This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier: sOO4TLRtWFX1sfhFeH2WohTdj4F8zSXV7ZiVIAAfAc0=
Subject key identifier: 26:52:11:75:14:7A:25:38:7B:5F:1A:26:DF:7D:09:64:A2:37:D5:95
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 30C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number: 3094
Signing time: Mon 12 Jan 2026 15:20:34 +0000
Manifest this update: Mon 12 Jan 2026 15:20:33 +0000
Manifest next update: Mon 19 Jan 2026 15:20:33 +0000
Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: Rm1Aa4EFg10EYKhjyBL/GQyGsFmVGhn6F9lmu6wxnnw=)
2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 15:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12485 (0x30c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Jan 12 15:20:33 2026 GMT
Not After : Jan 19 15:20:33 2026 GMT
Subject: CN=69651142-7188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:fc:2e:3c:0c:b2:ba:c1:69:dc:d2:01:cd:
dd:c7:6c:f8:ca:ae:a6:d2:9b:1e:aa:1d:56:39:39:
88:89:40:75:32:d8:e8:d1:90:57:64:5e:b2:09:6b:
43:9b:8a:b2:f7:7a:0c:78:c8:fc:7f:b7:57:13:e6:
a4:b4:a7:80:3b:5b:26:1e:fc:fa:63:5c:52:03:17:
8a:ef:2a:93:01:ab:8d:cb:a3:1e:07:04:69:b9:d4:
09:31:13:b4:f6:87:f3:f1:a3:71:f2:88:48:06:be:
45:05:8d:e3:af:13:6d:5d:bc:29:c3:38:da:f9:53:
01:54:53:6b:bd:3f:53:ee:8e:54:03:c4:5e:54:7c:
2a:e6:b2:83:4e:88:9a:f2:c7:0c:28:ba:50:75:83:
30:8c:ba:16:8b:a3:ec:f4:a9:57:ae:54:91:9f:71:
e9:bf:be:c1:6b:2c:c7:ea:a3:4c:a7:57:3e:02:75:
bd:32:8b:e3:62:7a:06:82:1c:31:4d:b9:a3:ec:6b:
7f:a1:1c:0f:16:70:32:ac:8d:5d:e1:c5:84:30:6e:
eb:c5:99:5b:44:9d:bb:1b:4a:c3:dd:78:e4:0d:9a:
2d:da:7a:9a:23:9b:f6:a2:92:0d:8a:ae:58:c1:8d:
86:13:42:f2:61:43:57:c5:72:78:32:2e:e6:6b:09:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:11:75:14:7A:25:38:7B:5F:1A:26:DF:7D:09:64:A2:37:D5:95
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:25:11:96:7e:1b:03:5f:f8:bb:7e:7c:e7:cb:a3:f6:e0:
4c:81:9b:9d:96:2a:de:52:bb:06:1c:4f:35:85:bf:66:9d:4e:
a9:07:57:71:a3:3e:c3:cb:43:36:3a:03:3a:7c:76:c8:a9:43:
91:ab:17:09:55:31:30:4e:9e:25:4f:23:92:78:4d:d5:06:4d:
ba:92:ea:15:35:e4:9d:66:98:95:a1:6e:13:c3:cd:e7:4e:1d:
f1:ae:09:1f:75:60:90:a9:2d:c0:00:18:60:ef:01:19:42:83:
72:bb:b6:bd:21:70:22:52:07:c9:ed:a9:bd:a5:f2:3d:fe:7a:
10:5f:c4:01:7a:7d:69:47:4a:5d:cf:f8:60:fe:a4:9d:63:6b:
cf:a0:6f:b9:15:1e:18:8d:71:18:d0:76:83:29:58:53:b2:96:
48:77:bf:a7:b0:04:08:22:8d:a6:ec:f8:ac:3b:50:fd:e0:82:
44:e1:56:ae:8a:67:21:8b:d2:a0:91:3e:54:89:04:37:7e:74:
f6:3a:4b:d4:99:04:88:03:ac:f2:73:68:88:97:1e:53:44:ec:
34:4d:88:1b:f2:a3:9c:af:f5:b0:84:65:e0:a3:74:41:56:12:
53:25:e2:49:63:aa:66:47:49:a8:0d:34:16:4a:aa:8c:98:f9:
f8:bb:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:01:54 2026 by rpki-client