This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier: UCjpMx9Wntl1r+yj02WbwmcWWtA+rHr89MpptfVXoFc=
Subject key identifier: 15:E7:D9:95:4E:D0:B6:A6:F3:08:70:CE:2B:79:3C:67:4C:81:54:99
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number: 1C
Signing time: Sun 25 Jan 2026 06:55:41 +0000
Manifest this update: Sun 25 Jan 2026 06:55:41 +0000
Manifest next update: Sun 01 Feb 2026 06:55:41 +0000
Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: AvNDKVToMHZAHJXJ6xAMh6QR6Vs+j19hhvcacuHaEGE=)
2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: wcuLm38qVMVNfKNHp4RygYOU4qm8i0LLeiUXLc8K4jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Validity
Not Before: Jan 25 06:55:41 2026 GMT
Not After : Feb 1 06:55:41 2026 GMT
Subject: CN=6975be6d-0c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:c0:5d:ca:d8:94:b7:7e:84:9b:de:43:5e:
a6:2a:fa:72:6f:53:dc:1f:12:e9:cf:b2:72:17:96:
a4:03:97:55:77:61:c8:de:c4:5a:bd:c2:1d:9d:23:
a7:74:58:db:19:c7:bd:e8:e0:01:ea:57:62:78:0b:
73:47:e5:1f:5d:3b:9b:a6:69:d4:ed:5f:40:88:98:
10:a3:d3:fc:9c:d1:0f:fa:06:94:96:19:ad:53:8a:
1a:17:6b:99:bf:e1:1f:e8:ee:21:7d:d0:30:c7:8b:
08:6d:89:34:47:d6:09:22:56:f1:1a:66:5d:7a:66:
13:58:26:4d:cc:37:06:9f:bb:31:3c:d3:a0:1a:4f:
db:a9:5d:0d:64:b4:8b:68:1d:16:81:6c:c4:1a:81:
5e:94:33:60:be:ba:b5:fb:cd:b4:ba:e9:c7:f5:2e:
9c:e0:e3:fe:c8:37:e5:e8:a6:b4:64:3d:ea:92:8c:
92:87:1c:79:8b:73:70:d6:11:de:af:c3:78:8b:06:
48:40:1b:86:97:4c:1b:d6:d3:a5:eb:ff:6f:bb:95:
93:32:02:af:a4:10:60:b6:be:eb:ea:7d:d3:e0:ec:
71:9c:b6:25:c9:13:7d:01:1c:ce:75:3d:22:58:a1:
8c:40:3b:af:ab:98:40:9f:b5:27:b4:5c:0c:88:1f:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E7:D9:95:4E:D0:B6:A6:F3:08:70:CE:2B:79:3C:67:4C:81:54:99
X509v3 Authority Key Identifier:
keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:4c:3a:13:55:e7:ea:5e:8d:c9:8b:7f:80:ea:a2:48:fe:58:
f8:85:7d:4d:ef:7b:f2:82:99:c9:23:1e:fb:41:97:cc:66:01:
5e:2d:08:81:43:c6:09:b1:97:33:11:58:bc:49:c7:ae:00:d8:
c8:f9:8e:c7:d3:3b:58:42:9d:ed:da:73:31:41:97:27:7c:91:
59:db:5b:03:19:64:aa:85:51:7a:6d:6c:3a:1d:5c:3a:fc:17:
c4:9d:19:5a:d8:27:99:91:2f:b8:a9:b1:f0:b1:5b:b1:68:a4:
4e:57:d7:b5:6d:80:fb:d3:b8:38:92:88:d2:8c:64:fb:86:9c:
75:4c:9d:9d:2c:b7:26:42:5d:71:17:99:87:55:62:2f:1d:15:
16:73:dd:94:9f:75:32:b1:6e:5b:fb:97:97:11:7d:92:49:a3:
94:15:f0:fc:bc:a7:e8:70:a8:e9:1c:8c:94:f8:87:cb:01:b5:
41:e0:34:d0:5b:a8:1d:6f:f4:95:40:69:c2:b4:bc:69:a3:ae:
4e:8b:fc:95:77:32:04:1f:69:e0:77:7f:be:4a:fb:b5:0a:b2:
11:5c:65:a1:7d:63:d2:74:a3:df:98:1e:ed:b2:88:77:97:65:
65:e2:d7:55:6a:43:23:4c:ea:5d:05:c5:1c:d7:83:41:e4:23:
84:31:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:06 2026 by rpki-client