This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier: qj4U0dXyS2IDNR4UQGRWwigUHHkG6o/GipjH03vwRaE=
Subject key identifier: 1B:F7:B9:7D:C5:0A:5E:90:18:A4:D7:72:33:4B:7F:5F:55:7A:09:64
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial: 3506
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number: 61A1
Signing time: Sat 24 Jan 2026 14:15:28 +0000
Manifest this update: Sat 24 Jan 2026 14:15:28 +0000
Manifest next update: Sat 31 Jan 2026 14:15:28 +0000
Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: Zpq9rZDDpwjulmHMFo0DxrYCLKaSaEBx32YcF0EbVrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13574 (0x3506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Validity
Not Before: Jan 24 14:15:28 2026 GMT
Not After : Jan 31 14:15:28 2026 GMT
Subject: CN=6974d400-036e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:9a:c5:80:5d:52:57:b8:ea:da:9e:9b:f8:
df:15:a6:61:e1:9c:73:b7:73:5e:b0:df:a9:16:b9:
13:18:9e:52:60:85:64:c0:87:53:58:4b:2e:05:e4:
6e:2e:66:5b:09:e7:d6:93:96:02:28:42:57:b1:db:
14:92:25:8c:28:eb:ea:f7:17:69:57:70:1d:53:03:
ba:be:05:5e:35:0b:01:94:e8:c6:c5:f6:eb:23:33:
b2:9e:bb:44:95:41:fc:6d:e2:af:50:ce:7c:94:01:
f1:a0:9c:53:70:4a:62:d5:86:53:8d:68:69:48:13:
69:00:03:ec:c3:29:4c:bc:dc:f5:d9:2d:c6:93:9d:
ca:3a:46:ed:c6:26:a3:ce:10:f9:72:b1:c3:db:37:
c1:88:ce:7f:19:b2:0f:58:4d:12:c6:b7:87:07:76:
6b:03:7e:93:a5:61:99:83:d9:99:59:fd:c0:c9:c5:
a3:ae:de:29:c5:c4:7f:cd:39:a2:79:08:82:ca:99:
ff:46:54:0a:7a:ff:77:da:f1:60:c8:c5:14:cb:79:
9a:77:76:36:5b:07:c0:cc:cf:5b:ea:b5:e0:62:02:
1d:c7:ab:0e:a6:67:0b:0f:5b:46:e2:08:ad:8c:22:
cd:19:02:b5:97:c3:05:f0:3a:91:b8:e1:02:4a:6d:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:B9:7D:C5:0A:5E:90:18:A4:D7:72:33:4B:7F:5F:55:7A:09:64
X509v3 Authority Key Identifier:
keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:94:46:7a:2e:72:ad:aa:98:39:ff:09:f4:27:02:92:69:
65:52:bd:95:9f:2e:65:0c:d8:44:a6:40:a8:05:2b:81:3f:18:
37:70:57:a4:84:7d:29:82:9e:f8:5a:c4:90:2a:9b:f9:f7:c7:
66:76:b5:98:6c:f3:ca:5e:7e:c5:eb:2d:58:f9:33:c2:6e:e1:
14:7b:83:8c:fd:a3:37:9f:da:c3:66:ad:97:89:68:6b:6e:8f:
7b:cb:77:e8:72:25:39:1e:9b:ad:48:fb:0d:0f:72:75:a0:b3:
42:50:b1:91:9d:b9:e9:0a:5a:21:48:89:cb:57:23:1e:9e:a1:
69:d1:3f:d5:91:94:c9:1b:ed:a9:11:ce:a3:75:86:07:69:23:
f8:10:4b:22:ac:58:8a:44:09:b9:52:27:7b:7a:79:f5:d0:cb:
79:a1:97:6f:8a:54:35:ad:8d:63:dd:43:31:18:66:64:59:01:
32:a1:e9:5c:28:1c:c8:2e:17:85:18:4f:88:b2:f1:33:c7:56:
94:22:07:52:46:0c:bb:d3:22:50:35:6f:41:aa:51:83:e6:4e:
28:9b:91:e8:f5:2f:77:7f:b3:2b:d4:75:ed:2a:0e:30:2a:2a:
e0:fa:56:30:8f:0f:3b:96:b2:82:cb:9a:8f:0a:50:ee:11:91:
ed:11:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:24 2026 by rpki-client