwnHy6HdBP3q+aLMwl1GF5q85VOgw
ecKCoPfdctDpGzGSZacT/U5KPJgpCQjpM6PqgJlfZOqQqo3m7xqF1bpv9ipKUQYa
39Ki2EYEpykWcF06XxtY7y/gyj4jpoN2W4aGFjJ9hgrgefFyPZqFFen6DfcPXfwi
UJFO+aG3r7IzUHiJz4ASdeyKXGrrXE70UD/kpsaNzjO9NXhC7/Kjdb6MKFjjjyQM
/OTf029Hzef36l1epT4G7Y45w3FCOTub8g3myIEQJmVS6eriXd1wzqwlncebDdrC
TroWTlHclzNxbcxKfJt5mOCnLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdgr9rp
BdeiCUX7hgVl4bEkpgeJMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4
MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty
a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBA/i+qG/ErAOt+ZxBxmmVzS1GHyk5Ue/mZbaWMi+UbWpN6E+iTR3S2
4HjluO+BEpxJVcjeL7a8alwiODl8w7L9McNshylQrinJsx5PeG1PcT/bOjVWXaxY
xps9/chqMzaJKlPpTwgt8rgp6p9yyifJw7DoKW1l+PlrZwRCihR6YUi828IL82Be
2rLLfL1wQZWw0Y/0HALPAT95lCoTbXG868aCO6I+A+PnZ7AWyKbeD6Mb182DC3Q8
AIh/wL/zAaxeWe3jkhObszWeWGqVpI/n9w0sXqHj9KDjEBGbTO+kjw3eEGngkw7N
M1iKEZsrKMH3Ub6XR8GPXqmzQlwCGaHC
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:36 2026 by rpki-client