This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json)
Hash identifier: 3XKIMM4ThUJc2wXUz5ZSU/p/ZNBexb0P/JZFnijIsZo=
Subject key identifier: 83:59:7D:38:E0:3B:8F:8C:F2:61:16:9F:D1:11:48:B3:38:3E:43:A2
Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
Manifest number: 025F
Signing time: Sun 25 Jan 2026 01:03:33 +0000
Manifest this update: Sun 25 Jan 2026 01:03:33 +0000
Manifest next update: Sun 01 Feb 2026 01:03:33 +0000
Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: nQL6rw+91Zi6AonqJRBJA8j9N9OqvTDZ6GiPRfgDI9k=)
2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: DfdDuBAOhzfGJeqTBOgnaBsJwUNyC8g3yFMfzcPqJWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Validity
Not Before: Jan 25 01:03:33 2026 GMT
Not After : Feb 1 01:03:33 2026 GMT
Subject: CN=69756be5-7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:44:01:a4:07:f0:ae:d4:47:60:f0:e4:4b:
ef:8a:3b:ca:a2:d6:e0:ee:d1:94:58:48:78:4e:cb:
f1:e1:b2:4b:e0:33:8e:4e:c9:57:67:42:a4:a1:98:
53:64:67:b1:bd:63:e8:2c:bc:8f:01:dd:a2:92:96:
5e:4b:62:8e:34:1f:b3:90:2d:52:ef:aa:aa:72:57:
86:ef:c6:26:16:1c:b8:51:f8:00:b9:a7:f5:1c:e9:
1a:ab:fa:03:9b:9e:d3:ee:3c:98:ff:ad:c3:ee:c5:
84:00:28:d9:2c:58:51:8a:55:b2:5e:af:54:b6:2b:
b4:32:43:4a:44:fa:f1:1c:34:d6:9d:6e:8e:b4:e3:
2a:67:fe:11:de:9b:0c:0d:15:0c:0b:2f:8e:04:b3:
41:eb:63:f6:cb:29:cf:92:1d:26:d7:c6:b5:a5:66:
47:6e:5c:73:40:b5:4b:13:99:bb:5d:52:50:bd:67:
e9:5e:7b:90:7d:56:ec:62:29:2d:9d:da:ef:8e:db:
26:78:e2:08:37:01:c1:48:3d:c6:13:db:28:ba:b2:
21:96:d5:ab:73:1b:10:7f:94:1f:9d:a0:f9:2d:ac:
e7:2e:50:d9:64:bd:4c:c3:e1:26:36:9d:5f:a0:ec:
98:1d:16:71:6c:2e:4b:70:78:58:9f:48:e3:62:3f:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:7D:38:E0:3B:8F:8C:F2:61:16:9F:D1:11:48:B3:38:3E:43:A2
X509v3 Authority Key Identifier:
keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c1:a7:54:b5:66:b8:39:fa:41:f3:28:87:e6:fc:9a:2d:0f:
fa:b9:a2:58:8d:cc:76:50:30:f1:86:8b:cc:bd:4f:d7:ea:20:
22:e9:5b:73:a7:a0:70:98:0b:60:e4:2f:29:93:c5:1b:da:72:
05:cb:04:31:1f:e4:c6:43:c3:18:07:e7:7b:84:d5:34:f4:1f:
52:ec:ba:73:7d:20:d0:b0:1c:8f:2a:35:6c:1f:4a:e3:09:12:
18:ea:09:c3:51:25:5b:48:36:b4:1e:f0:64:b8:ee:60:58:33:
36:af:43:73:f3:c5:d3:76:75:ef:c0:5a:3c:79:49:ec:9d:d9:
b8:6c:ad:6e:cd:d4:a9:06:45:3d:82:8f:67:23:a1:ec:03:30:
40:ba:25:6b:ce:1c:5f:0a:13:a4:5d:5a:ef:bf:26:ce:6a:6a:
0c:b5:ea:57:71:1c:2a:37:30:da:b3:37:e2:45:5a:1e:cc:49:
7e:93:4c:cd:09:a0:b4:17:67:10:f0:e9:73:f8:b3:44:57:01:
75:f3:91:c2:7c:a1:9e:ac:2b:97:78:04:48:80:e8:bf:47:a6:
31:b2:df:0e:fa:10:80:a2:e5:b2:8e:90:15:38:5a:44:d0:eb:
aa:b0:f2:71:08:21:60:96:c8:d5:d1:ee:c8:52:b9:3a:a5:0d:
d2:9c:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:31 2026 by rpki-client