This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier: 0bMKfXkeVdAzU4Q86UHSM2tWRjoU83aADfMRb1b/W6c=
Subject key identifier: E1:BC:66:0F:5D:AE:E7:22:7A:EB:8A:4A:B5:47:F8:CF:1C:7B:81:EE
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number: 08BB
Signing time: Sat 10 Jan 2026 19:51:56 +0000
Manifest this update: Sat 10 Jan 2026 19:51:56 +0000
Manifest next update: Sat 17 Jan 2026 19:51:56 +0000
Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: sn5kl6YO9+TYP4g5v5uHxaKCBs27ucTAo1dp03yBuKk=)
2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: YDlJJK3r3QY2jge7AOb3CYnCW+wC8nrMDrmyeODCDi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 19:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Validity
Not Before: Jan 10 19:51:56 2026 GMT
Not After : Jan 17 19:51:56 2026 GMT
Subject: CN=6962addc-8419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:d3:f4:a8:1a:6c:88:58:61:6d:16:a1:d0:
d4:8c:fc:25:03:78:bf:2f:53:f0:9f:e1:b8:6b:c2:
26:ce:e6:b9:63:87:fd:ca:31:47:14:c6:d3:ad:2f:
ee:c2:03:cd:18:a3:9f:65:e8:12:62:19:96:39:5a:
6f:89:d1:c9:a5:98:17:ab:30:8c:8a:b4:a5:99:b4:
a9:b3:9b:1a:97:24:66:2d:a3:86:2f:48:83:99:3b:
51:8f:94:67:81:81:d9:c2:c6:8e:70:20:c9:56:32:
b2:d8:af:c6:34:9a:05:a6:da:18:1a:36:13:24:47:
8b:e6:87:26:c9:d8:f5:a7:ee:b9:06:2a:64:ab:eb:
e5:8e:c5:fd:f5:f1:3e:b7:19:de:42:ae:af:a6:89:
04:28:d6:07:d2:57:e6:86:94:7f:94:df:3a:47:41:
36:3f:59:57:a5:83:9a:1d:9e:2c:de:ca:ce:60:6d:
e0:1f:0c:f0:f6:1f:5b:9d:db:cb:c4:d2:3d:70:4b:
86:d9:79:16:a7:26:99:24:0a:eb:c9:2d:e8:b9:8a:
e1:af:ad:77:8e:bd:7f:bf:ca:f0:e7:2e:43:3b:43:
c1:fa:3f:41:02:7a:5f:51:21:d5:e4:71:9a:40:78:
0b:c3:fb:c4:fc:22:4d:64:bd:8e:c9:bd:d7:02:48:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:66:0F:5D:AE:E7:22:7A:EB:8A:4A:B5:47:F8:CF:1C:7B:81:EE
X509v3 Authority Key Identifier:
keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:3a:49:2e:ff:a0:51:77:3f:a7:56:b1:22:93:7a:4b:7f:
ef:47:f9:d3:91:ba:a9:b2:0a:1b:e9:bc:4b:f4:d4:d5:56:c2:
44:92:b3:c8:05:a0:d0:05:92:69:a6:7b:be:3d:79:37:ae:5e:
71:90:96:78:dc:2d:37:27:7b:d1:18:96:31:8c:f9:4a:24:a2:
3a:a1:7e:a8:54:62:cf:59:e3:48:19:0d:0a:3a:1d:57:d4:15:
84:8b:9e:83:66:af:a5:ad:95:3c:ca:d6:e8:d0:89:42:70:41:
ce:ab:75:7e:23:5a:25:6a:e6:66:44:44:42:58:b5:48:ea:8c:
eb:f1:5d:d0:fb:0a:f4:50:a9:69:ac:7a:1f:9c:39:0f:b7:93:
28:86:5a:45:6c:4c:93:29:46:f2:7f:36:d1:6d:4a:b9:d3:4f:
bf:83:d6:52:8d:76:da:3b:28:15:b4:d3:46:23:23:17:90:1e:
79:8d:24:00:88:95:e8:31:4c:d2:5e:9a:9e:0c:7e:27:45:47:
50:c4:7e:90:74:88:af:6b:42:c5:7f:37:c9:f5:31:7e:41:44:
21:76:cd:46:31:e0:dd:d0:0d:a1:ca:a7:4d:3b:3c:9f:81:ba:
ba:f4:df:7c:56:88:ec:49:60:49:97:be:bd:d1:df:c3:34:c1:
c1:e3:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:48:49 2026 by rpki-client