This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: P7kFRijf1+EMzpk6tw/xyFUgp/h5VBlCHE18gJHJQ6o=
Subject key identifier: 35:2A:86:2C:33:D4:CF:B4:A5:3A:14:EA:32:82:E5:D4:B8:5D:74:3E
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 09C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 09AF
Signing time: Sat 24 Jan 2026 19:26:33 +0000
Manifest this update: Sat 24 Jan 2026 19:26:33 +0000
Manifest next update: Sat 31 Jan 2026 19:26:33 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: I5dZ21dahaZ8/U5VoOKjiqTUz0Yv8A1RxCzLgiz7fmc=)
2: F568EF1A7F1711F094D2F035C4F9AE02.roa (hash: zT0Sz7g9V+D+Ya+GE9O18/USSfPNOgS69nwUWk/3R4k=)
3: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Jan 24 19:26:33 2026 GMT
Not After : Jan 31 19:26:33 2026 GMT
Subject: CN=69751ce9-6eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:20:2a:de:31:42:7c:21:53:d8:2c:9d:04:
4c:ef:0e:59:97:31:52:da:91:33:03:0c:16:d7:72:
6c:21:eb:ef:6b:0f:7d:ac:81:ce:f0:92:d1:c7:e5:
0e:54:15:87:8c:b9:06:2e:71:ee:af:64:a2:0c:69:
d8:f5:cf:b1:a6:19:98:7b:dd:4c:c7:e5:9f:c8:41:
b6:61:3d:e6:05:e7:ab:a9:2c:23:f5:ef:5a:fc:24:
75:a1:92:27:de:12:59:6d:b8:c0:da:43:7f:64:61:
bf:60:f4:03:65:c8:30:ce:71:d8:97:a0:bc:49:d4:
2b:3e:78:68:17:c5:8a:0a:53:78:ae:42:17:58:e6:
9f:33:bd:e4:36:88:8d:3a:34:76:d8:f9:7c:17:20:
e6:b4:59:f5:7c:65:dd:61:38:77:58:9b:8b:e2:6e:
34:17:37:c8:ae:be:0f:11:cd:30:44:e8:b4:43:d3:
15:f8:79:cf:ac:bc:5d:d2:ca:96:0a:4d:44:69:ec:
68:40:f7:6f:14:26:ef:a0:4c:4a:4b:e5:2c:9c:a4:
5b:86:a9:87:92:08:c0:c4:9b:de:4f:8b:bb:bc:f0:
7b:b1:d2:38:a3:8e:c1:89:49:8c:c9:d8:61:84:4d:
8f:49:f7:8d:7b:fb:6a:e3:42:3e:d4:e1:16:c0:09:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:86:2C:33:D4:CF:B4:A5:3A:14:EA:32:82:E5:D4:B8:5D:74:3E
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:5b:3b:d8:c6:48:82:33:56:87:29:fb:ad:3f:f4:13:b7:
fb:17:ee:b2:cb:1d:01:8d:b3:85:09:48:9b:d1:89:d5:be:ab:
e8:31:ef:39:94:b0:a0:52:b0:e3:ae:b2:ae:c5:f6:20:e6:cd:
c9:ce:4c:c8:8b:df:88:d9:2c:1c:9f:f2:6e:1b:30:d2:be:07:
6c:60:6d:bd:a0:23:d3:65:d7:9d:fc:0d:b2:a1:df:ae:58:7e:
a6:70:87:d5:a7:13:c2:91:8e:14:78:b7:ab:d6:32:8d:61:d7:
89:4d:47:e1:0a:40:13:ec:16:c2:c0:db:b4:1c:9b:2d:58:77:
09:9d:ca:d1:e0:ae:f5:4e:15:d8:b8:0a:a8:28:22:75:2b:40:
54:37:55:cb:ad:37:cb:61:52:24:b6:23:23:3b:1a:57:6a:b0:
ca:1c:a9:38:48:23:84:78:85:31:09:4c:f4:80:33:98:f1:a3:
70:24:c3:5c:e2:4e:99:7e:a4:12:de:d1:03:9f:ea:5e:89:74:
7a:f5:a8:ca:e3:9d:44:d4:3d:66:a2:aa:72:16:eb:00:ef:0f:
41:29:13:82:2f:98:28:79:9c:51:fd:60:86:2d:71:8a:9d:26:
55:cb:77:65:ef:c7:79:dd:52:18:c7:eb:91:7e:fb:4a:f4:e4:
ff:f3:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:10 2026 by rpki-client