This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier: pBMRM2S8nw8k0bEj5p/5TVwXMgmSrGVCTqAabCC3sAk=
Subject key identifier: 44:FF:2A:4B:55:D1:0F:6C:0E:78:E4:13:BE:26:95:AF:7A:E1:A4:57
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number: 020F
Signing time: Sun 25 Jan 2026 01:36:34 +0000
Manifest this update: Sun 25 Jan 2026 01:36:33 +0000
Manifest next update: Sun 01 Feb 2026 01:36:33 +0000
Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: nMs4pU+5WON2WF09xte8LLAwCjHPCnI1aCUA6Znu1gw=)
2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Validity
Not Before: Jan 25 01:36:33 2026 GMT
Not After : Feb 1 01:36:33 2026 GMT
Subject: CN=697573a1-e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:af:ea:e6:5e:57:12:10:ea:bc:27:c0:5f:
a1:5c:5d:0f:d8:06:f3:4e:4d:f4:ee:9d:58:5b:c1:
cb:9b:ab:10:b1:c8:f3:f6:88:0e:0d:bc:0a:bc:e3:
f5:3e:68:7e:44:0f:46:af:44:27:8a:ee:16:47:cd:
3f:be:83:e3:6d:3d:b5:d6:5d:30:8c:30:b4:ef:ed:
a9:75:61:0f:be:08:41:97:92:93:ef:d4:f8:3d:a2:
51:6c:aa:24:d2:80:c5:6d:d8:98:83:08:33:9a:93:
52:6a:21:fa:af:83:59:cc:ef:d5:85:c7:e6:61:31:
69:e7:db:2b:73:e3:c6:29:71:27:83:1f:20:3c:6a:
82:ab:a8:ca:fc:69:87:bd:16:ad:f9:fb:09:c7:b9:
03:68:82:41:b3:b8:76:79:88:64:1f:5a:9b:5b:2d:
c7:64:00:77:8a:b3:4c:7f:95:b9:fa:76:1e:11:f0:
44:ad:67:c0:b4:d6:23:ad:5d:b0:9f:5b:e8:8b:3e:
6c:2c:7d:c1:0a:17:66:4a:9d:d4:77:0f:19:c4:61:
59:ac:31:88:11:8f:b3:45:9e:0a:5e:0f:43:21:2d:
fb:3e:6b:9d:e3:a9:4c:09:ed:b8:91:d8:cc:76:43:
92:ce:0e:fc:10:6e:50:74:7d:8e:96:58:6b:88:cb:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:2A:4B:55:D1:0F:6C:0E:78:E4:13:BE:26:95:AF:7A:E1:A4:57
X509v3 Authority Key Identifier:
keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:4e:b4:f4:d4:67:f5:ce:2c:b3:b8:c7:9c:39:50:d7:66:
bf:21:19:cb:12:4a:98:27:ad:be:f6:99:4d:0a:18:86:11:71:
f7:c9:b0:2a:d6:b9:f5:04:91:e8:7e:2e:a2:9c:02:ab:60:24:
a8:fb:ca:af:37:71:d9:d3:b4:3f:a3:d0:29:1b:9e:af:d4:42:
fb:b6:b0:8d:6b:a0:e0:1a:2a:53:cd:ea:33:f5:73:d9:7f:d4:
f9:d1:4a:84:b9:17:ad:97:ff:75:51:3c:45:1c:58:22:d4:ed:
bf:fb:22:0c:e3:35:53:a9:46:e6:4d:c1:49:09:47:36:6c:17:
89:a9:80:7c:84:2a:de:a7:b0:90:82:79:05:d1:73:ed:fb:48:
02:70:4d:39:e7:2b:46:e8:c3:93:8b:91:ec:ee:d2:13:be:7c:
f3:10:d8:6c:6b:80:3b:25:43:65:d7:2b:4b:a8:22:d8:18:ef:
d7:7a:f5:ce:7a:e3:21:a8:dc:98:78:05:59:1e:17:5a:60:f4:
e0:41:eb:5e:0a:3b:b8:22:c5:7e:47:c7:64:fe:18:f2:43:46:
3b:db:f5:a6:0a:3f:14:65:cd:85:c6:d5:c5:86:7c:0d:50:19:
17:ac:2e:b7:af:ec:c7:63:aa:bb:c2:69:6f:74:93:c2:c0:45:
33:78:47:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2
OTNGNjM0M0EwHhcNMjYwMTI1MDEzNjMzWhcNMjYwMjAxMDEzNjMzWjAYMRYwFAYD
VQQDDA02OTc1NzNhMS1lMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZSv6uZeVxIQ6rwnwF+hXF0P2AbzTk307p1YW8HLm6sQscjz9ogODbwKvOP1
Pmh+RA9Gr0Qniu4WR80/voPjbT211l0wjDC07+2pdWEPvghBl5KT79T4PaJRbKok
0oDFbdiYgwgzmpNSaiH6r4NZzO/VhcfmYTFp59src+PGKXEngx8gPGqCq6jK/GmH
vRat+fsJx7kDaIJBs7h2eYhkH1qbWy3HZAB3irNMf5W5+nYeEfBErWfAtNYjrV2w
n1voiz5sLH3BChdmSp3Udw8ZxGFZrDGIEY+zRZ4KXg9DIS37Pmud46lMCe24kdjM
dkOSzg78EG5QdH2OllhriMvkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET/KktV
0Q9sDnjkE74mla964aRXMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy
OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm
VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIGE609NRn9c4ss7jHnDlQ12a/IRnLEkqYJ62+9plNChiGEXH3ybAq
1rn1BJHofi6inAKrYCSo+8qvN3HZ07Q/o9ApG56v1EL7trCNa6DgGipTzeoz9XPZ
f9T50UqEuRetl/91UTxFHFgi1O2/+yIM4zVTqUbmTcFJCUc2bBeJqYB8hCrep7CQ
gnkF0XPt+0gCcE055ytG6MOTi5Hs7tITvnzzENhsa4A7JUNl1ytLqCLYGO/XevXO
euMhqNyYeAVZHhdaYPTgQeteCju4IsV+R8dk/hjyQ0Y72/WmCj8UZc2FxtXFhnwN
UBkXrC63r+zHY6q7wmlvdJPCwEUzeEfE
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:31 2026 by rpki-client