This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier: DBUp7jA09JbcOPexmWF/tzIgIWwLSh8X3PjCJ+2U1pk=
Subject key identifier: BE:06:78:63:60:0D:31:D4:0B:0D:61:FE:BD:B3:CD:74:64:99:7E:31
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number: 16
Signing time: Sat 17 Jan 2026 06:55:50 +0000
Manifest this update: Sat 17 Jan 2026 06:55:49 +0000
Manifest next update: Sat 24 Jan 2026 06:55:49 +0000
Files and hashes: 1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: XaO97NfH5PxW8Q07Tc7NdIP7pr5WS0f4tCLpRjORb9A=)
2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: JplNXQO2Wx5ZVsUnY8QzEKP+B0R8iAE4R1iut1PwRdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Validity
Not Before: Jan 17 06:55:49 2026 GMT
Not After : Jan 24 06:55:49 2026 GMT
Subject: CN=696b3276-c0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:b9:47:cb:bb:d5:63:84:db:47:ce:52:02:
19:55:55:96:c7:a7:0c:20:ad:21:f7:b5:26:c8:f1:
ad:de:a6:dd:d6:30:fd:7d:a3:95:12:01:2c:80:ac:
13:4d:3f:e1:cf:03:c3:6c:e6:4c:e7:3f:e2:53:cf:
de:93:84:8b:7f:97:00:96:cf:21:a5:e6:32:65:3b:
10:3d:72:d8:0e:38:09:c5:c6:92:89:24:ee:85:b7:
de:c9:c8:24:43:9b:45:6b:64:14:58:5f:e5:85:ad:
e6:0c:8e:35:71:10:89:97:3c:ca:83:87:a1:d2:98:
7b:3d:bc:84:ab:a9:dc:09:20:42:9e:71:d2:b1:4e:
11:d1:ac:90:a2:36:02:5e:81:41:cc:0e:85:1c:ba:
a0:4a:6a:e8:46:5f:da:6e:2f:0b:2f:ff:d4:03:54:
6c:d8:81:46:44:8f:32:e2:f2:ab:55:37:f5:dd:09:
bc:7c:c8:61:e3:42:7e:54:c9:00:0d:f0:46:46:dc:
c1:a9:3a:62:82:13:2c:9c:b8:a8:4c:a5:9a:1c:6a:
9f:06:61:49:6c:7d:57:15:6d:92:7e:d8:98:e3:4f:
2c:46:fe:b3:57:fe:d3:6e:14:62:de:5f:a3:f0:ae:
16:7b:d2:34:e4:82:18:57:05:43:88:5d:b2:a3:0b:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:78:63:60:0D:31:D4:0B:0D:61:FE:BD:B3:CD:74:64:99:7E:31
X509v3 Authority Key Identifier:
keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b1:fa:e1:f9:88:f8:0c:2e:85:00:65:2d:51:aa:ad:5d:a3:
1f:e5:ab:19:65:56:5b:ae:dc:1d:26:bc:e1:8c:12:47:4f:68:
35:79:b4:24:ba:21:3e:be:d5:12:58:36:f6:f6:19:a2:aa:89:
98:4d:e2:ef:04:20:a3:e9:13:94:3f:1d:60:b7:82:b4:0a:7d:
da:68:63:52:6e:15:78:3f:5d:36:01:66:46:2b:39:53:bf:5c:
9e:f2:b8:29:67:14:09:ae:86:95:f9:7a:72:a8:cd:80:f6:e9:
bf:a8:19:eb:c5:2c:db:c7:26:83:af:8b:a9:bf:ab:cc:57:90:
a2:e7:71:91:fb:01:84:7e:1e:04:4b:38:a8:4d:c0:2f:d0:bd:
02:2e:cf:61:ef:8f:3e:d9:88:6f:f6:14:20:84:fd:20:1b:a9:
6c:25:1d:eb:c0:be:65:27:28:a9:6f:8c:cd:10:f2:16:a2:23:
3c:a6:f6:1e:e1:67:d3:73:29:d6:8c:fe:3f:3c:05:d3:b0:05:
0b:f3:5d:fe:b7:f9:7b:c8:e6:49:37:60:ff:74:50:86:2f:2c:
19:f0:23:4c:f1:9e:e3:ea:9c:b2:0e:cb:66:ca:d9:60:86:b4:
cb:d8:2c:4f:1f:a2:f4:ab:4b:30:9c:6b:2e:19:75:f4:88:a4:
a1:14:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:12:53 2026 by rpki-client