This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json)
Hash identifier: 6qG4bqnS+iWdkgcSW8GUzBUSMydw+yKwAlc/2aoGR6k=
Subject key identifier: 9A:E8:8C:62:32:9A:3F:66:D2:9A:D0:17:54:56:C9:90:63:28:DA:CF
Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
Manifest number: 06E8
Signing time: Sat 24 Jan 2026 21:19:51 +0000
Manifest this update: Sat 24 Jan 2026 21:19:50 +0000
Manifest next update: Sat 31 Jan 2026 21:19:50 +0000
Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: cXFkYMdLau8lMfZrhUBYac22ij0senlMvIZvzlVdbVg=)
2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: FCcszwJptQkcVppu2l7EfA+c1nSvvhedE2ZFRuB0CdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA
Validity
Not Before: Jan 24 21:19:50 2026 GMT
Not After : Jan 31 21:19:50 2026 GMT
Subject: CN=69753777-63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:27:32:a7:a9:ac:cd:b9:44:69:28:6b:23:
d3:19:2b:c3:2d:78:e9:4e:80:b1:47:b7:99:21:ad:
e7:5f:9d:d6:97:7e:fd:de:7c:fb:c5:88:ff:f3:5f:
90:9e:66:18:b8:be:cc:c4:eb:98:2e:fe:e0:86:1d:
5b:a9:b1:4c:e7:cf:0b:f1:9e:bd:de:7f:a8:55:d5:
a2:50:be:97:3c:09:ec:e3:06:7f:08:bf:8f:23:21:
2b:31:6f:4b:38:de:6d:98:ee:42:53:7e:4d:f0:3d:
f9:11:6c:7a:7c:82:c6:75:7c:76:39:7f:0a:62:2f:
7a:47:a0:e2:61:7f:a7:99:6f:8d:81:0a:08:c5:a6:
94:3f:fa:bd:2b:66:e9:34:3a:2c:1f:a9:20:48:39:
79:4b:51:4b:69:04:6b:f0:35:f6:16:ca:df:0f:d9:
b4:9e:7a:13:3c:9c:92:32:7c:68:8b:b0:c7:ec:9a:
85:a3:04:96:48:8d:9c:df:5c:87:f5:9b:b8:c3:1b:
f3:32:c8:13:d4:b6:2d:71:85:1f:8c:db:e5:59:95:
38:76:0e:5e:17:46:95:90:9f:12:f7:38:4c:6c:62:
4b:0e:dc:be:92:e9:b7:60:35:b3:65:b8:b8:b7:31:
f2:9a:49:f4:9c:9f:78:ba:eb:42:8f:85:34:f2:3b:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:8C:62:32:9A:3F:66:D2:9A:D0:17:54:56:C9:90:63:28:DA:CF
X509v3 Authority Key Identifier:
keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b8:cd:a8:36:8d:73:73:18:2f:46:3d:fc:6b:fd:2d:03:c2:
b5:50:3b:46:54:b7:e5:63:3b:2a:0f:4b:4e:2c:b1:a4:8e:3b:
68:9c:3f:e8:36:f8:f2:cc:b4:c1:3f:04:25:22:69:d9:92:ca:
7e:a8:ce:d5:a4:57:5e:cc:92:e3:fe:3d:dd:9d:7a:80:27:13:
1d:25:fe:24:7f:57:a3:78:0f:ff:98:bc:a1:88:ff:5d:ba:60:
fa:61:df:dc:52:cc:b0:f5:f6:04:bf:4c:2f:94:c9:7b:cb:eb:
fc:24:3c:53:88:7c:f6:db:7e:2d:ea:90:8e:13:b8:f4:13:05:
fc:1b:50:ed:82:cb:72:4c:d3:e8:4e:a2:ca:10:bb:37:4f:7d:
9d:42:d0:a2:d9:65:8d:bf:5e:e5:d6:8e:2a:c8:ee:16:7e:42:
a5:fa:b9:12:ad:56:3f:eb:30:d6:30:af:45:e5:b1:3f:0b:28:
a1:e5:d2:c9:3d:bc:a0:7f:c0:45:5d:b4:22:74:ed:e6:4d:47:
1e:2c:d9:26:11:0b:d9:d3:9a:52:34:4b:fa:4c:14:cd:93:9b:
94:ed:e0:1b:5b:cb:b2:bd:3a:8a:c0:ce:56:76:17:43:51:53:
d5:15:ca:ca:12:01:d9:34:b0:f3:14:f3:97:8d:84:09:67:f3:
17:c3:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:20 2026 by rpki-client