This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json)
Hash identifier: XP5CHyTSCVUNkNmMIghkeQozXDsELKKtKxc2YtGtMXs=
Subject key identifier: 06:36:84:8A:BA:F1:CE:17:2B:95:20:A8:3C:38:B2:E0:99:FF:5D:DE
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
Manifest number: 0864
Signing time: Sat 10 Jan 2026 20:06:43 +0000
Manifest this update: Sat 10 Jan 2026 20:06:42 +0000
Manifest next update: Sat 17 Jan 2026 20:06:42 +0000
Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: NCs5FpAs7jlhIPblu6ULyIC4MFn8nPwpWE3LrfMegkc=)
2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: TsqETkD2u8/g/tvy6c4rcdVrAda/jhvYOMUCzR3OzIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 20:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Validity
Not Before: Jan 10 20:06:42 2026 GMT
Not After : Jan 17 20:06:42 2026 GMT
Subject: CN=6962b153-f0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:e4:d3:9a:a2:07:7c:26:de:2b:ee:aa:85:
d7:d9:36:00:78:a8:53:b7:c7:d1:6c:1d:dd:de:ac:
f8:b2:87:d7:09:4d:c4:25:66:53:2d:6f:a6:ac:50:
5a:e3:7a:37:1d:96:07:62:ac:b3:a8:6e:b3:86:f7:
80:50:83:88:f1:0c:69:39:32:02:8d:09:75:28:34:
a2:75:79:5e:17:45:45:a5:c0:ff:03:05:68:8e:28:
ab:61:e2:d3:75:4d:0e:56:5d:76:56:58:cb:be:1d:
f8:db:c9:2e:fb:f4:5c:50:7b:37:c7:a9:80:1d:a9:
4b:d6:56:18:21:9e:aa:d2:8f:53:9c:6a:ce:c2:3b:
18:65:b8:d8:6b:51:4a:4a:2d:e8:d2:5a:9f:49:eb:
d9:a3:55:9e:13:24:58:4e:37:87:df:f8:7a:ba:eb:
32:19:04:cd:0e:8b:96:90:0f:e8:cc:9a:05:79:56:
b2:a5:f4:37:be:7b:21:96:dd:bb:08:5c:d1:7b:f2:
98:19:16:f7:38:4b:5b:36:87:13:de:41:52:a3:84:
52:3d:e7:0b:44:3b:c9:21:d4:6a:aa:94:76:d7:e9:
72:86:63:b3:5c:4c:27:cd:d6:10:86:d6:f7:de:f1:
ab:58:fb:73:ca:7e:aa:5c:b7:c3:05:05:79:eb:23:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:84:8A:BA:F1:CE:17:2B:95:20:A8:3C:38:B2:E0:99:FF:5D:DE
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:4e:bc:6b:c7:8a:b8:3d:f5:30:a8:08:19:ac:f0:c9:8a:
14:02:16:d9:68:01:d2:a3:30:3d:66:62:5f:73:9b:6c:cc:d5:
16:2d:38:11:25:9c:54:3d:19:06:4e:5d:b8:f4:51:47:42:bf:
1c:32:5a:43:b3:a4:ce:a0:b1:82:b5:f9:ad:42:6d:2f:63:c5:
d0:1f:75:40:8d:27:f6:32:83:3e:81:8d:44:0d:17:7e:7b:ac:
02:d7:87:22:64:02:dd:b5:a6:dc:2a:17:4c:2b:1a:c9:93:d4:
e7:47:64:62:bd:89:96:4d:c2:b1:76:d0:55:62:7f:a3:ce:9a:
33:14:b9:17:fd:c5:4c:5a:bb:a1:4e:17:80:dc:b3:49:9e:26:
00:8a:c3:7c:19:69:53:d8:7f:df:77:2d:51:d1:c7:07:c4:16:
9a:06:5a:97:3a:40:1c:6b:df:3c:90:a1:d3:8d:02:92:f4:ad:
3b:d8:20:ea:6f:d7:43:db:20:51:90:71:04:ad:2f:42:0b:f9:
c3:66:1c:31:fc:4c:52:d2:cc:d0:f1:74:4b:b6:ff:45:1a:47:
2a:8e:ed:2a:44:2f:0c:40:44:8b:d8:0b:72:58:78:21:1b:2d:
72:05:de:14:38:9a:ee:0a:48:90:d0:0b:9f:f7:b3:dc:95:89:
bb:60:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:07:05 2026 by rpki-client