This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json)
Hash identifier: EkSU0tHURdl3bqdfOYEuu8Cv9hdUKuG1LEUNo4e9f8w=
Subject key identifier: A5:DC:DF:BD:62:61:8A:D9:03:03:02:2A:8F:64:63:76:9E:7B:76:5E
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
Manifest number: 0536
Signing time: Sat 10 Jan 2026 22:44:00 +0000
Manifest this update: Sat 10 Jan 2026 22:44:00 +0000
Manifest next update: Sat 17 Jan 2026 22:44:00 +0000
Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: 8z0/8bSodxAzkkGA84aXsMKfY3m58BsBE8NfOzh9S5o=)
2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: 3GuUWWSw68MOlVK92wSYlp+NhvzxWsoKxH6173siIPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 22:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Jan 10 22:44:00 2026 GMT
Not After : Jan 17 22:44:00 2026 GMT
Subject: CN=6962d630-04df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:af:69:51:1b:40:16:b2:57:0e:47:65:b7:
47:4a:2c:30:b7:cf:ab:34:50:12:43:e8:64:8a:cf:
df:f0:5c:16:d2:09:3f:bc:ea:ae:60:ff:2f:ed:31:
8b:89:68:db:4a:e5:d7:9b:07:93:ec:f3:d3:e5:81:
11:fc:49:30:fa:36:83:96:c6:01:de:1f:28:48:9f:
d4:66:a3:cc:80:03:09:8c:d5:c0:a6:b8:82:fb:3c:
db:0e:c4:6c:3f:f3:7a:7e:4b:b8:64:5d:ce:f9:58:
25:60:89:25:33:8a:74:d4:91:8c:bd:e2:c7:92:87:
07:02:80:b5:b3:f6:87:6d:9f:d7:59:21:4c:38:33:
55:8b:89:a7:bd:78:9d:ac:c5:9a:5d:8b:97:57:63:
cb:30:df:94:77:37:5c:7c:4e:eb:49:91:e1:7c:29:
1f:b1:9b:b3:24:39:5b:de:2b:c1:e6:fd:33:44:f4:
4e:a2:e6:3f:47:e4:72:1c:5d:ab:40:06:07:37:a2:
2b:de:86:e7:89:5c:1d:d6:d2:c4:57:45:fa:f4:cf:
24:0b:10:31:db:82:88:45:8c:68:56:d3:38:6f:5e:
48:fe:b5:bf:10:0c:fc:5a:48:6b:47:de:de:9d:ba:
c5:a0:88:5a:31:9f:d1:71:58:be:66:7d:9a:8d:00:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:DF:BD:62:61:8A:D9:03:03:02:2A:8F:64:63:76:9E:7B:76:5E
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:f1:4a:e2:d1:22:40:a5:4f:1c:d8:6e:b0:e3:16:84:ab:
8c:55:b9:99:a7:ec:39:fe:c6:75:e4:a1:ed:7a:e6:2a:1f:84:
d6:51:e9:90:fe:7c:67:a8:d3:07:95:a0:ad:78:49:f5:a7:f6:
b7:b0:39:74:8f:64:56:51:91:0d:02:4b:64:de:77:a8:68:30:
40:cb:ec:93:88:23:bb:1f:9e:c2:3e:ab:be:d4:c6:e3:89:1a:
1c:97:95:2e:f8:f9:a0:22:7e:cb:22:47:02:5f:f5:8a:c1:50:
f1:d9:12:c5:9f:67:54:5f:fe:a7:38:80:e0:95:2c:d7:1a:98:
a0:3f:70:cf:38:ea:36:cd:d2:fe:67:bb:7d:a6:14:5c:8d:13:
29:49:5c:62:b9:36:9e:52:6f:87:1a:1b:9a:9f:40:54:62:46:
a4:12:fe:51:4a:9a:be:00:37:6e:10:70:2b:41:67:28:91:86:
a7:3a:27:bd:e1:89:92:be:50:a3:25:cf:ed:22:92:0a:d9:15:
61:b5:c3:18:4b:7d:4b:76:25:63:12:92:32:21:6d:93:bb:8c:
b1:83:72:20:b3:b8:30:f3:d2:9d:ad:04:dc:08:7d:01:d3:cd:
da:4d:a9:d6:f2:7a:f7:17:e9:81:d2:13:ee:2f:d7:97:26:49:
64:ae:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:33:50 2026 by rpki-client