This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json)
Hash identifier: Da9Dg8tWOds6/0cxfBdd7ZqadDHDHwL/rzPnyfewguE=
Subject key identifier: 87:62:BB:5E:6C:4F:97:27:6D:53:79:A8:CA:44:9D:EC:39:96:85:01
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
Manifest number: DC
Signing time: Fri 23 Jan 2026 04:44:09 +0000
Manifest this update: Fri 23 Jan 2026 04:44:08 +0000
Manifest next update: Fri 30 Jan 2026 04:44:08 +0000
Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: OS3aX/mD/LbcyDixSOI/8+TCILskLVV1yQGWMWe+4cE=)
2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: Gr0PXwxUpmRKlbQEfvqS5eHW+A4ehoPUWPtwkZnjT0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Validity
Not Before: Jan 23 04:44:08 2026 GMT
Not After : Jan 30 04:44:08 2026 GMT
Subject: CN=6972fc98-132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:39:f9:f1:16:87:a4:61:f2:4b:8f:61:37:
b1:a4:f2:c5:a9:89:33:b3:dc:2c:d7:4b:75:bd:27:
b5:c0:33:fa:15:95:c0:da:c2:ca:1c:8d:81:41:a1:
d9:b2:30:9d:38:a6:c5:2c:e9:c6:d9:d1:73:8b:08:
cf:84:6d:23:2c:94:90:40:fe:92:0f:a9:71:99:bf:
6a:57:48:39:d6:07:97:fc:b5:30:cc:b0:bd:23:9f:
f4:b4:73:7f:de:99:f7:f5:90:b6:29:64:6b:02:12:
a5:cf:04:01:42:02:b3:f8:e8:17:1b:b8:c5:d5:e3:
53:c2:c0:48:f7:cd:85:eb:01:9b:aa:23:b0:a7:31:
87:f5:13:09:d8:22:9f:e4:48:b8:d6:bd:d7:e4:f9:
31:3f:66:52:c5:1d:42:db:b1:9b:8a:ce:67:6d:f8:
b8:8f:88:a8:a5:3e:f9:93:0c:6c:0d:fa:9c:75:86:
d1:a9:16:45:b7:2c:e5:43:40:d0:26:c2:de:cf:12:
46:01:c5:31:88:53:d6:11:66:8c:d3:f0:57:b7:db:
2b:61:3b:46:59:84:1e:b4:4d:3a:c7:bc:3b:0d:34:
62:f8:2a:df:68:c3:5d:1f:b0:bf:f1:12:5f:34:2c:
d5:0a:6d:43:d9:24:33:52:cc:d3:bb:e5:81:ed:8b:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:62:BB:5E:6C:4F:97:27:6D:53:79:A8:CA:44:9D:EC:39:96:85:01
X509v3 Authority Key Identifier:
keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:87:dc:cf:34:f3:b1:a9:39:99:0b:26:4c:66:b7:78:96:
9d:43:19:20:f0:00:29:59:85:7c:9b:a8:5a:08:e3:5a:fc:59:
64:06:cb:fc:fa:31:bd:49:52:26:2f:cb:3e:d5:f4:e3:5f:ad:
a5:61:cc:50:05:57:fe:7d:00:40:fb:e2:14:4f:23:c7:57:38:
4c:61:da:4e:2b:b7:b6:f3:1b:9d:74:22:39:1a:a7:8c:6c:8b:
11:be:d8:06:93:66:22:0f:a2:41:87:8c:8a:83:15:28:6b:a1:
94:a1:68:39:0d:6c:55:a0:13:17:66:17:10:d2:14:8f:36:44:
07:cb:1b:35:70:5a:bc:0e:d0:23:52:cf:98:ae:a8:55:77:c8:
1f:6a:e4:d4:7d:e3:f5:66:ad:5d:1e:d5:26:2f:72:c9:6e:fd:
d1:a7:43:f9:f4:ef:ef:78:f7:da:38:1c:11:f3:7f:2b:65:94:
d5:22:52:01:c2:cb:f0:ea:f1:ea:46:37:96:2d:7c:8f:2d:8b:
6d:27:37:ed:19:23:bd:af:5b:24:c3:3f:ee:a5:ff:e2:66:cc:
b6:60:33:db:ae:f5:3a:b0:80:1c:d7:95:58:fe:4a:1e:4a:7f:
a1:76:e1:1a:bc:e4:10:ed:03:e9:24:2a:42:32:21:22:94:d6:
ef:e8:a1:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzgwRjcxMTAvBgNVBAUTKDAzOTFEOUE3MEU4OTNFNzUxQkM2MTI4OUM1NDQxN0I4
N0ExMDQ1NTkwHhcNMjYwMTIzMDQ0NDA4WhcNMjYwMTMwMDQ0NDA4WjAYMRYwFAYD
VQQDDA02OTcyZmM5OC0xMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpk5+fEWh6Rh8kuPYTexpPLFqYkzs9ws10t1vSe1wDP6FZXA2sLKHI2BQaHZ
sjCdOKbFLOnG2dFziwjPhG0jLJSQQP6SD6lxmb9qV0g51geX/LUwzLC9I5/0tHN/
3pn39ZC2KWRrAhKlzwQBQgKz+OgXG7jF1eNTwsBI982F6wGbqiOwpzGH9RMJ2CKf
5Ei41r3X5PkxP2ZSxR1C27Gbis5nbfi4j4iopT75kwxsDfqcdYbRqRZFtyzlQ0DQ
JsLezxJGAcUxiFPWEWaM0/BXt9srYTtGWYQetE06x7w7DTRi+CrfaMNdH7C/8RJf
NCzVCm1D2SQzUszTu+WB7Yu/kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdiu15s
T5cnbVN5qMpEnew5loUBMB8GA1UdIwQYMBaAFAOR2acOiT51G8YSicVEF7h6EEVZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy9BN0VCQzFEMkE3
RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBuVWJ4aEtKeFVRWHVIb1FS
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBGNy9BN0VCQzFEMkE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBu
VWJ4aEtKeFVRWHVIb1FSVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMGIfczzTzsak5mQsmTGa3eJadQxkg8AApWYV8m6haCONa/FlkBsv8
+jG9SVImL8s+1fTjX62lYcxQBVf+fQBA++IUTyPHVzhMYdpOK7e28xuddCI5GqeM
bIsRvtgGk2YiD6JBh4yKgxUoa6GUoWg5DWxVoBMXZhcQ0hSPNkQHyxs1cFq8DtAj
Us+YrqhVd8gfauTUfeP1Zq1dHtUmL3LJbv3Rp0P59O/vePfaOBwR838rZZTVIlIB
wsvw6vHqRjeWLXyPLYttJzftGSO9r1skwz/upf/iZsy2YDPbrvU6sIAc15VY/koe
Sn+hduEavOQQ7QPpJCpCMiEilNbv6KEQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:27 2026 by rpki-client