This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: HcctBvb9dYVK1/ForqXdKH4oQFVJkeJQwB2JifT+nUE=
Subject key identifier: A3:ED:D9:FD:19:29:71:1F:00:4D:D5:40:C0:A8:A1:FF:29:A8:E3:BC
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 0160
Signing time: Wed 07 Jan 2026 03:16:16 +0000
Manifest this update: Wed 07 Jan 2026 03:16:15 +0000
Manifest next update: Wed 14 Jan 2026 03:16:15 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 4yYKRcBz283R4Y9cos4Lk2tju+ic9GzXgvmZFuGnpG4=)
2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=)
3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 03:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Jan 7 03:16:15 2026 GMT
Not After : Jan 14 03:16:15 2026 GMT
Subject: CN=695dd000-068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:1b:b8:d5:b8:79:f5:14:ac:4e:57:7c:b2:
47:67:45:7d:c2:b6:11:fc:37:72:38:ff:c1:62:10:
8c:ca:93:38:b5:4f:4a:9b:15:49:28:41:97:84:8f:
8a:31:27:67:d0:da:76:71:dc:b8:8c:6d:25:2b:a5:
d2:46:fe:ea:fe:5c:e8:bf:04:7c:bc:55:c6:4a:09:
de:4e:93:b5:f3:36:f9:6c:41:a1:98:15:7e:d7:8d:
09:6a:b3:f7:5d:c4:e2:3d:3b:87:f4:31:81:5e:ee:
bb:1d:45:66:7b:ad:39:3b:21:92:ab:06:31:a3:c0:
d4:e0:84:e9:cc:5d:21:67:78:05:c5:fc:44:4a:14:
83:9f:da:3e:7c:5f:dd:69:1d:04:b5:6f:24:10:e1:
dc:91:7a:dc:66:77:a8:7d:4d:09:57:46:b6:75:3c:
02:51:16:c6:63:ad:ae:ec:58:01:75:ac:cf:84:54:
f4:34:1d:35:4e:da:b7:62:01:51:6f:92:c7:92:69:
d5:70:6e:e9:15:f6:35:ec:7d:50:1a:63:c0:34:9e:
8e:0b:43:b0:6b:6a:94:b5:89:ff:f3:b5:a1:19:88:
32:44:ef:97:62:00:34:1e:40:50:24:e1:b4:64:57:
d5:8a:3c:e3:00:05:b5:98:fc:66:1e:25:80:a3:24:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:D9:FD:19:29:71:1F:00:4D:D5:40:C0:A8:A1:FF:29:A8:E3:BC
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:47:75:e4:0f:47:e2:fe:4e:f1:24:0e:e1:5f:e6:6b:94:
d5:38:fd:3e:0c:65:ac:5b:81:34:e8:b1:99:e9:5a:95:b1:ea:
a8:36:69:ee:02:63:d1:6a:01:0a:fc:87:a9:90:9f:4f:96:b1:
60:ae:d8:e2:89:39:dc:b4:21:ee:c2:07:60:2c:72:00:6e:7b:
8f:76:83:9d:28:06:44:58:57:4f:6a:a8:42:ac:cd:92:8b:7a:
cd:a7:be:a9:0d:29:23:6f:c5:99:b5:2d:73:b4:1a:a2:87:64:
42:04:34:1b:34:d9:fd:bf:ba:2c:e7:b0:2f:e3:cb:ad:35:95:
fd:d7:2e:c4:c2:da:1a:1a:62:75:b4:fb:44:1b:56:68:cd:e6:
ab:be:fd:ba:65:f4:bb:a5:85:97:ff:64:fc:f0:e2:19:f0:89:
cf:28:7a:74:4e:b1:42:1c:55:10:4a:9a:2d:6e:9b:77:99:f7:
d4:c4:2d:10:20:49:4c:52:c5:e3:0b:99:81:62:51:3d:03:1d:
7f:38:b0:a9:bd:2c:2a:a4:21:8a:bd:ee:61:54:b2:8f:f9:69:
5f:a4:c4:79:1d:78:80:6d:58:72:a3:b4:73:e9:47:ed:c5:45:
60:45:9f:88:61:32:c4:74:e1:df:6d:83:18:af:14:0e:51:ff:
43:8a:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:56:45 2026 by rpki-client