This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier: ktTLgH1U36zfw4MyYI5/B0PiF+B+RBCTGodj2TuIff0=
Subject key identifier: 63:11:89:29:C3:24:8F:C6:41:D8:07:2E:F6:4E:8C:C7:D2:3B:7D:54
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number: 0290
Signing time: Sun 25 Jan 2026 00:41:46 +0000
Manifest this update: Sun 25 Jan 2026 00:41:46 +0000
Manifest next update: Sun 01 Feb 2026 00:41:46 +0000
Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: i0DCxSS9jvzTjD/lrPR7j0y9hwu3c4itmorXdUxU8As=)
2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Validity
Not Before: Jan 25 00:41:46 2026 GMT
Not After : Feb 1 00:41:46 2026 GMT
Subject: CN=697566ca-4d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:37:6d:47:c5:b2:3d:f7:21:98:90:eb:01:35:
e1:9d:1d:d4:25:04:bf:28:a5:27:f5:af:c6:50:a2:
a3:67:b7:d5:7b:89:ad:e8:3d:b5:32:d6:bc:1a:cb:
7b:f5:b3:33:a3:33:2b:d6:50:d9:6b:56:b2:3a:fc:
0a:7e:74:f5:42:19:2c:ca:28:33:dd:b4:72:d1:2f:
c5:e4:e6:40:4b:94:23:d8:e1:e7:10:c5:20:04:03:
36:98:47:d7:bd:64:b4:40:0b:b6:59:6e:98:88:f0:
f5:da:c9:1c:a3:74:85:95:e6:a6:34:7e:ee:a9:48:
44:25:74:af:86:ec:b0:a0:2d:36:dc:87:c3:86:c0:
f1:95:a6:a7:28:57:5f:41:29:2e:fa:49:75:6a:57:
cb:6a:e6:af:31:26:c5:37:5c:3b:68:e3:43:cd:8c:
d9:21:94:1a:28:f0:7c:21:16:a1:e6:7d:38:0b:ce:
3a:8d:1e:37:fa:86:54:03:70:85:91:6a:6e:03:79:
c3:9f:bb:de:70:25:e9:16:b2:18:fd:2e:cc:9e:1c:
52:96:df:ed:03:a3:60:02:ed:7f:a7:47:ed:27:e0:
01:1a:b6:c6:fe:7e:12:68:e0:ef:64:48:61:eb:cf:
8c:02:f6:2e:06:28:ca:d2:75:05:e0:8f:15:6f:8c:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:89:29:C3:24:8F:C6:41:D8:07:2E:F6:4E:8C:C7:D2:3B:7D:54
X509v3 Authority Key Identifier:
keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:82:65:2c:d5:8e:ee:26:00:6e:c8:7e:0c:ac:33:d6:6f:
ba:87:6d:2f:1e:7c:5f:16:48:7b:6a:b3:15:67:ce:a2:bf:2a:
5b:9b:3a:5d:27:32:13:5a:a6:11:5e:e7:15:04:96:ce:80:71:
95:05:32:12:21:45:d7:34:fc:b8:ff:27:2c:10:58:dc:d0:a0:
a1:51:03:b7:e6:bf:78:6a:dc:3d:b2:a2:34:cf:47:0d:55:57:
2d:4f:3b:bb:34:44:cd:09:b6:73:45:7e:dc:5f:84:07:8e:aa:
94:97:c7:4a:8d:98:49:30:8c:1a:d5:0e:1d:e8:fd:44:2f:f5:
0e:63:42:c5:f0:bf:e5:39:d5:19:07:1e:89:a7:e2:0a:7b:4f:
ce:21:3c:96:a4:71:28:c2:fc:d2:e2:72:45:7f:b1:f6:82:f9:
d1:f0:ea:98:d1:47:8e:4e:34:cb:0f:aa:33:c7:9b:c9:be:1f:
0b:a4:d5:7c:eb:ae:c8:9f:d2:a8:27:cf:cd:d7:5e:ca:a8:da:
e3:ac:55:66:54:a4:93:78:1b:93:ce:bd:0d:64:6e:1b:9d:ec:
b9:a3:1d:cf:43:4c:17:80:bf:fc:67:09:cf:25:d9:c2:85:06:
3f:68:3c:da:90:5f:51:b3:1d:38:8d:43:be:e2:76:b7:91:c1:
db:3e:2f:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2
OTFEQzA2MTUwHhcNMjYwMTI1MDA0MTQ2WhcNMjYwMjAxMDA0MTQ2WjAYMRYwFAYD
VQQDDA02OTc1NjZjYS00ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8zdtR8WyPfchmJDrATXhnR3UJQS/KKUn9a/GUKKjZ7fVe4mt6D21Mta8Gst7
9bMzozMr1lDZa1ayOvwKfnT1Qhksyigz3bRy0S/F5OZAS5Qj2OHnEMUgBAM2mEfX
vWS0QAu2WW6YiPD12skco3SFleamNH7uqUhEJXSvhuywoC023IfDhsDxlaanKFdf
QSku+kl1alfLauavMSbFN1w7aONDzYzZIZQaKPB8IRah5n04C846jR43+oZUA3CF
kWpuA3nDn7vecCXpFrIY/S7MnhxSlt/tA6NgAu1/p0ftJ+ABGrbG/n4SaODvZEhh
68+MAvYuBijK0nUF4I8Vb4xGGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMRiSnD
JI/GQdgHLvZOjMfSO31UMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz
OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP
Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwS4JlLNWO7iYAbsh+DKwz1m+6h20vHnxfFkh7arMVZ86ivypbmzpd
JzITWqYRXucVBJbOgHGVBTISIUXXNPy4/ycsEFjc0KChUQO35r94atw9sqI0z0cN
VVctTzu7NETNCbZzRX7cX4QHjqqUl8dKjZhJMIwa1Q4d6P1EL/UOY0LF8L/lOdUZ
Bx6Jp+IKe0/OITyWpHEowvzS4nJFf7H2gvnR8OqY0UeOTjTLD6ozx5vJvh8LpNV8
667In9KoJ8/N117KqNrjrFVmVKSTeBuTzr0NZG4bney5ox3PQ0wXgL/8ZwnPJdnC
hQY/aDzakF9Rsx04jUO+4na3kcHbPi8c
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:44 2026 by rpki-client