This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier: Pata2ZsocAsNw3ABhN3zjTN1+wD9GW7yTNRalwRda9U=
Subject key identifier: DD:1A:3D:59:C5:56:B7:E2:EB:40:BF:1C:4C:5C:E7:23:77:A3:90:AA
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number: C0
Signing time: Wed 21 Jan 2026 05:09:29 +0000
Manifest this update: Wed 21 Jan 2026 05:09:28 +0000
Manifest next update: Wed 28 Jan 2026 05:09:28 +0000
Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: r6CdiZklpyH5D11XY35o2e/w/EZJIQOIHTNBooT11HM=)
2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: 7+ZOvaTWijF19fvrYhrbkrijLyfPn8jaNNPKHW6m280=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 05:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Validity
Not Before: Jan 21 05:09:28 2026 GMT
Not After : Jan 28 05:09:28 2026 GMT
Subject: CN=69705f89-f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:90:a1:c0:b5:d1:41:ba:78:e3:c9:24:da:
45:06:7e:64:67:be:15:ad:4a:84:67:09:e3:03:c1:
f9:b6:72:c2:19:c3:63:7e:bc:2c:0c:39:b2:09:af:
df:df:9f:4c:fe:b1:7c:b8:18:2c:ef:8f:84:cd:dc:
07:bd:79:93:6b:12:66:7f:68:37:90:5b:b7:82:9a:
cd:09:ba:03:e2:56:09:b5:4c:e2:fa:47:f5:d4:b0:
29:ab:67:e5:6a:74:36:99:84:af:d4:6c:a2:4c:f8:
56:8a:e6:75:f1:7c:c7:00:db:ea:74:41:4e:88:fb:
5e:73:a8:c2:38:64:a9:26:c6:45:da:8d:18:28:31:
65:36:b1:c6:a7:10:e0:c3:f3:b6:fd:56:39:99:54:
dd:58:11:a7:3d:a0:1a:89:d3:20:11:42:81:0e:d0:
b1:d3:86:b4:ee:a6:7b:77:27:2e:23:f4:9b:60:0b:
72:0e:ac:ca:7d:42:01:fb:54:85:03:96:cc:6c:e1:
05:40:79:3c:5c:de:e6:b7:b0:cf:22:43:ab:07:9a:
95:44:7c:0f:e5:19:48:39:d0:3f:0a:1e:fe:68:e6:
00:49:8c:13:84:8c:dd:42:8e:36:7a:1b:e0:4e:a7:
a5:9b:af:3e:f6:59:10:e4:56:65:d6:89:a5:25:db:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:3D:59:C5:56:B7:E2:EB:40:BF:1C:4C:5C:E7:23:77:A3:90:AA
X509v3 Authority Key Identifier:
keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:0c:58:ea:ac:e9:8e:9c:40:b6:84:fb:93:58:52:a7:55:
d6:7a:be:df:c9:bc:3f:50:18:4d:dc:a5:b8:3a:c9:fc:5e:96:
a0:2e:98:a5:48:d8:0e:7c:e6:22:c3:9a:8a:02:6e:4c:41:56:
07:11:3f:6c:c1:5f:10:b4:45:1e:c4:3b:43:da:c6:3a:29:de:
fa:01:02:78:a8:60:52:b0:75:dd:4e:1f:bf:3f:c7:77:2e:c0:
87:61:42:8a:55:c8:81:bd:ad:f6:e6:0e:b6:6a:a5:1d:df:ce:
3d:1e:a4:ca:3d:0e:05:de:0c:79:64:e5:54:10:15:e1:3d:4e:
61:6f:84:99:6b:7e:a7:45:c0:5c:d7:46:59:f8:6f:66:08:32:
d4:02:ac:5e:b9:42:8f:8a:c5:ea:7c:c2:b7:d5:65:97:3f:e7:
33:fe:1c:91:4d:e5:33:be:b4:6e:d6:8d:a0:6a:a0:33:3d:39:
22:2a:dc:b1:3b:53:a4:19:93:55:9c:f2:87:e7:1f:e3:fe:76:
3b:b1:dd:c8:6b:0d:17:ab:fb:79:37:29:84:19:40:79:e0:12:
4f:09:fa:1e:76:71:6c:75:93:5c:9d:20:ef:c9:46:57:10:4f:
47:e6:ef:80:f0:8e:65:7a:62:0c:96:08:fb:90:57:93:b8:d5:
13:0e:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 00:58:59 2026 by rpki-client