This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier: AvLH6+wrKiZim6SGF3o2wPzZIzyKSpMd81RqVhNjp5Y=
Subject key identifier: D2:3D:4A:59:E6:C1:E7:74:9F:E9:9E:49:AA:0A:A9:CF:B1:A2:00:0F
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial: 2A94
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number: 2A94
Signing time: Tue 20 Jan 2026 15:26:29 +0000
Manifest this update: Tue 20 Jan 2026 15:26:28 +0000
Manifest next update: Tue 27 Jan 2026 15:26:28 +0000
Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: LxAlNqFPkfceY01kT/bktTox4s1UYoxotGwVH2X8T+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10900 (0x2a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Validity
Not Before: Jan 20 15:26:28 2026 GMT
Not After : Jan 27 15:26:28 2026 GMT
Subject: CN=696f9ea4-a8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:76:d0:d6:d5:9b:d0:30:bb:b7:d2:bb:cc:
5c:a7:36:57:1f:7e:c0:7c:65:85:0d:56:5b:ba:ac:
25:8c:b1:75:e7:40:63:54:fd:fa:16:49:8a:a0:f3:
26:17:d5:5d:6e:49:f1:08:99:3f:60:ce:b9:6c:fe:
50:74:b5:fe:86:9a:44:a2:93:44:be:8f:f8:c6:30:
56:d9:f1:e4:a8:e7:18:48:f9:58:90:e8:19:28:97:
58:32:d7:d5:aa:25:74:2e:15:26:b6:df:8f:67:50:
83:4e:10:23:fa:c0:79:cd:a8:d9:0f:db:43:7f:51:
2f:3e:3f:7b:d6:30:71:16:8d:ef:f2:c0:f4:7d:db:
47:35:d6:04:8c:51:1b:1c:c8:73:c1:ec:dc:f1:7f:
fa:f1:f7:b5:f5:77:82:0e:68:44:35:ab:03:e1:f7:
c0:18:78:71:9e:52:d1:98:56:03:56:cf:1a:88:53:
9d:8a:3a:6b:18:20:ff:c7:a2:cf:55:62:d6:71:30:
ed:06:f4:81:f0:79:9d:7e:76:91:41:7b:c4:8f:41:
a3:88:ed:ae:90:a9:84:77:35:0e:7a:e4:b1:be:45:
f7:77:21:25:aa:cf:72:db:a0:75:fb:d8:d8:a5:39:
31:e8:05:fb:bc:8a:1b:2f:16:3e:2b:0a:ca:a1:da:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:4A:59:E6:C1:E7:74:9F:E9:9E:49:AA:0A:A9:CF:B1:A2:00:0F
X509v3 Authority Key Identifier:
keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:97:cf:06:09:0b:d3:a2:05:89:35:13:77:5b:c0:e5:ac:b5:
3b:39:1b:fe:09:66:c6:60:ac:7d:68:63:44:90:9c:7a:26:bd:
d5:2e:5c:8b:6a:be:f7:29:77:50:45:b9:ee:2d:34:aa:4a:d3:
1d:6f:f8:e6:a7:57:a6:f5:18:ce:6e:97:58:4d:d0:69:6b:ef:
c0:c4:60:53:34:29:68:35:29:5e:56:3a:a9:42:a2:9a:16:88:
6d:1a:cf:79:30:67:fa:30:d3:73:2f:23:8e:38:8e:81:32:c3:
94:d3:59:8b:ef:60:fd:51:92:1f:ce:26:2f:89:6e:d6:24:86:
4a:ed:e4:fb:7b:b8:6d:5b:1d:76:63:19:8d:57:40:96:9b:01:
98:bb:05:5e:54:93:cd:80:6a:99:ec:6e:25:e2:d8:9d:ec:71:
82:e8:6a:62:19:ad:23:32:91:03:72:99:dd:9c:6d:1e:d5:9c:
c2:90:cd:be:9c:73:69:68:b1:81:31:9e:2c:0b:44:ca:0b:0c:
b0:fa:98:2a:b6:ec:2c:91:58:64:51:d1:1b:21:98:27:02:f4:
48:25:d5:cf:d9:59:6f:91:1d:52:ac:fb:fe:90:84:d1:51:ed:
7f:73:5e:20:d0:c9:8a:19:e2:42:89:5a:91:9f:62:aa:45:37:
0f:11:62:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB
QjE1NzVCQzMwHhcNMjYwMTIwMTUyNjI4WhcNMjYwMTI3MTUyNjI4WjAYMRYwFAYD
VQQDDA02OTZmOWVhNC1hOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNJ20NbVm9Awu7fSu8xcpzZXH37AfGWFDVZbuqwljLF150BjVP36FkmKoPMm
F9VdbknxCJk/YM65bP5QdLX+hppEopNEvo/4xjBW2fHkqOcYSPlYkOgZKJdYMtfV
qiV0LhUmtt+PZ1CDThAj+sB5zajZD9tDf1EvPj971jBxFo3v8sD0fdtHNdYEjFEb
HMhzwezc8X/68fe19XeCDmhENasD4ffAGHhxnlLRmFYDVs8aiFOdijprGCD/x6LP
VWLWcTDtBvSB8HmdfnaRQXvEj0GjiO2ukKmEdzUOeuSxvkX3dyElqs9y26B1+9jY
pTkx6AX7vIobLxY+KwrKodoC7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI9Slnm
wed0n+meSaoKqc+xogAPMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q
dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkl88GCQvTogWJNRN3W8DlrLU7ORv+CWbGYKx9aGNEkJx6Jr3VLlyL
ar73KXdQRbnuLTSqStMdb/jmp1em9RjObpdYTdBpa+/AxGBTNCloNSleVjqpQqKa
FohtGs95MGf6MNNzLyOOOI6BMsOU01mL72D9UZIfziYviW7WJIZK7eT7e7htWx12
YxmNV0CWmwGYuwVeVJPNgGqZ7G4l4tid7HGC6GpiGa0jMpEDcpndnG0e1ZzCkM2+
nHNpaLGBMZ4sC0TKCwyw+pgqtuwskVhkUdEbIZgnAvRIJdXP2VlvkR1SrPv+kITR
Ue1/c14g0MmKGeJCiVqRn2KqRTcPEWJl
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:22 2026 by rpki-client