This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier: MhTdQF7a8ud07rmNGqOZNXMe6k/5duc+XATCdVG0+BA=
Subject key identifier: 6D:F1:13:E8:7F:41:DA:A2:9C:8A:43:1D:A3:FC:C4:E2:35:33:36:89
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number: E6
Signing time: Sun 25 Jan 2026 04:45:17 +0000
Manifest this update: Sun 25 Jan 2026 04:45:17 +0000
Manifest next update: Sun 01 Feb 2026 04:45:17 +0000
Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 61ocpFYCETh82b+TiQwmZOHbrEF7Tef6W13+6Wj8b/o=)
2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: LPo7T+AueonNemWhp1/ZGMIEYr97B+J5DaEw9KwtLDY=)
3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: itU/hy7zLegaI59kUx80GxVnUpGnbgPB7QtFznO9eTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Validity
Not Before: Jan 25 04:45:17 2026 GMT
Not After : Feb 1 04:45:17 2026 GMT
Subject: CN=69759fdd-2c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:66:79:ec:c8:32:74:76:b9:6f:f7:9e:17:
40:5a:23:0d:d2:62:44:b5:02:e8:59:98:92:ad:4c:
a8:71:9f:b5:d4:94:c8:e5:0b:8c:7b:82:fd:0e:c8:
fd:3c:64:9d:f4:d7:89:e0:15:b1:b1:b2:78:88:70:
af:13:de:b5:56:99:50:dc:a3:34:84:09:01:74:43:
81:dc:6b:3a:b1:31:a9:66:6c:87:9c:be:b6:99:7e:
0a:cf:62:74:2b:41:46:e5:ad:cd:8f:96:4d:be:6a:
54:6a:07:b6:31:1d:be:8d:7d:52:da:20:0d:34:69:
75:de:5b:c1:89:e8:37:80:b5:38:3e:9c:84:27:52:
d8:c0:e8:f5:d5:b2:83:d7:d7:a9:75:8a:3b:3d:09:
13:8a:8e:ca:5b:23:ef:fb:72:cd:38:e2:8d:0c:a6:
da:60:bf:61:bf:0c:54:75:85:8c:ab:40:e4:0a:6a:
2e:64:e1:dc:6c:3f:51:f7:65:2b:e5:a9:42:91:56:
44:ed:07:e1:26:08:73:cf:2c:d9:c2:42:e7:4a:e1:
37:91:2f:1c:16:47:50:8e:73:e1:35:f2:90:10:d7:
bf:57:12:4c:21:38:65:80:1d:eb:75:73:b7:42:16:
c9:4c:7c:34:e3:c1:0e:31:5a:bc:ae:ce:8c:4d:b4:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:13:E8:7F:41:DA:A2:9C:8A:43:1D:A3:FC:C4:E2:35:33:36:89
X509v3 Authority Key Identifier:
keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:7c:1e:0d:5a:0f:02:27:29:6c:82:67:7b:2f:73:93:26:
d3:1b:5d:e6:33:95:24:75:59:66:c8:3d:53:15:df:4f:b8:7a:
d6:29:e9:e0:eb:ec:3b:6a:21:01:75:35:d6:2f:b9:0f:a1:19:
53:7e:1f:20:b1:e6:5b:02:6b:b8:e4:28:74:09:41:a7:77:da:
d3:7e:aa:cc:4e:63:8d:aa:ca:02:1b:69:42:f0:a8:2a:20:eb:
b4:84:bf:9e:28:83:f9:8e:54:e0:5d:27:15:2f:48:7f:fa:d9:
26:ff:2f:fa:71:36:b1:4f:09:15:77:f1:94:28:9d:c4:0b:37:
d4:fa:13:6c:68:95:5c:a6:4d:73:7e:28:63:a2:4e:7b:b1:59:
7e:e5:99:2f:fc:fd:5b:07:94:c4:95:6f:c3:5d:17:81:21:3f:
24:a9:40:f6:2d:0b:22:99:87:b3:7e:1b:35:66:83:eb:fa:80:
56:bd:2a:00:74:15:8a:17:b6:0e:45:40:d1:ec:66:7c:7c:fa:
99:37:b7:3a:1a:83:d9:43:31:b5:10:e7:93:3d:59:b3:5b:36:
8f:e1:87:59:47:16:5a:91:29:0f:16:ea:2d:b1:6d:c1:12:49:
64:6d:e0:68:ca:24:ea:c8:99:4d:c3:58:43:a5:fd:a1:78:e0:
24:2e:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:30 2026 by rpki-client