This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json)
Hash identifier: 1h0Zkctav98b1xbmucpr/5sK8yACiVZHoKG/FbCKQmI=
Subject key identifier: 99:54:00:91:86:40:06:75:81:54:01:94:8C:2E:B1:59:9A:D0:80:62
Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Certificate serial: 0CEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
Manifest number: 0CE1
Signing time: Sat 24 Jan 2026 17:49:03 +0000
Manifest this update: Sat 24 Jan 2026 17:49:02 +0000
Manifest next update: Sat 31 Jan 2026 17:49:02 +0000
Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: sDgVf3YsD2dApb5ev2m5+T9JvTjpkupeLs6MRTV4AAg=)
2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: W7InTPbgiAEhG9WzY81Dz1pEcsFLGhc4hv2pvSfU7vI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Validity
Not Before: Jan 24 17:49:02 2026 GMT
Not After : Jan 31 17:49:02 2026 GMT
Subject: CN=6975060e-f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:19:63:0b:d3:b2:b3:14:cd:02:40:48:52:
c9:f9:db:0e:12:86:66:ba:7d:fa:90:6f:6d:b7:2e:
7d:15:d3:22:05:e2:31:d1:81:b0:d0:27:fe:c1:cf:
e7:fe:b6:5c:b6:c8:1d:de:b2:18:81:5d:cc:ed:c8:
1c:d7:f3:96:2f:e6:95:a4:7b:cc:f8:3a:e4:9d:fa:
77:0a:86:99:b3:04:da:84:59:10:57:dd:b9:e1:13:
6c:b4:56:2c:07:88:78:38:e2:ca:f0:bb:e4:f1:69:
f2:df:2a:8b:24:cc:3a:4f:bc:2d:df:3b:97:c0:3a:
dc:72:16:e2:9c:87:e9:d7:a6:a3:57:57:96:a6:75:
3f:8f:97:74:e7:8a:e5:d2:01:57:76:b6:94:cb:5d:
ee:7d:c4:ee:84:81:fd:15:9d:0d:a0:c6:c3:ce:4c:
31:9b:74:e2:ab:f0:57:e5:fd:27:33:51:3c:fe:b9:
09:1a:7b:4c:6a:24:0f:74:aa:2d:3e:75:a7:01:2e:
ac:86:a5:6d:18:b3:87:d4:16:22:79:fc:1e:a1:5f:
e2:a6:4c:22:1b:5f:fd:9a:16:37:26:1e:85:b7:ab:
53:ed:08:bf:5f:e3:c6:74:59:b6:a2:56:21:3b:11:
7a:0e:5d:8d:64:a7:2e:8f:43:95:7f:72:c7:91:44:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:00:91:86:40:06:75:81:54:01:94:8C:2E:B1:59:9A:D0:80:62
X509v3 Authority Key Identifier:
keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:04:fd:4d:a6:14:f7:f6:1a:f5:56:70:33:89:a7:66:94:1b:
0b:f8:a4:8c:3e:10:ed:95:05:ff:3b:41:40:70:00:f4:6b:ea:
f8:32:16:6e:28:de:7c:19:d1:67:9b:b8:32:3c:08:e7:d1:86:
5a:e6:6e:63:16:2d:75:c9:95:13:17:0f:61:a6:53:d6:bc:61:
df:09:36:c3:ff:9a:58:15:e2:1f:ee:db:61:c2:88:0e:80:b5:
fb:c5:31:d8:45:5b:fd:79:b3:e8:26:88:1c:6d:48:41:4b:8d:
1c:fa:58:0c:c5:91:2a:6f:41:6b:42:32:1f:0b:d2:55:38:0a:
83:60:b2:7e:9a:5a:57:72:d8:22:d9:9b:40:75:46:a4:3c:ee:
e5:72:a1:18:3f:6b:9f:93:0c:5d:7f:b0:41:e3:e3:c2:9a:cb:
33:19:ce:e1:ba:f8:e6:d5:37:56:e9:78:2a:f5:79:b6:99:24:
22:b3:02:91:bd:37:02:a9:aa:e4:b5:52:2d:c1:54:99:72:27:
f6:4d:19:cc:be:3d:aa:09:46:38:e4:45:d9:be:d6:87:e8:58:
7d:18:1c:1e:1f:b9:d4:df:2a:c7:46:f9:ac:14:d6:e2:94:3a:
8c:6a:f1:19:d5:81:9a:3d:d9:86:4f:2b:a4:2f:7f:55:1d:3d:
78:c5:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:40 2026 by rpki-client