This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json)
Hash identifier: p7pMhSkebov3n45mV+a5Z7vDdc9vx4iTW1ajCAcJWx8=
Subject key identifier: 99:A9:81:76:AA:F1:FC:63:6F:6C:42:5B:72:64:B7:A6:9D:6B:D2:2E
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial: 05D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
Manifest number: 05B0
Signing time: Sat 24 Jan 2026 22:26:52 +0000
Manifest this update: Sat 24 Jan 2026 22:26:51 +0000
Manifest next update: Sat 31 Jan 2026 22:26:51 +0000
Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: mZU3cyYoSfdBBZPpob23MA/G9SFXVb8PNHfMLL+KLvk=)
2: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=)
3: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=)
4: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=)
5: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=)
6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=)
7: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Validity
Not Before: Jan 24 22:26:51 2026 GMT
Not After : Jan 31 22:26:51 2026 GMT
Subject: CN=6975472b-9a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:3e:40:06:24:dc:84:a8:1f:28:03:b1:27:
d7:ab:6b:78:03:a1:e7:a1:a6:bd:53:88:33:65:80:
87:ff:7c:e7:d3:1c:52:9a:bd:94:dc:9a:43:5b:f0:
98:64:e5:8e:8c:92:7b:76:f8:6b:ac:21:6d:f3:92:
4e:0e:c8:07:e9:3c:0e:7d:e3:7f:fa:2d:54:76:da:
4f:3b:27:6e:aa:96:05:fc:8b:c7:7e:12:80:fa:df:
8d:c4:62:d0:a0:c3:1e:d7:d0:52:2d:0f:0b:81:3c:
e0:e1:bb:62:7c:76:05:aa:22:65:0f:28:20:39:f6:
ae:bc:f8:ee:6d:04:9e:53:25:77:ee:e2:01:4f:c7:
58:e2:e5:11:70:69:1a:36:65:b0:dc:7b:03:15:9c:
d9:4b:39:06:ce:0f:df:a9:9f:e7:39:35:aa:e3:15:
90:9d:54:4c:03:19:1d:e8:72:f4:69:f7:a2:ab:2d:
55:c8:56:27:39:e4:53:39:77:10:64:db:e0:bf:c5:
66:71:3b:a3:45:45:57:14:12:ef:14:2e:aa:3e:81:
f7:97:9d:65:4c:c9:dc:a5:5e:d4:1b:b5:84:dc:fb:
94:c1:44:c1:8d:46:d0:6b:3c:67:7b:97:80:7b:8c:
ec:15:de:60:4c:a0:e9:6f:67:41:aa:c2:7a:70:73:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:81:76:AA:F1:FC:63:6F:6C:42:5B:72:64:B7:A6:9D:6B:D2:2E
X509v3 Authority Key Identifier:
keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:8e:db:9a:43:22:d7:d9:aa:9c:60:f3:53:74:68:83:c6:
54:01:24:f8:d6:08:41:11:87:27:56:82:8f:d5:1c:32:ee:fb:
03:93:2c:2b:4c:78:41:03:9a:33:02:41:90:fc:e7:e9:9e:8b:
89:16:09:5f:49:c2:4a:5c:5d:71:a3:aa:c6:7d:62:6b:ef:b4:
5e:27:a7:1d:d9:73:07:95:4e:e4:06:76:51:63:5a:7d:a3:6a:
5f:cd:0e:56:54:4c:53:73:24:65:2f:f4:e6:a9:70:ad:8a:28:
af:6c:4f:2a:ed:21:96:d5:68:fc:6f:6d:b6:0c:30:2c:91:8e:
85:c6:bd:9d:98:55:6f:4e:21:63:19:a1:9a:6d:ca:7d:5a:4f:
b2:f8:98:4c:11:39:62:be:c7:17:e5:45:91:87:0b:eb:19:a6:
27:e7:1a:d3:bd:ab:fa:57:c4:4b:3f:9b:05:16:5b:07:8e:b0:
d8:15:f6:21:04:b2:a3:46:74:d6:61:fb:7e:98:b3:23:d9:c0:
28:cb:59:9a:2c:f9:1a:23:c2:81:dc:69:06:b3:1c:6b:6d:7f:
eb:28:00:59:60:ff:66:fa:57:69:41:c6:18:10:48:3e:84:7e:
bd:4b:bc:ea:99:d6:8a:e1:97:31:73:5e:a2:47:0a:e1:09:2a:
f3:72:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:26 2026 by rpki-client