This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json)
Hash identifier: WCJ7yiAAoieD2KVvOzZHr8efOay0fQQfOELJmYXCNJs=
Subject key identifier: EE:A5:0F:33:F4:A5:A8:45:BC:36:ED:9F:D6:07:8E:09:4B:EA:15:A7
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
Manifest number: 010A
Signing time: Sun 25 Jan 2026 04:15:59 +0000
Manifest this update: Sun 25 Jan 2026 04:15:58 +0000
Manifest next update: Sun 01 Feb 2026 04:15:58 +0000
Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: 6cxMnHocEiksMtinIj4vzinHSHo7YDLiuzEsn3Aegu4=)
2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Validity
Not Before: Jan 25 04:15:58 2026 GMT
Not After : Feb 1 04:15:58 2026 GMT
Subject: CN=697598ff-dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:44:01:b1:88:9d:eb:2d:1e:e9:b7:83:ff:0a:
ad:c5:b0:7a:3b:8a:11:f0:25:65:ed:fb:a6:18:8a:
9f:e5:63:ba:30:7f:81:75:a6:d3:2f:a9:50:e9:a9:
df:f1:64:8e:e1:98:00:eb:b1:6a:7f:a0:2d:5a:db:
f5:24:1f:f9:df:07:11:75:d7:71:07:19:45:87:98:
ad:28:38:ab:53:1b:24:c5:28:22:ef:0c:fe:f5:c9:
28:2e:ac:4c:cf:3c:73:f9:a2:e6:68:da:d8:8a:c7:
6b:8b:91:44:fe:17:7a:33:03:b3:10:68:0d:02:45:
78:aa:4a:b4:92:26:3a:c3:d4:1f:0c:24:40:00:34:
2c:cd:63:34:96:63:3b:b9:54:ff:c9:b5:70:f5:53:
49:fa:0d:27:d7:e7:41:e9:13:b6:f3:e5:76:28:05:
6e:cb:3e:5b:da:dd:0c:2f:dc:4a:06:46:c6:cb:ef:
60:73:80:ab:db:77:61:93:8f:35:e0:a3:04:95:07:
59:06:08:de:48:32:bf:03:d8:92:59:d2:a8:02:c0:
7e:29:1c:8f:fc:65:35:24:a5:6d:69:8d:1f:f1:53:
fe:2e:86:d4:42:95:41:b1:a1:a4:0e:2f:3a:e3:44:
81:fe:17:1f:d4:31:d1:51:81:da:e9:ea:4a:f8:17:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:0F:33:F4:A5:A8:45:BC:36:ED:9F:D6:07:8E:09:4B:EA:15:A7
X509v3 Authority Key Identifier:
keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:4f:f1:71:bb:7f:55:7b:34:ad:2a:7f:94:55:24:0e:d7:35:
10:36:00:0c:7e:35:90:57:4d:28:d4:09:9b:f1:a8:e4:69:f7:
75:2d:f6:4d:fb:81:ec:c8:b6:6f:a3:21:c7:b7:44:4e:0e:75:
5c:0a:17:0b:57:e9:2f:e1:2f:08:90:f7:0c:92:8a:59:07:f2:
96:b3:da:1b:5b:10:80:06:65:16:09:ae:34:fb:2f:15:ec:49:
b0:85:84:fa:5f:61:17:27:15:14:dc:16:b6:ee:27:f4:33:a8:
ea:c1:8c:a5:a3:3f:96:65:33:47:79:85:18:de:c9:f2:54:91:
f2:b1:f8:d6:f6:dd:a7:90:af:ce:24:18:c4:db:83:17:fa:38:
12:ff:24:a7:df:01:ed:da:b0:10:31:cc:bd:00:fd:d3:fe:43:
d7:24:df:04:d5:e8:78:51:c1:68:6f:de:45:b3:44:68:0b:7d:
98:2a:d1:79:1f:b7:ef:b4:01:3a:50:2a:77:f0:c5:13:33:5d:
99:57:e6:0d:b8:da:6c:81:cf:f4:f8:54:40:cb:31:95:8c:a0:
96:30:68:4f:28:88:d9:7a:7c:c0:4c:cc:c7:90:d8:0b:0e:c5:
a2:52:e8:7c:11:c1:2c:6d:f8:4b:93:ed:4d:de:7d:f6:55:3c:
b9:ca:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:56:53 2026 by rpki-client