This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: 1uuGIKtTiivEUn3r/jltIdknJDf2dDhvIVjekfedue0=
Subject key identifier: 0F:F3:68:0D:B5:85:CB:01:D8:27:2B:CF:E0:02:4D:30:61:DD:7A:BF
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 11DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 11D6
Signing time: Sat 24 Jan 2026 16:53:53 +0000
Manifest this update: Sat 24 Jan 2026 16:53:53 +0000
Manifest next update: Sat 31 Jan 2026 16:53:53 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: Jy5a1/9+u/P3BRsewx8YI6BMeK3+X21NZaa6goNNeGc=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: YS0cph8wq76C64J4nZHJA4bk+dZCMfLqLtsUpNkPe24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4574 (0x11de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Validity
Not Before: Jan 24 16:53:53 2026 GMT
Not After : Jan 31 16:53:53 2026 GMT
Subject: CN=6974f921-78bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:12:10:76:6d:a0:ae:0a:17:20:df:1d:2a:
22:58:a0:13:5f:75:1d:ca:94:6c:0c:3d:04:ae:eb:
fa:e6:b6:f0:a7:8a:14:b2:b9:63:49:76:4b:2f:d0:
cb:b5:4d:38:03:df:b8:29:a1:80:6b:9b:47:af:97:
2b:39:ff:1d:b4:48:60:dd:f9:e4:a5:30:53:aa:60:
c2:5f:76:97:0d:31:45:0d:54:ad:e1:e0:cd:40:a8:
f2:f7:36:17:7e:f0:e6:a4:74:29:c2:e9:f2:42:52:
a9:b7:de:2f:1b:2b:cd:05:17:a6:ce:42:35:fe:0d:
b5:e3:9f:2b:b5:a4:89:00:ed:cd:73:c9:88:07:91:
23:0d:da:d9:a1:ac:71:54:5a:b9:aa:e2:7c:73:c9:
1e:04:42:64:39:ba:21:09:48:f8:09:fe:f5:8e:90:
af:34:bc:80:cc:03:ac:fc:11:d1:47:5d:38:a3:67:
6b:c7:cf:7c:7d:6e:06:a8:4b:82:5a:65:70:45:08:
01:16:0a:62:86:15:41:ec:e4:64:06:f4:ea:df:4b:
17:45:2a:c7:3e:bc:8a:e3:6b:df:e0:4d:fa:26:a2:
63:b8:4c:a3:5e:e3:ab:b0:bd:bf:de:e1:27:3b:84:
68:35:ee:a2:b5:82:0a:f7:28:5a:8b:75:00:82:39:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:68:0D:B5:85:CB:01:D8:27:2B:CF:E0:02:4D:30:61:DD:7A:BF
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:a8:b2:df:23:4d:d2:10:66:3f:e8:d6:2e:5f:a3:5a:38:
f2:b5:14:e1:41:8f:c8:4c:61:f5:a6:10:6b:b3:2c:71:f6:7c:
7b:ea:dc:04:b5:bc:59:b5:74:37:27:37:de:4b:d8:86:6f:d2:
eb:fa:fa:a9:ea:1b:ce:e4:32:97:4a:4b:38:dc:db:a9:44:9c:
60:a9:e9:ad:54:98:fa:ee:5b:e2:e2:51:0a:b3:8d:c8:a8:3a:
ea:e2:2e:fb:aa:4a:ce:4b:31:9a:0c:c7:75:d9:49:9d:11:5b:
1c:f0:e1:a0:2f:86:f9:d6:55:ef:77:d5:75:44:96:41:f9:e6:
81:16:3e:dd:10:a0:15:97:9e:d9:96:7a:aa:bb:99:3f:44:8f:
19:31:7b:c3:72:43:f0:cd:af:aa:70:d0:6d:3e:48:5d:ec:b4:
1e:62:47:2c:ec:9f:38:5b:85:93:1e:5c:a2:b1:c7:85:8d:7c:
36:8e:dc:5d:b6:33:50:d0:03:f0:53:c6:f9:30:d5:b0:f3:6d:
1f:f4:ef:08:c4:4f:91:ed:1b:72:d2:8a:5e:25:78:42:70:7a:
15:17:07:6b:34:26:e5:43:03:93:21:24:56:2c:ae:d2:ed:98:
48:eb:d7:9f:43:94:7f:cc:ec:c0:74:ad:75:89:fe:00:1e:db:
83:c3:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:27 2026 by rpki-client