This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: G1lL5w3Q4tyJBrZyRf97lI8m9ZLRY6xEDJN7EbpE8iY=
Subject key identifier: E1:79:D4:85:BB:86:75:E2:B3:20:F9:28:AC:CD:00:92:EA:CA:0C:21
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 03A0
Signing time: Fri 16 Jan 2026 23:54:02 +0000
Manifest this update: Fri 16 Jan 2026 23:54:01 +0000
Manifest next update: Fri 23 Jan 2026 23:54:01 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: dgiD4ZTLzyQK2wQKqop7pSz40ybwxgtzG2IrMkUJmCY=)
2: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=)
3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=)
4: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=)
5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=)
6: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=)
7: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 23:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Jan 16 23:54:01 2026 GMT
Not After : Jan 23 23:54:01 2026 GMT
Subject: CN=696acf9a-0ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:0c:d4:1b:64:63:2f:56:4c:00:09:a3:10:
05:89:2b:9e:ed:7e:19:4b:af:ff:2c:be:4b:6e:00:
00:b9:3b:24:56:68:10:41:19:22:9b:0e:05:52:18:
68:0a:a5:c6:d0:7c:fa:61:5a:4b:b9:a5:b1:8e:20:
76:4a:21:0a:99:7e:a2:75:3f:12:0e:62:06:05:e9:
02:b4:ff:3d:5a:15:03:7c:e1:72:d9:df:c8:4c:82:
b3:e9:ae:ad:d1:db:2a:85:8c:af:1d:72:75:70:f3:
58:47:56:1d:18:de:da:7b:17:ef:ce:2c:35:97:5b:
87:7c:07:02:75:0d:cf:fb:ea:6d:91:1e:ea:48:ef:
02:6a:60:e0:97:a2:b5:12:4e:40:03:cc:e5:a9:50:
81:fd:ef:96:aa:91:be:1e:08:25:8f:3a:24:39:8d:
5c:d4:d0:24:e8:fc:f4:60:8e:91:1c:a1:cd:ed:3f:
e6:d8:ee:71:9c:92:34:2d:6d:ce:39:2e:39:ea:63:
ca:14:a6:20:77:07:a1:cc:ab:67:73:8f:c6:84:c0:
bd:1c:53:0d:fb:7a:08:e1:83:ca:20:37:ac:5e:ac:
a5:83:30:51:30:72:cc:74:f9:0d:b2:50:63:c9:74:
58:0d:30:9c:ca:3a:19:26:09:c1:4f:f6:c6:f4:99:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:79:D4:85:BB:86:75:E2:B3:20:F9:28:AC:CD:00:92:EA:CA:0C:21
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:a7:e1:d5:cd:f7:32:29:a4:8c:ae:d8:f1:0f:fe:22:ec:
a4:cc:4f:65:5a:7b:34:a5:4a:2d:da:af:7d:72:f1:4a:b3:cd:
0f:08:9d:22:d2:ae:ba:f0:d7:ae:66:6c:1e:3a:5a:4b:4b:08:
34:67:b8:d9:f1:2d:50:12:de:75:f6:35:d9:78:99:a7:4b:6b:
0d:42:0d:43:c6:b5:4e:04:aa:e6:97:bc:49:d1:f7:f1:db:3f:
0e:b3:11:30:3c:ca:89:95:5d:39:9b:3b:8f:6d:d3:1b:4a:6c:
88:e5:25:f6:ba:36:da:1c:1a:50:06:3b:f1:18:eb:b7:61:bf:
6a:0f:9f:7b:cb:ef:b5:32:59:45:bf:73:28:c1:e8:35:26:3a:
5b:c6:1d:a6:46:8e:42:b9:15:71:4e:42:35:14:45:0c:04:9c:
de:ad:37:31:f8:bf:85:99:5e:85:ae:d4:82:2b:26:4c:0f:9c:
51:4f:f3:da:80:f1:35:06:db:0f:7d:8a:9c:da:88:65:29:d4:
ec:7e:9b:53:1d:7f:cc:33:6e:89:b6:82:c3:ff:a4:67:a1:c5:
e9:10:22:c7:6f:4e:ca:7b:d7:e9:23:a8:9d:c4:df:63:9c:79:
12:3e:84:87:0f:49:16:53:c8:b5:77:0d:cb:75:a4:00:a9:dc:
f2:46:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:08:56 2026 by rpki-client