This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier: 55O67cgXNyZHMQSDcbC3LVPg+opeNsFw8u/tR/o4Ktg=
Subject key identifier: FE:F3:5B:F5:CC:B4:57:FC:C0:C1:95:B9:66:AA:4A:C9:A4:7A:4B:23
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial: 0E0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number: 0E01
Signing time: Thu 08 Jan 2026 17:31:43 +0000
Manifest this update: Thu 08 Jan 2026 17:31:42 +0000
Manifest next update: Thu 15 Jan 2026 17:31:42 +0000
Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: CUZgkAqhyXWNUtVWRrppgQ0jCLP3uUhrRnQwcrWGW58=)
2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: Pt5AOEwwZxq7lVNTYxsL3f5FIIGV0LQiKBFU4Ct/fFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 17:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3595 (0xe0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Validity
Not Before: Jan 8 17:31:42 2026 GMT
Not After : Jan 15 17:31:42 2026 GMT
Subject: CN=695fe9ff-0c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:5d:26:06:ae:ad:91:16:1a:c2:62:9a:fc:
63:32:97:69:2e:56:09:cc:c8:e8:3f:d1:44:2d:8a:
4c:f2:24:e3:f6:ee:e6:63:86:4c:df:be:5d:e6:87:
b7:01:65:3f:8e:63:e4:e5:c8:c2:b8:cb:6a:3d:f4:
20:a3:2c:a3:b7:94:c5:fb:6d:87:cd:00:cb:9b:52:
5b:5d:a3:b6:48:06:b7:e6:18:f0:cd:2f:53:71:8f:
b3:d6:8a:a1:5f:4e:3d:d9:4e:80:e0:69:d8:18:18:
26:3c:a5:35:f2:aa:52:a1:17:1e:49:e2:dd:d5:93:
3f:86:fc:0f:e4:0a:51:11:63:c4:07:9c:8d:05:24:
2a:a5:19:09:da:35:b9:cc:fb:06:c0:49:6a:52:2b:
e2:10:3b:25:cb:4c:d0:87:d6:f3:13:13:ac:22:65:
7f:45:4a:66:41:56:ef:16:9c:ab:5b:f1:bb:8e:18:
b0:be:19:25:4e:28:12:94:f5:0b:d2:cc:20:9e:37:
37:c5:cb:0b:4a:86:60:f0:69:89:a6:8b:2d:f5:89:
e2:86:db:e8:79:da:11:03:ad:b5:28:ac:19:09:ec:
2e:1d:0a:9a:44:de:52:af:9d:ba:05:63:b8:dc:d4:
a0:37:ee:16:32:58:65:2a:eb:03:3f:8d:c1:0f:07:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:5B:F5:CC:B4:57:FC:C0:C1:95:B9:66:AA:4A:C9:A4:7A:4B:23
X509v3 Authority Key Identifier:
keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:d0:0f:3d:60:39:ac:ac:bf:28:4f:c2:d8:f2:02:d5:f4:
59:cb:58:20:87:b9:38:74:11:fd:cf:ab:d8:e9:60:b8:ac:78:
cd:65:76:fb:67:1e:57:1b:62:c3:22:ce:1b:16:e5:f7:1f:a5:
27:8e:d0:ab:e7:2f:09:6f:b3:4b:c4:5f:ca:c9:87:3e:0e:99:
c3:c0:70:5b:87:fd:77:d5:99:0a:bd:79:c1:89:c1:e5:52:b8:
b0:95:da:15:e5:d7:9c:2b:d0:5a:14:77:17:19:84:85:4f:5d:
72:d8:58:6c:0d:ce:66:5d:29:3c:a2:09:bc:1c:f3:78:82:4c:
29:0f:d4:0f:e6:6d:c6:52:90:41:fa:c9:69:2c:1a:14:e8:ab:
7b:55:78:90:e8:57:42:ed:e0:b4:90:b3:dd:b9:56:de:86:bc:
ad:ca:7e:92:34:a9:06:07:51:df:09:bb:bc:7b:0b:a8:31:15:
50:eb:2b:34:95:4d:e8:72:fb:4e:64:d1:91:4a:a0:6c:be:0d:
23:af:91:27:7a:f4:9c:a8:9f:84:14:ab:1b:3e:60:31:f0:6c:
97:2d:03:01:81:ee:3a:59:96:54:c4:32:ed:a2:93:0f:1d:47:
92:c6:f5:f7:af:86:4c:17:1c:eb:98:21:6f:3f:45:03:cd:1d:
92:90:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 07:52:37 2026 by rpki-client