This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier: OYBe/0GSptQSEKoZb+oW5DuMgWznz28RyTPRDyjm+cY=
Subject key identifier: 09:45:32:C0:D1:54:E5:ED:09:39:11:71:94:B2:71:68:2D:DA:52:23
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number: 4A
Signing time: Sat 17 Jan 2026 06:24:19 +0000
Manifest this update: Sat 17 Jan 2026 06:24:18 +0000
Manifest next update: Sat 24 Jan 2026 06:24:18 +0000
Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: wtgEVOKSABkBvJUDapD+dvusJcaB8dcmbChItC/QLpk=)
2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: vQDu9wcINkcPzWdSO/DWuCCS5k2RLBjzO/0TA4C/YFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Validity
Not Before: Jan 17 06:24:18 2026 GMT
Not After : Jan 24 06:24:18 2026 GMT
Subject: CN=696b2b13-0a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:57:db:97:c4:6a:06:43:32:3f:5a:9e:df:07:
19:95:f6:b4:de:46:8a:61:18:0b:49:72:fa:a5:c2:
e8:b6:19:ec:cb:6e:47:ec:b9:c1:88:e4:54:82:cc:
0b:3a:9a:ec:c5:b0:48:3b:ba:c6:3f:7a:53:a7:a1:
e6:e7:e1:5e:91:14:e9:3f:8a:50:9d:71:70:ef:91:
c2:51:98:bf:07:d2:3e:5d:d3:50:b9:58:49:a0:b9:
cc:a9:3d:16:12:22:86:11:6d:b2:0f:47:b2:88:3d:
dd:bc:8a:a6:ea:ac:09:b9:3e:f4:d6:d3:08:8c:6f:
de:91:2c:10:14:c0:f9:fb:7d:57:ef:e9:26:e9:45:
3f:c2:f9:1d:75:00:63:9c:97:41:79:90:f0:dc:cf:
21:0a:5d:23:85:37:bf:ca:02:df:77:6c:46:a5:a4:
72:2b:c7:d3:a9:39:f8:bb:12:60:70:8f:37:87:3b:
03:f8:5b:c4:48:2c:e7:3a:ed:3e:9b:0a:d9:6b:29:
ea:8c:3c:3f:1d:cf:6c:c0:1f:cc:3b:a4:69:17:33:
e9:6c:8d:48:cc:47:42:fd:d7:2b:4d:10:9b:09:1a:
70:40:6a:cd:a2:93:96:91:72:72:6e:fd:fb:cf:9d:
1f:c5:81:f9:53:e0:59:ce:69:f0:da:9b:38:f0:3f:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:32:C0:D1:54:E5:ED:09:39:11:71:94:B2:71:68:2D:DA:52:23
X509v3 Authority Key Identifier:
keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:6a:c5:a0:1f:87:16:cd:68:d4:d3:d0:03:6c:cf:1e:70:
ef:1f:67:96:e9:d5:56:7c:e9:2d:e0:36:6b:ca:0d:98:8d:4b:
81:97:7a:e7:42:be:9a:b6:ae:5f:67:ea:b9:ea:13:14:fa:ba:
bf:8c:a2:48:8e:da:b1:6e:90:28:57:ea:60:94:c3:70:d4:40:
66:da:73:f6:e6:4e:cd:4b:13:ee:eb:41:7b:74:23:77:c8:60:
00:92:bf:ab:b8:8e:4b:37:1c:fa:b3:88:b8:6e:3e:bd:db:16:
c4:f9:30:7f:a4:5a:69:43:1f:e8:5a:11:cf:2f:24:8a:f8:47:
2e:1f:60:4c:41:85:52:33:75:e2:5f:85:e7:20:c1:d1:31:cb:
b0:aa:19:78:8c:e4:09:1a:79:37:8a:c4:e9:43:bf:fc:5c:fe:
32:e2:94:56:39:f3:f7:38:25:2a:6d:ec:21:b3:32:dd:3e:4e:
8b:2b:1b:06:b9:9b:d8:8e:2a:61:bc:18:58:99:ba:19:b1:c2:
3b:f7:75:9f:b3:fa:45:5a:f9:1d:1a:4d:1c:9e:a8:cc:9c:d1:
85:eb:d8:40:15:36:de:67:99:85:1f:17:a6:7e:62:08:70:91:
1c:8e:d9:3b:9f:bd:dc:9e:78:cb:1c:6a:2d:b3:5a:ac:1f:a8:
9e:f9:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:37 2026 by rpki-client