This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: qdmL/7CO0sBX3o9Y+zNwrhGL1NfS+GF1rhL4Yl9fERI=
Subject key identifier: 7D:A6:D0:D8:BF:F0:8F:9D:68:9B:44:08:F8:CA:B7:BA:BA:73:E4:56
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 190F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 1908
Signing time: Sat 24 Jan 2026 15:38:08 +0000
Manifest this update: Sat 24 Jan 2026 15:38:08 +0000
Manifest next update: Sat 31 Jan 2026 15:38:08 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: A02iWDPMOema7DXJkB6FvYDYmf90jHtufutiXLIYA+g=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6415 (0x190f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Jan 24 15:38:08 2026 GMT
Not After : Jan 31 15:38:08 2026 GMT
Subject: CN=6974e760-1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:9b:cb:53:ad:f4:65:38:a2:cf:5e:24:c5:
16:4a:2e:a0:e4:d0:15:82:09:1f:44:b2:6f:52:d6:
25:3b:f6:52:96:f3:12:7e:0d:db:81:bc:b1:63:b6:
9c:e7:5f:23:13:b5:b8:ea:6a:f3:88:e1:cd:b1:53:
2b:69:1e:0e:e3:5e:57:4e:51:42:df:ca:ab:3f:22:
3f:18:90:1b:2e:6c:8f:c7:a8:67:78:f5:af:fa:bd:
1d:cb:ad:f1:d4:e2:75:20:ac:37:ac:18:74:ee:99:
e5:ed:5e:3a:7f:0d:d4:a1:6e:20:f0:49:e2:5b:5d:
7d:b4:d0:df:18:1a:b7:88:b7:a2:bc:67:06:14:87:
89:42:77:c7:98:e9:1d:d9:08:91:5c:b8:46:76:18:
5b:de:f2:c4:5a:d5:5b:19:a8:cb:33:cf:58:eb:8c:
2d:bc:87:b2:7b:4d:41:1c:85:2c:d9:7b:91:7e:0a:
3b:c7:2e:6a:a5:0a:70:c2:66:20:0a:b5:da:92:97:
20:06:63:ef:18:b1:06:60:ee:a3:57:e9:79:21:b1:
1f:ba:3a:ea:c1:d5:19:04:a6:db:84:5c:31:e7:a4:
30:a0:5c:ac:a1:7f:c4:70:03:a1:33:53:e2:ab:88:
77:48:b7:76:b9:93:13:83:18:af:87:0a:15:a1:88:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:D0:D8:BF:F0:8F:9D:68:9B:44:08:F8:CA:B7:BA:BA:73:E4:56
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:71:1f:2b:14:0d:49:e3:41:a4:c4:87:66:94:8e:06:8f:b1:
bb:bc:e6:bf:f1:6e:fb:f3:b9:51:6c:cf:bc:c9:95:c9:62:b3:
cf:a8:1a:6b:23:da:ab:ab:6e:ba:a9:34:01:e3:9e:7e:7f:27:
67:3a:b1:26:42:29:78:31:6c:9f:45:f7:48:4d:02:69:a1:4f:
61:06:da:c4:44:df:91:a0:b4:e0:80:6e:0e:7d:ed:2f:18:b4:
81:9b:2c:44:68:9f:45:8a:42:43:a4:56:5f:23:2c:b6:ae:98:
59:6c:e4:76:06:40:9f:08:88:a1:73:3d:e5:ab:ef:b1:6b:6a:
09:28:30:ca:73:9d:ce:d2:6b:70:12:56:52:bf:26:26:96:76:
df:57:d4:7d:6f:bf:bb:b2:ca:58:be:9c:55:7d:91:7e:6a:1c:
2e:a6:56:db:d1:67:fb:5e:15:05:17:bd:e2:19:f4:86:b0:58:
0d:af:e4:96:ef:72:ad:77:55:4f:b3:37:34:85:8c:c3:d0:24:
a4:5c:09:ff:e9:2c:ad:a6:0d:39:98:5d:19:21:43:41:58:af:
d6:27:a2:ce:26:c3:ca:17:2b:1d:9f:1d:4c:4a:3b:49:4d:d5:
d8:c4:2a:22:ac:3d:6d:a5:28:eb:05:22:9a:34:43:b7:6c:ec:
d5:c3:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:39:45 2026 by rpki-client