This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: 3PajfI9PmCGcKKa8a8h5qBvp5lbzhYY32JAzv6olT2c=
Subject key identifier: 78:0D:A3:D8:6B:F2:D8:C8:FB:07:DB:3B:00:66:29:D9:9D:48:DD:0E
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 010A
Signing time: Sat 17 Jan 2026 04:09:20 +0000
Manifest this update: Sat 17 Jan 2026 04:09:19 +0000
Manifest next update: Sat 24 Jan 2026 04:09:19 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: FZHjKUfsCWP3u945zbKl/RNJ5YsKZOH0W1MTV6TfPq0=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: TNYuuYwAvBi+/pUa2qwV1wTrBwuN862kPVZbu/phpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Jan 17 04:09:19 2026 GMT
Not After : Jan 24 04:09:19 2026 GMT
Subject: CN=696b0b6f-c6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:69:e8:77:10:a7:ec:b6:70:6a:99:ff:11:10:
f3:b0:b9:1b:2d:2b:10:74:4d:dd:0c:d4:11:2d:b5:
74:ca:d0:4c:80:64:db:9c:88:9f:90:3c:30:26:1c:
48:85:16:63:5c:79:e5:df:2a:73:e7:2c:43:56:82:
62:4b:39:29:57:6f:92:00:e3:8a:ed:0c:f2:0f:97:
3a:97:03:03:f9:b7:f5:62:cc:6a:a1:20:97:e3:8a:
e1:93:36:e6:73:b2:ec:25:7e:30:02:36:0e:1f:36:
b9:8c:06:80:d4:17:fa:95:ea:f6:67:ef:30:0a:cb:
c1:5b:57:21:c5:8d:52:3f:fb:33:4e:da:8b:20:6c:
c3:c7:b1:8a:6f:a2:95:b2:1c:08:49:76:96:0d:72:
d5:5a:28:52:0f:0f:7b:4d:74:dc:d4:f7:c5:e3:5d:
d1:82:77:38:77:1e:63:16:de:a1:7d:6b:22:2c:fc:
d6:0e:4b:78:67:79:08:24:a5:ed:73:45:55:38:c3:
16:5a:2a:03:a1:b9:41:a6:8d:9b:83:3e:66:aa:12:
67:5b:29:08:c9:34:16:05:df:3a:e2:6d:0e:4c:6e:
93:e6:03:ae:30:39:64:00:2e:b8:9a:19:11:97:ac:
f0:6a:a1:43:8e:6d:4b:5b:0c:6a:3e:3b:ce:1f:0f:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:A3:D8:6B:F2:D8:C8:FB:07:DB:3B:00:66:29:D9:9D:48:DD:0E
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:d7:d9:ce:39:5c:59:d2:89:c3:25:c9:16:bc:0a:c9:fa:
25:74:40:1b:58:87:76:a7:40:28:40:b2:82:11:f9:1c:ed:4e:
55:fc:3c:ba:2b:b5:70:d7:24:95:f2:2d:10:f3:3f:48:dc:88:
90:ba:1d:37:68:d6:9f:e6:7c:08:c8:db:76:5c:95:6f:ca:82:
14:3f:66:b4:cd:78:a3:12:1f:3a:ea:3f:e2:f7:f8:c5:67:2e:
68:3c:f1:6b:49:4e:ff:ec:d3:3d:56:a8:28:dd:49:ca:f5:a2:
6e:47:eb:78:2f:9c:1a:7c:67:7d:c1:22:f9:90:ea:c7:f4:b0:
ae:91:66:33:cb:e6:09:f2:4e:78:ab:f6:7d:53:31:28:7f:e5:
a6:d7:63:e3:21:42:78:d2:1b:39:e6:67:8d:b0:07:1e:66:57:
48:5d:bb:18:3a:5e:02:e7:ee:fc:96:18:87:56:1b:ef:8d:20:
26:35:d8:a1:4d:89:af:b8:34:a4:4c:52:5e:66:26:2a:4c:46:
21:13:2b:b8:d5:8e:37:12:e6:f5:dd:01:6d:d2:8c:44:dc:1c:
c9:62:fd:ec:04:95:52:72:d2:2b:79:2d:55:83:7d:fe:9c:cd:
30:11:93:70:61:54:36:4a:32:0f:0b:4b:78:2c:7a:fa:d7:28:
1b:1b:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:34 2026 by rpki-client