This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: 5TyhuhwcoFd3OnLBCTtY+uqiTqkS9MpIHHUxekACXW0=
Subject key identifier: 4D:7E:E7:1A:94:F1:3D:82:F6:FD:65:07:90:6C:C6:78:CD:16:F3:BD
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 0757
Signing time: Sat 24 Jan 2026 20:59:56 +0000
Manifest this update: Sat 24 Jan 2026 20:59:56 +0000
Manifest next update: Sat 31 Jan 2026 20:59:56 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: Q5PSJP2yQ3Z9S4SNPV05pcN2Hm3kES+A7MYegzpMn6M=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: Dil3/Uk9eT2zGIdSHil/xOkblPnb6d1LUXZm1Mfn7EY=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: tjsBB8X6H0g7JX2eWjQxnh/3oqypmC/RD5+/6B4nmsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Jan 24 20:59:56 2026 GMT
Not After : Jan 31 20:59:56 2026 GMT
Subject: CN=697532cc-a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:5b:17:1a:5b:21:fe:59:38:91:a2:82:29:
bc:5a:89:72:a0:c7:ce:35:f1:4c:86:1b:ce:1c:1e:
f1:c8:1d:4a:bc:38:de:b6:2f:af:58:b4:23:68:70:
5f:81:dc:31:2b:ae:b9:ee:04:96:e0:e9:19:1d:cf:
72:2a:62:9e:a8:1b:17:ef:9d:80:50:1f:66:f0:df:
9c:b2:6b:e2:73:50:1a:50:4f:40:b6:df:14:b0:38:
7d:08:bb:55:d8:0f:69:fc:f8:67:73:39:54:b3:54:
5f:51:bf:51:67:b6:85:12:d8:0f:53:9f:67:08:e0:
5f:64:34:17:50:2d:a3:a5:bc:f6:9f:36:ed:5b:b2:
97:93:24:d0:9f:db:b5:6c:cc:81:65:de:76:82:b9:
7c:5b:d0:1f:e1:f4:93:3b:d2:46:98:c3:57:98:2c:
6b:62:1f:8f:98:38:81:38:a8:1b:c7:d1:a9:ca:46:
40:31:ee:a5:df:65:3e:37:a9:6c:df:3e:67:d2:32:
9d:c3:8e:c3:41:4b:c5:8e:04:71:01:89:cb:9b:c6:
f4:83:c0:e3:44:25:30:57:38:b5:85:5e:70:93:58:
2e:6c:dc:41:bd:f7:42:24:23:04:39:b3:b4:5b:93:
3c:b2:d4:06:8d:c7:f8:34:28:ac:ba:51:c2:de:b6:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:E7:1A:94:F1:3D:82:F6:FD:65:07:90:6C:C6:78:CD:16:F3:BD
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:7d:7f:77:69:96:80:93:c1:51:50:28:ea:af:08:32:8c:
87:0d:3f:a3:96:be:81:e6:54:ae:99:19:95:c7:4e:5b:e0:6b:
50:5a:6f:ff:25:c3:62:4c:ce:8f:72:f7:17:7c:22:c4:1e:b4:
83:7a:b1:14:f5:e7:7a:0a:54:33:d5:65:0b:a5:d2:a3:5d:92:
db:e8:f6:80:eb:5a:48:bb:02:a2:f6:2b:67:02:81:e6:9c:60:
c3:f8:c9:05:62:4b:cf:5e:ee:01:82:cd:8c:b6:43:32:1e:a8:
b4:9c:63:c3:32:67:26:4a:c9:a0:df:5a:ec:8d:a6:17:8a:91:
68:ea:3e:9c:59:f4:82:12:2e:72:e8:ba:33:c8:0c:b6:94:79:
08:d1:55:48:f1:3b:c3:12:f5:35:08:d0:a6:20:40:c9:6e:cf:
ab:6d:b2:6a:0f:91:52:8b:72:ee:c8:e4:94:f9:1f:7f:7f:1c:
ad:ec:7a:b4:21:a7:50:5b:b4:e4:79:29:60:71:7a:13:e1:cb:
6b:cd:5b:d8:7f:33:d7:26:36:93:50:b1:a0:78:31:76:05:00:
e8:0f:a5:16:25:51:05:2f:b7:28:b9:61:d5:12:ca:45:77:08:
b6:3c:60:e4:4a:71:68:3f:a3:46:e8:14:59:68:66:72:a9:d5:
2f:62:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:29 2026 by rpki-client