This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: IMuVS6ZJQ2Vz3JvIi9+vKCkMbPF1Dpd9lgelHiqTYGQ=
Subject key identifier: D6:9E:6A:27:26:04:A1:AE:24:7C:9B:A6:B5:28:1E:52:D9:DB:4A:73
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: 24
Signing time: Fri 23 Jan 2026 06:51:16 +0000
Manifest this update: Fri 23 Jan 2026 06:51:15 +0000
Manifest next update: Fri 30 Jan 2026 06:51:15 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: tBGao7WVCPcP9KpbA42N3nprWEEjg7HeA8Quf1WF7yQ=)
2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: 0Zi7a8zsLY38+Kw5x0ohUceb8AdyaS+jD2hPBxt1gYQ=)
3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: ekpamxD7hzwb1PEjW+tSW6XvcWqgsSy+CPAuO9Zq2Cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Jan 23 06:51:15 2026 GMT
Not After : Jan 30 06:51:15 2026 GMT
Subject: CN=69731a64-0bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:19:92:bc:f6:eb:27:2a:e1:6f:ca:fe:13:
b8:71:58:97:ff:96:c5:b0:68:d4:6d:d3:fe:6f:6b:
8d:43:74:6e:36:5b:39:26:f5:40:d3:26:a1:93:32:
b7:0d:fb:b1:f9:6b:cd:7f:f5:f9:8c:d5:b0:04:59:
2b:48:74:8f:f8:2e:4f:23:aa:e7:14:ef:03:f4:93:
5a:ae:32:14:04:65:2c:15:50:06:91:5a:29:35:7d:
04:15:a9:e2:1c:ed:b7:c7:56:aa:16:9b:ac:24:27:
d3:bf:d3:6a:c0:91:f8:c8:ec:70:26:a2:9d:89:08:
1c:87:26:e9:71:24:d4:77:13:0a:6a:82:c4:97:2a:
18:df:e6:35:6d:21:c3:2a:49:ea:53:df:12:c1:e9:
f7:7d:a4:02:b4:de:68:91:8b:8b:01:59:2e:b2:03:
ce:17:95:fa:f1:05:4a:b7:47:ac:35:fb:cb:a3:3d:
22:6d:03:c0:78:46:da:fa:d6:08:57:d6:c1:b9:ff:
7a:3f:2d:c1:d1:50:59:8d:18:d7:e6:4d:04:2d:73:
6d:b5:70:a4:7d:88:8f:82:b3:cc:7b:4b:8a:2d:d7:
a2:d7:70:74:52:23:de:1d:77:0d:db:a7:b9:c1:2a:
55:3c:f0:80:0b:4f:cc:d9:b1:18:87:9c:45:87:1a:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:6A:27:26:04:A1:AE:24:7C:9B:A6:B5:28:1E:52:D9:DB:4A:73
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:28:43:4b:a2:84:3a:af:d9:a3:fe:ac:e0:b7:5f:17:b2:bd:
6f:fd:8e:73:4b:78:38:d3:08:db:7a:5c:6d:2b:96:7a:fa:68:
16:44:26:8e:38:7d:95:24:53:d8:3d:a4:ae:3f:c8:06:3d:da:
7b:84:f1:7d:d0:42:91:93:f0:05:79:23:4f:c2:22:3b:d2:ad:
7e:34:db:0d:2b:3f:33:1f:31:bc:aa:33:bb:f4:45:3e:00:14:
5c:30:93:4b:65:d4:a6:53:ec:89:98:97:71:fd:eb:8b:67:17:
21:4e:26:f1:74:91:8c:29:b8:44:91:38:37:11:e7:a9:79:e5:
64:8c:21:75:81:34:c0:23:86:41:43:32:99:8f:56:16:5a:25:
72:89:4f:b3:73:fb:fb:04:9e:de:44:d1:2c:42:2c:e2:7e:ef:
b3:41:f9:05:b7:26:93:e8:ee:5e:c6:a9:3e:82:b3:fa:07:c1:
75:89:87:53:ad:c2:d2:7b:63:9d:04:58:78:7f:fe:fd:87:e0:
a9:b4:32:ab:75:fb:7b:b4:76:ab:e9:2d:fa:c2:90:67:4d:81:
4c:0d:02:1d:c1:c8:8c:40:fa:39:c3:21:13:c7:96:54:65:13:
4f:3d:44:0f:82:fb:9d:ec:52:9c:b8:f2:6e:31:2d:df:cc:3e:
f5:08:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:48 2026 by rpki-client