This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier: eSrbo1sGcE+dI9Zk+9tRLhQTKIbIXPUudeW5n/pIx6U=
Subject key identifier: 12:F8:55:B3:FF:E0:F5:1C:D0:0E:29:A6:E1:2D:6C:0D:EB:5A:F4:AA
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number: 0750
Signing time: Sat 24 Jan 2026 21:00:33 +0000
Manifest this update: Sat 24 Jan 2026 21:00:32 +0000
Manifest next update: Sat 31 Jan 2026 21:00:32 +0000
Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: IrpZO2QqK4SgJMpC8MCBFnDFUpdoslfJcSAjXC//K4U=)
2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Jan 24 21:00:32 2026 GMT
Not After : Jan 31 21:00:32 2026 GMT
Subject: CN=697532f0-673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:77:25:7a:44:d7:e6:a6:10:e6:90:da:23:
d0:bd:f7:97:1a:b2:0d:bb:f6:95:9f:06:05:22:95:
8d:72:63:b3:eb:9f:85:23:2e:8a:ad:fc:2a:ec:72:
0f:46:5c:31:4a:85:10:32:fd:d9:35:34:9b:3f:e9:
37:42:2c:05:ae:51:55:db:08:5d:1f:ea:43:a1:3e:
a3:41:56:d9:f1:d9:56:33:31:97:0c:77:91:88:1e:
22:9e:66:d2:76:4b:d2:34:69:74:75:54:2b:bd:7e:
b8:92:44:dc:46:99:fb:22:e8:d0:8e:10:1e:63:8e:
96:ce:fe:a0:fe:8a:f6:c9:45:dc:e1:eb:72:4a:6e:
27:33:4d:03:13:e8:62:72:df:2d:67:c0:1e:9a:3d:
f2:4b:14:94:25:b6:32:0d:d0:b1:fd:9a:0f:87:23:
3e:db:bf:52:70:f4:91:02:58:3b:07:22:34:a1:25:
c8:85:ab:69:60:74:42:25:7e:73:db:1b:d1:eb:ce:
00:1c:4a:9e:18:5b:18:2a:18:bb:ab:14:7d:0f:7a:
71:42:b2:26:f2:99:40:6f:a4:68:93:b4:b5:89:0e:
28:73:fc:f0:5a:35:50:78:8d:b9:31:e8:60:8e:c3:
0f:5e:82:46:43:81:72:45:d2:1d:23:b6:74:09:05:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:55:B3:FF:E0:F5:1C:D0:0E:29:A6:E1:2D:6C:0D:EB:5A:F4:AA
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:30:55:81:33:df:47:ca:ff:92:67:5e:0e:ac:75:db:81:27:
2e:03:cc:b0:2a:04:a7:b5:89:e6:df:f7:a6:bc:e3:43:2b:e2:
d0:57:e2:ce:59:ac:99:db:28:3c:61:a7:11:db:23:db:1e:53:
b8:9e:c2:43:f4:b5:4d:b8:62:53:c3:56:1b:c7:cf:cd:6f:03:
1d:9c:0c:f1:6a:67:83:fa:f9:8e:da:b3:fb:e9:3a:21:82:89:
42:8c:54:b1:d7:f2:c6:81:8f:92:e2:25:8f:0a:0f:1c:cc:1f:
fa:3c:db:ce:68:90:5c:3b:e0:a2:6f:42:f9:1f:da:b5:b5:19:
18:7d:d8:ab:84:5e:07:a2:08:e3:1f:d8:ce:6d:fc:15:28:87:
69:a7:98:77:f8:9b:96:d7:63:9f:5c:c4:5c:99:01:1c:28:0b:
1e:64:47:3c:9a:1f:81:53:eb:51:83:75:68:f2:dd:80:a5:ce:
c8:e0:81:05:37:0c:0c:83:2f:fd:27:e3:67:b5:ea:95:69:b4:
d2:ba:1e:5d:79:20:13:7e:5d:a6:11:0c:d4:81:7c:9a:44:6a:
21:13:f7:72:de:18:79:52:ec:25:fa:7d:ff:e2:f0:ca:fa:8f:
3b:c5:4c:2e:3f:18:e2:58:33:ca:fa:9a:80:44:09:94:d2:55:
a9:16:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:29:54 2026 by rpki-client