This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json)
Hash identifier: ypbjjJehT8UBPXGlHrxgF1oTpQvFYYu5chzX3mcM2q8=
Subject key identifier: 39:18:22:C4:0F:DA:C1:18:2B:61:BB:56:E2:D3:5D:F7:7B:96:55:54
Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Certificate serial: 0C22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
Manifest number: 0C03
Signing time: Sat 24 Jan 2026 18:25:23 +0000
Manifest this update: Sat 24 Jan 2026 18:25:22 +0000
Manifest next update: Sat 31 Jan 2026 18:25:22 +0000
Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: wrhXAatLVbytQfjgQ0IfN+ETSN/B+CUXEohYSOBx28A=)
2: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: lYe/+IkQ+R02IaPZzlGxsHV36S7X3fY0hJQ296NQhrQ=)
3: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: CLQ3/hXK7ryJwut8NCieyr8cQPTKzXF6ACByOsd3FLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Validity
Not Before: Jan 24 18:25:22 2026 GMT
Not After : Jan 31 18:25:22 2026 GMT
Subject: CN=69750e92-9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:96:b4:0d:06:65:01:09:8d:35:16:96:5a:
e9:2c:54:92:7d:ce:d2:d3:54:a8:53:6a:cf:41:3c:
b6:29:e7:a0:a3:8b:93:f4:da:d4:cd:b0:2e:9e:90:
af:5b:86:f3:f0:f6:88:66:29:6b:91:d8:96:cb:c3:
59:68:a1:c6:12:b3:c6:af:86:81:85:f3:d3:7d:5f:
f5:80:92:52:a1:37:30:e9:9f:3d:f8:df:dd:00:75:
84:3f:3c:03:79:1b:8d:ef:5b:e1:ae:2b:70:3f:cc:
fe:13:73:ee:5a:0a:60:21:2f:9f:f2:fb:79:8b:0b:
87:d0:0a:ce:e0:2f:fb:56:b5:54:df:48:39:78:76:
33:a7:71:3a:00:01:65:d4:8b:c8:6a:8b:96:98:88:
89:17:92:3b:56:99:bb:fd:53:7d:87:67:1c:c8:4b:
53:25:4d:cd:0d:fe:0f:3c:e6:5f:aa:3a:9e:de:74:
fa:8e:69:a1:66:52:76:f7:62:b1:3a:f8:5f:12:4c:
d3:d5:0a:a0:14:65:44:42:d8:3a:28:4f:c0:40:48:
67:69:02:42:ea:ff:06:8a:1f:ba:37:3b:0f:7c:f3:
c6:9a:50:8a:c0:ae:9c:9e:0b:14:d0:04:55:e5:87:
17:3d:85:54:6c:a5:96:ad:5c:87:1d:06:c3:7b:91:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:22:C4:0F:DA:C1:18:2B:61:BB:56:E2:D3:5D:F7:7B:96:55:54
X509v3 Authority Key Identifier:
keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:74:1a:f0:79:e1:58:2b:e7:2a:92:df:1c:49:28:fe:ac:
ae:cf:eb:0c:3e:a9:72:8a:62:20:0c:80:ac:eb:96:f2:9f:f8:
8e:70:8f:37:ce:f2:75:77:10:84:fd:6d:32:01:a9:26:86:23:
d6:e5:b9:24:94:e2:a2:80:7c:92:b0:d0:d7:d9:b2:36:bb:d3:
74:0a:b6:d6:8a:e9:29:0b:6d:d3:97:c7:2b:b7:60:66:c7:99:
ae:ac:6c:a5:32:d7:49:e3:e9:45:fb:1d:50:c8:ae:1a:9b:16:
f2:78:1d:34:89:41:89:d3:a7:58:b2:c8:3f:3e:7f:61:8d:0c:
c1:f1:2a:8b:e3:24:1f:be:cd:26:17:0d:d5:2f:b4:a0:94:47:
86:d3:80:61:cb:22:8d:33:5f:2f:fb:6c:ea:13:d6:44:67:19:
05:7f:2e:56:65:d4:d2:ca:f1:f3:ce:ad:3d:1d:cd:fd:42:8a:
a9:55:ed:b8:62:9f:71:60:42:40:db:81:b5:f7:4d:c6:dc:99:
4d:29:29:7a:25:a4:a7:03:08:41:a1:8c:ca:a6:44:58:7c:fa:
d3:4e:a3:4d:31:48:88:4a:e7:f5:b3:0d:16:0e:4b:40:fa:45:
45:c6:79:3b:5d:32:bc:be:d8:2f:a9:37:9a:dc:73:47:eb:b5:
31:07:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:20 2026 by rpki-client