This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json)
Hash identifier: /Oolp5xxFBIuCnUQn8t5l0oxxp56EWz6kcQy+yJ/CwI=
Subject key identifier: 3B:65:5A:25:99:BF:08:3E:26:D2:70:A3:EB:78:D4:9D:55:D0:B1:2F
Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0
Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
Certificate serial: 06C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
Manifest number: 06B4
Signing time: Mon 02 Feb 2026 21:53:08 +0000
Manifest this update: Mon 02 Feb 2026 21:53:07 +0000
Manifest next update: Mon 09 Feb 2026 21:53:07 +0000
Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: vwGABMWIDq2XL0fXbzrnWA0ZSMEEzVJB1Ad+Z+AMyjo=)
2: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: 8YKXLgBmjt4A8LGKsFF2WvwdLx1gjsD9BpALAirKEFE=)
3: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: b5wzb1d4fSJIKgtQAD4tKlpBK8qMq3pXXUO2EIVFZ4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl
rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 21:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
Validity
Not Before: Feb 2 21:53:07 2026 GMT
Not After : Feb 9 21:53:07 2026 GMT
Subject: CN=69811cc4-2965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:58:8e:a4:7e:93:44:18:fa:50:14:9b:ae:
20:c6:f2:42:d8:f8:56:7b:10:f1:b3:2f:7c:74:c3:
d3:5d:2d:d4:54:64:38:ed:f8:51:79:6b:17:36:ce:
73:11:c8:95:2c:d6:aa:19:c8:6f:21:d6:95:08:15:
d1:86:f8:ab:52:50:48:93:99:f1:16:04:c0:f2:80:
ce:c9:93:2e:6b:59:d4:48:c0:e9:88:4f:53:de:e7:
76:7d:0a:d2:37:38:d1:51:3b:e6:b4:e9:78:0b:8a:
5f:60:c8:cb:a0:63:98:3e:13:be:5a:9c:00:54:1e:
93:1c:e0:c8:f4:b9:9a:0e:b6:5f:4e:c8:9d:88:8f:
7a:07:c7:94:46:ea:02:0b:05:1e:48:6f:ba:e2:d2:
16:18:e7:ca:fb:bf:66:24:5b:93:cd:c8:dd:6a:ec:
db:bf:3b:ce:14:b0:d5:15:bd:24:43:58:05:9e:39:
85:b3:c0:9b:4a:aa:3d:6c:8b:5f:14:00:5a:e9:7e:
a6:51:52:79:7d:07:f2:46:d7:c4:de:9c:56:71:a8:
31:a6:8e:b7:a4:e4:c0:49:34:c8:98:f7:20:5d:b3:
63:3c:8c:52:e3:d5:b2:ca:70:36:34:c0:03:80:a0:
82:f8:53:2e:5f:0e:0b:73:fb:3a:09:1f:83:1f:c4:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:5A:25:99:BF:08:3E:26:D2:70:A3:EB:78:D4:9D:55:D0:B1:2F
X509v3 Authority Key Identifier:
keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:80:88:ee:1a:3f:c7:24:4b:be:2c:da:1a:88:d6:78:39:dd:
ae:08:ad:0a:b1:e8:67:6d:11:eb:59:bf:9e:90:fe:65:19:65:
f8:9e:fe:47:f6:6b:a6:8f:7e:fe:23:ef:79:7e:ee:2e:bc:bb:
e2:2b:a1:02:14:37:0a:87:1c:8d:d7:d7:4a:0c:06:b9:e1:cb:
95:f9:f9:33:13:37:14:47:ed:f1:19:62:8a:4a:6e:ac:68:72:
61:c3:cc:93:e7:94:c1:53:94:9d:70:c8:e2:34:f5:c7:0d:e1:
15:df:ca:63:98:7d:32:e0:22:11:d8:12:ff:da:eb:62:d7:92:
28:45:a2:8e:7d:2f:11:78:cd:5e:1a:df:34:4d:73:ab:66:ee:
e7:b3:fa:cf:a1:72:00:16:86:e3:11:1a:43:2a:fb:aa:93:10:
59:b3:6f:4b:75:57:6b:39:a9:22:b1:90:9d:c0:70:77:d5:65:
44:11:89:a0:4b:a9:9f:89:3d:33:bf:75:f1:c2:49:27:78:b3:
d6:72:86:bf:b5:48:c5:99:35:49:6b:07:4f:93:2a:37:6a:1a:
5f:35:07:f7:1d:b6:67:c0:a2:3c:e2:21:8c:62:e9:6d:0f:74:
46:c1:31:14:af:63:c9:6b:82:a2:4b:18:84:e2:43:59:80:18:
5f:75:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:14 2026 by rpki-client