This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: MrS777kGNzrGmd1Nx+kBqUUpDiHDN5FsSoVyyO0mAAg=
Subject key identifier: 6F:C8:EF:64:14:3D:7C:20:B8:90:E5:25:AC:96:6B:4E:62:61:4D:7F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 040F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 0401
Signing time: Sat 24 Jan 2026 23:41:16 +0000
Manifest this update: Sat 24 Jan 2026 23:41:16 +0000
Manifest next update: Sat 31 Jan 2026 23:41:16 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 0aacKPprphxkVkW3zvEFA6QCdyZnzeoofnvnYvqShu4=)
2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=)
3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=)
4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Jan 24 23:41:16 2026 GMT
Not After : Jan 31 23:41:16 2026 GMT
Subject: CN=6975589c-113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:89:8b:18:7c:d6:aa:89:9f:6a:b7:cc:d6:
09:78:48:4b:bb:45:98:31:cc:05:58:d2:cb:cf:46:
f6:94:a0:33:36:23:22:00:81:4a:6d:b7:16:b0:ab:
90:e3:a6:87:26:b9:8d:8a:c8:ef:e8:e5:b3:d8:bf:
4e:a3:f2:17:3b:57:bd:ef:6d:43:9f:dc:a6:1b:e1:
c0:09:98:cb:84:b3:96:f1:b8:7b:f6:21:e2:74:f9:
97:04:af:44:e2:2e:98:1e:cc:7e:1a:53:40:af:b9:
26:16:81:38:2b:75:f0:a4:7a:d4:29:b2:70:8b:30:
5d:83:ef:7f:b5:89:79:eb:1e:a9:23:ac:3d:f7:5b:
a6:62:10:86:2c:56:40:c2:9b:6b:f1:0f:90:16:82:
ab:6a:8b:18:ab:51:20:6e:a3:c1:f0:07:66:46:cc:
47:fe:8e:0c:44:fd:4f:1d:ff:9f:c9:57:a8:52:a1:
80:23:57:04:14:fd:fa:cb:fb:21:47:29:a6:b9:0f:
6f:84:07:51:ee:85:cd:da:af:d8:75:8e:01:eb:51:
d6:91:c5:0e:46:1f:b2:63:d9:c7:04:37:4d:62:6a:
af:38:60:82:35:44:a0:4d:84:36:00:59:b9:20:b3:
83:70:54:45:89:00:db:d2:88:a7:c7:ab:da:d1:8d:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:EF:64:14:3D:7C:20:B8:90:E5:25:AC:96:6B:4E:62:61:4D:7F
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:f7:f4:75:4c:cc:88:50:3a:e2:d6:7f:bb:35:ca:fd:f8:de:
dc:43:e5:f6:95:5e:69:7f:43:9a:d8:df:7a:7e:bd:ad:8a:06:
3f:e7:27:68:05:82:b6:95:b0:b4:e6:7b:6d:ce:c9:ef:c6:93:
08:77:f2:68:03:cf:fd:b7:5a:f8:ab:ef:7a:5f:5e:96:5c:78:
b3:ec:3a:9d:cb:3d:b3:e9:98:99:86:f8:1c:30:de:09:b5:a0:
56:99:45:61:92:93:bb:2f:f9:93:ca:33:38:ce:20:fa:a1:94:
1a:83:b0:c3:e7:9e:bd:3d:43:06:d6:a6:5c:be:61:b1:85:11:
7f:65:2a:61:fa:ef:e9:b3:95:1e:0e:6b:f1:e5:97:f1:1c:c6:
c6:e3:39:45:1b:41:a0:fc:d9:7b:85:c3:b1:71:03:81:8f:85:
c8:54:a5:5d:5c:8b:9c:d9:a2:9e:5e:54:80:c5:72:58:7d:08:
5d:3e:c9:05:2a:21:b1:e0:9e:eb:69:f2:1f:8d:c5:98:14:49:
8c:4d:6a:2c:fd:3f:17:ce:ff:ab:de:4b:3a:c7:b9:01:66:08:
1e:41:0f:8c:b4:3f:3f:36:f9:46:31:70:ad:ad:45:53:5a:12:
dd:86:a0:8a:00:f8:95:06:4c:db:32:ba:3d:0c:9c:f3:8d:5e:
4c:70:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:16 2026 by rpki-client