This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json)
Hash identifier: lqGtoH0O2EHrNgMONX2N1vJ0jNFV06dVJPddGkHX03g=
Subject key identifier: 25:EA:13:A3:85:9B:F2:3D:F9:3B:D3:A7:79:F3:11:F4:EF:7B:08:FA
Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Certificate serial: 13BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
Manifest number: 13B7
Signing time: Sat 24 Jan 2026 16:41:35 +0000
Manifest this update: Sat 24 Jan 2026 16:41:34 +0000
Manifest next update: Sat 31 Jan 2026 16:41:34 +0000
Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: PLsBR9iUisQ9TKU7mD/osN6jrZOTlIpVVSXHvHgDzDE=)
2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5055 (0x13bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Validity
Not Before: Jan 24 16:41:34 2026 GMT
Not After : Jan 31 16:41:34 2026 GMT
Subject: CN=6974f63f-11ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:20:e1:a2:e8:cf:e9:2d:6e:1f:48:85:78:
c9:5f:5f:6e:23:b6:a7:12:e2:57:18:9f:48:47:56:
dc:f8:17:d9:37:bf:be:2f:c1:e1:8b:8d:97:8d:96:
cc:81:5b:4d:de:57:b3:ec:da:16:72:86:ce:70:07:
1b:a0:b9:23:ee:6a:44:19:3a:bb:e8:8a:2b:98:e8:
d8:ef:36:70:14:0d:f1:38:dd:7c:8b:69:c8:d8:01:
31:6c:3d:4d:41:80:4a:8a:85:4c:d1:24:1d:6a:81:
33:47:ae:d5:28:fc:1e:50:84:b2:94:c4:55:9f:3b:
a0:4b:bf:97:af:6b:b0:7e:10:da:81:ba:dd:c7:cc:
f3:fc:e4:47:8f:97:3c:f3:44:80:b2:46:3d:ae:bd:
f5:55:fd:e7:e2:d3:60:2c:08:c7:c7:f5:df:2d:76:
fc:26:4a:5d:5a:f2:0a:ff:28:ce:4c:49:02:6e:74:
54:7e:4e:44:ea:11:52:72:4a:0f:d0:41:4c:89:93:
fb:28:5f:30:c0:7e:d3:2b:dd:aa:04:37:74:84:83:
55:b8:b1:17:a8:d2:b8:82:bf:cf:cd:24:ab:7e:0a:
ee:17:6b:ad:85:1c:a8:9d:e1:48:40:10:e2:4f:4f:
63:de:be:37:d0:b3:97:fe:29:fb:4f:73:bb:25:35:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:13:A3:85:9B:F2:3D:F9:3B:D3:A7:79:F3:11:F4:EF:7B:08:FA
X509v3 Authority Key Identifier:
keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:84:e8:06:70:4c:14:ab:d1:b6:24:f6:97:e2:d0:de:3e:0d:
7c:06:72:30:1a:5c:ca:13:3d:31:61:35:d8:88:5e:a4:2c:7a:
d5:62:b1:f3:f5:4e:15:28:18:c1:7c:aa:c9:49:2e:d8:f4:f6:
98:dc:8e:a4:32:38:e7:b4:3f:6b:4e:0c:3f:1d:b2:01:46:28:
78:6a:66:ff:c2:c9:5b:a8:d3:3f:99:96:c3:51:2a:77:59:25:
94:b4:40:e6:97:f6:d3:2d:a6:ef:dd:0a:89:41:08:cb:e0:cc:
95:b9:5b:15:43:79:a1:9e:98:58:bf:8e:f1:f3:56:1d:9b:8e:
12:54:24:6a:98:6f:4f:2b:12:ec:e7:d9:31:7f:d4:96:ae:39:
44:20:59:c6:f5:9a:91:7d:f6:09:55:b1:06:0f:de:42:15:18:
d6:cd:c7:84:82:64:58:d6:d2:aa:ef:8e:cf:ef:8a:42:d8:44:
3b:35:6e:d8:4d:bb:46:fc:2b:a0:bb:b9:dd:75:43:59:e1:27:
24:ca:e4:aa:1b:9f:3e:20:59:bc:9e:da:5d:87:3b:42:4b:94:
35:41:57:1f:30:03:5e:4b:25:f4:bb:1b:ca:ea:c7:bd:05:e2:
04:78:c1:3b:5d:1e:dc:fd:85:b9:3b:41:99:d5:9b:15:a2:6f:
ee:71:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:53 2026 by rpki-client