This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier: P54+dElVwyoLvIW86+loVDvuYI7Z4wb8l8HTIRs4Jao=
Subject key identifier: 27:29:0C:59:C0:FB:DF:CE:15:4E:2E:02:69:AF:A9:60:D5:7E:C5:A6
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number: C5
Signing time: Sun 25 Jan 2026 05:03:29 +0000
Manifest this update: Sun 25 Jan 2026 05:03:28 +0000
Manifest next update: Sun 01 Feb 2026 05:03:28 +0000
Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: 1dApGGwT3a4e6Urak1fuAaUgSTj6n+Cs7mc130o1YGg=)
2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: XrOCHNJawPFMGa3f1zkrlG9WSpcIP1i394cI87CahME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
Validity
Not Before: Jan 25 05:03:28 2026 GMT
Not After : Feb 1 05:03:28 2026 GMT
Subject: CN=6975a421-bdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:4d:31:38:06:38:b4:a1:a0:6e:8c:28:2e:
f1:ec:99:35:56:9f:33:55:20:fc:a7:66:6c:81:08:
c0:da:e8:36:2e:e3:48:e2:01:d4:10:7d:84:9d:cc:
b8:fd:16:9a:41:d6:12:0d:be:7d:1d:9d:fd:63:5e:
d0:0a:10:5a:45:77:4c:8f:f1:86:44:9d:29:02:3c:
b3:96:91:72:f8:11:65:03:13:c4:c3:66:73:c3:0e:
fe:fa:5e:fe:f7:0f:96:2e:ec:c8:af:9e:15:bc:6a:
c3:90:e9:8b:36:4c:a0:33:f1:77:cf:9e:02:de:8a:
91:aa:32:df:93:1f:1b:bc:b1:06:d5:a9:63:11:7a:
6c:56:d8:63:fa:7c:a8:c4:d0:8c:0d:81:13:c4:c6:
0c:7d:5b:52:35:6d:7e:3f:65:5d:1f:c8:ac:cc:4e:
10:b5:67:39:20:f9:fe:e7:c9:e0:91:72:30:0f:5b:
98:94:68:a6:10:6e:46:7c:21:9f:a2:7d:9b:dc:85:
6e:a8:1c:4a:45:a8:f4:27:d0:34:8b:63:ec:4e:a8:
e6:e0:f4:00:39:96:28:31:2a:52:2b:5f:db:33:bd:
bf:c0:1a:d1:b6:73:92:4f:80:b0:f2:6b:7b:11:49:
d3:44:04:aa:dc:2e:a5:8d:56:9d:44:13:64:c3:e1:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:0C:59:C0:FB:DF:CE:15:4E:2E:02:69:AF:A9:60:D5:7E:C5:A6
X509v3 Authority Key Identifier:
keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:72:e9:cf:25:53:e4:d5:5f:c2:c0:2a:a8:63:76:03:cd:9d:
4b:ec:17:bf:46:18:03:f8:be:c8:e2:5b:60:50:73:e3:79:fb:
72:85:a7:b0:00:d4:17:c3:f2:6c:99:72:df:27:d6:f3:bc:aa:
66:fe:ec:2f:15:e2:fd:43:f8:0a:40:68:12:33:10:0f:e5:75:
66:bf:ca:73:cc:bc:69:72:0b:25:5d:8d:92:19:31:15:51:b7:
9d:fb:4a:ad:c2:c6:ac:e3:70:e7:1a:0e:04:48:40:d2:db:28:
68:5b:8e:51:fa:4f:fb:ce:b9:ce:e7:b7:51:f3:e0:9d:b0:c9:
a3:2a:ec:f3:36:a0:0b:09:bc:51:9f:23:ae:68:29:bf:11:46:
8d:ee:0c:d4:ec:a2:18:ec:30:b6:eb:4b:75:5d:69:ba:f3:bb:
b3:79:1f:10:44:c9:be:bb:56:dd:1f:c5:d5:5f:a2:0f:21:04:
e8:5e:2a:c5:ae:df:ec:43:4e:59:69:0c:5e:0a:a4:fe:8c:af:
00:e8:97:3e:f4:f2:89:9c:5f:a8:d7:4b:9d:bd:9b:c6:e1:7c:
5b:ab:4e:0f:05:96:e4:33:ca:a7:da:74:6d:29:20:f8:6d:af:
80:11:96:17:f8:44:d4:e6:bc:f4:65:5e:b7:e9:80:3c:d0:b0:
2b:c2:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:18 2026 by rpki-client