This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json)
Hash identifier: D70lP2kNmdKXmM5Oa9qGW/Ngbq4txDeR+He6BYrlahY=
Subject key identifier: 6B:12:7E:B3:47:47:F4:6A:70:B4:79:C3:7F:6C:0C:0A:C7:F7:3C:BF
Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
Manifest number: D7
Signing time: Sat 17 Jan 2026 04:48:43 +0000
Manifest this update: Sat 17 Jan 2026 04:48:43 +0000
Manifest next update: Sat 24 Jan 2026 04:48:43 +0000
Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: 6skz+DrtQ4ipLwY53sqyLxt6pO00oXdfMqO+NnSFL8Q=)
2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183
Validity
Not Before: Jan 17 04:48:43 2026 GMT
Not After : Jan 24 04:48:43 2026 GMT
Subject: CN=696b14ab-7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:38:a1:de:2e:f9:22:74:33:ce:8d:bc:77:
86:86:2b:46:be:e7:d2:3c:79:30:c8:32:53:8b:7f:
31:fa:7b:77:b6:98:bc:27:05:1d:11:e5:08:a7:36:
4c:66:fc:df:3e:38:a1:a0:bf:ca:4b:88:fd:1a:0e:
9c:a3:dc:5d:d2:84:ec:fc:be:68:ca:db:29:be:14:
d7:e5:95:f2:06:57:02:10:23:50:a8:d9:9f:fa:d7:
5a:95:bc:b8:ef:a0:b7:fe:f6:c8:b7:1f:e3:e2:e8:
9d:d3:aa:1a:cf:38:ce:ec:ab:87:87:56:75:75:04:
5a:de:a4:00:4c:32:fe:79:7a:64:91:ea:8e:95:66:
00:a6:70:ff:e3:d4:74:75:88:28:71:af:44:a4:0e:
94:c2:f5:58:4a:05:ac:d7:fc:09:24:e3:05:05:39:
39:66:32:a9:6e:4a:57:31:92:4c:92:87:14:ca:a9:
46:fd:7b:2c:d4:a8:08:5e:22:6d:27:b8:d9:3f:c4:
a0:e5:d3:84:32:40:a6:f9:96:84:7a:24:bc:31:4e:
d1:c8:ae:6b:a9:1d:fc:1c:17:c3:60:21:5f:0e:83:
c7:e0:7d:fb:9b:b1:5d:a4:64:bb:4c:52:15:69:2d:
46:49:ef:1d:ac:18:5f:64:0b:b6:bf:6f:f7:bb:99:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:7E:B3:47:47:F4:6A:70:B4:79:C3:7F:6C:0C:0A:C7:F7:3C:BF
X509v3 Authority Key Identifier:
keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:29:4f:b9:23:46:20:ea:fc:22:a3:e5:3c:e4:e9:ab:c7:
a0:3e:5d:aa:02:2c:35:6c:25:5b:12:f7:91:b9:cc:71:b0:75:
11:44:ff:43:05:d7:64:6c:70:ef:1a:d2:7c:4a:cd:bb:48:98:
83:8d:17:7e:2e:8b:94:6e:60:4a:1a:50:35:22:a8:b6:44:f3:
45:46:f3:eb:e4:61:a8:2e:7a:c4:82:01:cc:95:86:68:5a:93:
93:07:98:92:94:02:a5:88:16:fc:0e:31:ba:a0:8d:79:2c:e6:
5a:64:a1:67:11:34:94:f5:cf:8d:e6:55:2d:15:ad:bc:e2:1c:
38:49:97:98:08:c2:32:c9:2d:4a:e3:02:d4:94:8f:d8:99:9c:
69:53:5a:33:8c:1a:0b:45:cb:92:28:19:0a:e1:a8:ed:57:08:
19:11:00:cd:0a:d0:95:ac:96:64:90:dd:d1:34:5e:ac:51:19:
42:42:0d:0d:83:d8:55:ab:96:04:14:8f:c7:a0:61:98:ae:b8:
b3:1e:06:4b:39:bd:6e:7d:9d:cc:f3:23:79:73:09:54:b4:97:
6d:6d:34:3c:5f:0a:8d:94:d0:08:c2:11:85:b6:07:9d:a5:dc:
fe:69:e0:e0:ea:f3:6b:0b:43:16:c5:b2:54:14:02:63:e2:d3:
13:dd:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:01:36 2026 by rpki-client