This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier: b3X2wV7YqczwmeA9p1iHhTYgmoAhOLaKIRo7uyfXGC0=
Subject key identifier: EE:21:C0:87:50:2C:96:80:A8:7C:F6:5C:C3:8B:CA:72:4E:3F:6F:08
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number: 84
Signing time: Sun 25 Jan 2026 05:51:48 +0000
Manifest this update: Sun 25 Jan 2026 05:51:48 +0000
Manifest next update: Sun 01 Feb 2026 05:51:48 +0000
Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: yL1cGm/vp/Jm1ruU5q4lDrk8dQU/KgJyOIFrLl1n5BQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Validity
Not Before: Jan 25 05:51:48 2026 GMT
Not After : Feb 1 05:51:48 2026 GMT
Subject: CN=6975af74-4dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:a0:45:af:5e:49:a4:4d:2a:a8:40:e0:3f:
2a:75:8e:8e:76:ea:b7:ee:8c:5d:7b:39:31:28:74:
df:6a:36:e5:0f:45:cb:02:eb:d3:07:2b:06:cf:67:
59:ef:47:94:07:d9:90:db:cf:2f:6d:55:c4:1c:42:
23:89:31:65:99:fb:6b:97:a3:4e:e5:c2:3f:f4:3d:
a1:1b:3f:dc:aa:e3:1b:98:fb:df:b8:52:db:d5:4e:
07:ad:37:5b:2e:a7:14:d6:12:7e:53:61:33:50:88:
83:5d:92:4d:2a:14:50:f7:01:ef:d8:da:37:a1:a3:
d6:2f:fe:c6:c9:0c:94:ac:02:26:b5:fa:84:e5:e4:
33:78:c7:d9:91:a7:d5:59:94:c8:d6:19:9a:c8:98:
12:5e:f5:05:6b:62:74:86:f6:b5:cd:45:9a:3a:0b:
2c:b9:00:e3:7e:b3:08:04:4a:75:b8:cd:3e:57:39:
ef:e0:30:16:03:b7:f8:29:7c:11:1a:d2:16:6e:7b:
a9:6f:8f:d8:39:a9:a3:a1:12:a4:43:34:c4:09:0f:
31:0e:9e:31:99:ab:6b:ed:cc:69:bb:31:45:13:e3:
7f:e1:59:b1:82:aa:8f:57:24:d1:ae:cf:6e:c0:5d:
bd:03:0a:52:c7:83:7b:fb:69:c0:f8:e1:d1:be:f5:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:C0:87:50:2C:96:80:A8:7C:F6:5C:C3:8B:CA:72:4E:3F:6F:08
X509v3 Authority Key Identifier:
keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6f:2b:37:42:21:f2:53:69:a5:f8:cf:2f:ed:34:25:46:c4:
b4:35:ef:14:67:e9:ba:d2:73:b9:12:ee:1f:af:d7:4e:7c:d0:
a6:1d:17:09:1e:d2:e3:b8:41:88:82:8d:4e:41:f3:96:4b:d6:
c9:8e:19:d8:62:cc:a0:fc:9d:dc:e6:fa:f7:0e:3b:ca:8e:83:
16:33:3b:f9:82:2a:e3:90:07:03:a9:28:b3:81:58:c0:92:4c:
9f:6c:e0:26:c0:34:d0:5e:99:49:52:0c:a5:5a:2f:2e:45:fc:
98:65:57:f6:a4:be:df:9a:41:59:85:ff:c2:d7:ec:66:45:37:
59:85:6b:43:e8:a1:fc:f2:3b:5b:a8:37:f4:3e:59:ca:c7:87:
0e:55:a0:fe:b7:fa:e1:75:67:73:96:40:33:45:4a:76:c5:51:
4b:ca:7c:d0:4a:42:7a:17:2e:48:b6:ca:a6:8c:95:eb:2c:d9:
83:5d:3a:bf:dd:be:0c:ad:0c:43:80:6a:84:d4:e9:91:a8:46:
8e:9d:45:ed:9b:1c:c9:db:e1:96:b2:a0:72:a4:5e:70:f4:d2:
7e:19:bd:de:79:ca:83:4a:a3:e3:3c:2c:a7:28:34:d3:d9:b7:
04:27:56:0e:11:ac:fc:cc:97:d4:dc:53:86:1a:a7:83:c7:46:
90:dd:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:15 2026 by rpki-client