This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: haD9tDbPNvd2bkuOLamngxBwS+1XKInjZfUQ1CARmAk=
Subject key identifier: 3C:B9:7A:C6:ED:B1:A9:BA:D5:1D:90:4B:5D:69:2F:47:40:B7:5F:BE
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 119B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1E74
Signing time: Sat 24 Jan 2026 16:55:20 +0000
Manifest this update: Sat 24 Jan 2026 16:55:19 +0000
Manifest next update: Sat 31 Jan 2026 16:55:19 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: z3UWXo+GoRcA6rzHRSBSbgsKz0AL8T2P6zFrJNHCP/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4507 (0x119b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Jan 24 16:55:19 2026 GMT
Not After : Jan 31 16:55:19 2026 GMT
Subject: CN=6974f977-b759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:16:37:a6:61:ca:44:3c:ab:46:29:a1:df:
0e:f2:5b:e6:c2:6a:a8:e6:94:9d:1d:57:71:ef:c0:
5c:b0:09:f8:f8:dd:0c:9a:39:fa:b2:be:4e:48:8a:
eb:db:6d:5e:e3:c9:27:27:a0:62:b4:7f:aa:40:53:
0f:76:61:76:30:76:2d:66:ab:b5:40:69:b4:8a:73:
5e:c0:86:30:49:af:e6:6b:d7:07:00:51:b5:7c:42:
45:b1:b3:a6:df:8d:1e:cf:8d:5c:20:f6:c4:a2:b1:
ec:e1:6f:d8:d0:c8:95:31:8b:9b:be:97:49:b3:ec:
3c:08:f6:f2:43:ea:83:b6:f8:67:1a:4e:9b:de:30:
b4:58:ef:3f:3e:df:63:72:fd:72:43:73:76:b6:57:
6d:f7:27:5b:e2:ff:a6:81:87:99:be:4a:4a:d4:0a:
af:82:37:8f:ce:63:b3:19:94:5d:f1:04:a3:a4:2a:
64:fa:03:2e:61:e2:f2:5d:e8:d8:7c:ee:30:0d:27:
93:71:59:14:42:48:9b:48:7b:ff:2a:4d:67:24:67:
97:a1:19:1a:5f:94:9a:eb:fa:67:2a:e7:aa:5a:43:
99:b0:59:ac:7d:3e:bf:03:0d:27:fc:69:38:e4:55:
da:2b:ae:2b:07:78:88:88:5f:82:46:6a:09:17:89:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:7A:C6:ED:B1:A9:BA:D5:1D:90:4B:5D:69:2F:47:40:B7:5F:BE
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:f9:4f:af:c2:b6:26:98:a0:1f:7a:41:ce:f3:0b:30:51:
24:2c:25:f1:cc:83:d5:62:15:de:d8:4c:18:ba:19:78:01:df:
0e:8a:66:dc:22:73:b7:be:9a:7d:2e:1b:2c:d5:38:85:cc:b5:
c2:83:86:06:4a:d0:5d:a3:90:21:d8:39:6b:85:97:32:d9:0e:
48:40:ff:5b:87:59:e6:68:f4:6e:1e:51:cf:86:57:cf:6d:9f:
d3:40:b7:a8:f0:ed:70:2b:06:5c:7d:bf:ca:41:43:86:22:b7:
1f:e9:a4:8a:40:71:a8:00:5c:ef:b0:2a:9b:11:40:13:81:f0:
88:e6:9e:42:30:a4:62:ca:52:ea:39:13:ca:30:ea:bc:21:e1:
84:e0:1c:85:4c:d3:72:b6:b0:da:2e:24:24:b7:8d:5c:83:86:
b6:83:9a:3b:6f:30:5d:29:77:56:76:c1:4d:26:cb:8a:72:e7:
04:da:7a:ac:d3:9a:e3:66:12:7b:77:5c:cf:b9:5f:a8:d0:18:
05:5f:aa:25:46:e6:1f:7b:23:9e:57:b8:a4:79:c6:33:81:be:
2c:eb:9e:45:c4:59:46:0a:b4:3d:cd:b9:75:1c:03:eb:4b:aa:
2e:d5:c4:62:31:15:87:cd:2c:db:5f:b3:9d:55:6f:23:c1:97:
5f:e5:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:46 2026 by rpki-client