This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
File: hRAOWh-65f4aZcvxVzQTCo5UG7I.mft (raw, json)
Hash identifier: g7lKdrO4Z5Ye66cLegCFu2AgL5xepXyhF2Fdk/agK/s=
Subject key identifier: 06:0D:CF:64:1A:B8:96:B0:DB:58:A2:28:19:0C:34:D2:A9:AD:31:07
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
Manifest number: 4E
Signing time: Sun 25 Jan 2026 06:24:43 +0000
Manifest this update: Sun 25 Jan 2026 06:24:43 +0000
Manifest next update: Sun 01 Feb 2026 06:24:43 +0000
Files and hashes: 1: hRAOWh-65f4aZcvxVzQTCo5UG7I.crl (hash: SVukw6fEYQOahIlqWtJez8zNaBvi27gsSkKxxi263/8=)
2: 1F578DB08F0111F0BF750433C4F9AE02.roa (hash: LczUr77JgvxHIuqoELCyex8mBKm8am+vXeaFZ97FdZQ=)
3: 3D51EF7C8F0111F087307F35C4F9AE02.roa (hash: kGXFH8n6QfG+BvHqc1nKCy9yOgjS/7C0SlvW+QNDSlw=)
4: 8F35765ACF5811F085DD836EC4F9AE02.roa (hash: Tw5k9/cuQwB71OFXRXiv/bwE46v5T5qgIQMcMfV+JV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Validity
Not Before: Jan 25 06:24:43 2026 GMT
Not After : Feb 1 06:24:43 2026 GMT
Subject: CN=6975b72b-12df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:4d:4a:97:33:cd:30:9c:53:ff:57:77:2d:
dd:c7:b2:7e:4b:b0:fe:a6:4d:c4:e8:9a:71:c2:c2:
6c:f5:20:63:dc:93:4a:35:10:ef:e4:02:bc:ac:b9:
59:4e:43:f5:19:e7:cd:f4:ce:32:52:47:e3:92:68:
3c:d5:22:b7:28:8d:71:8c:20:a3:6a:e4:a5:3a:b3:
b4:12:b7:a2:d9:4e:cd:10:af:0f:ea:ef:24:93:d4:
3d:90:02:f7:59:59:dc:9b:92:82:55:31:0a:38:3d:
5f:63:91:2b:8f:51:9b:58:96:da:4c:4a:49:bd:9b:
5c:bc:a5:c4:e8:67:9c:0e:c2:6c:da:c9:ca:1d:d1:
11:70:91:c8:fa:d8:0e:02:12:7e:a2:0b:8e:a7:f4:
79:1b:fd:73:8f:18:59:e1:73:40:6c:13:bc:0e:2a:
17:a1:26:6d:f0:df:1d:31:01:dd:29:56:4c:0b:64:
6c:a1:93:96:16:fd:85:d7:63:8b:86:33:77:43:0e:
44:32:20:2e:b1:9e:15:a5:0f:52:83:3a:32:b1:d4:
f3:00:65:fc:2a:1d:58:a3:2c:da:64:e0:fc:81:0b:
50:da:68:40:f9:52:4d:79:03:d3:1e:be:2e:38:7a:
87:6d:a2:44:77:e7:49:71:98:23:46:5b:04:77:c5:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:CF:64:1A:B8:96:B0:DB:58:A2:28:19:0C:34:D2:A9:AD:31:07
X509v3 Authority Key Identifier:
keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:34:0e:06:e5:0e:36:7f:01:0b:ac:b4:c0:17:1d:ee:ba:ea:
da:50:9b:46:10:22:aa:a8:5c:4e:13:f5:9c:02:56:e0:d1:51:
2e:6f:fe:56:25:70:71:a4:f1:fc:12:a7:8e:61:65:c3:86:17:
93:00:a0:b7:12:2e:82:3f:23:ed:02:e2:7e:81:56:eb:4b:99:
7c:0e:e7:35:97:5c:ad:0e:28:f2:b8:ed:c7:bf:f5:b3:d4:b0:
86:24:35:5f:60:e6:c6:76:5b:0f:24:2b:1d:40:bf:90:19:48:
40:a5:f0:2e:8a:fa:b2:a1:ad:25:eb:e1:7f:2f:d5:02:3c:c6:
41:57:66:c6:c5:1e:f2:8d:63:b4:9f:ea:f7:ed:5b:03:3b:ce:
e2:99:b7:ed:24:f6:ed:71:65:a9:24:20:29:ba:38:25:fe:ab:
e2:c4:37:88:55:f1:38:12:8f:ae:10:6c:27:38:af:88:1e:bc:
c7:df:b2:55:ed:c2:be:7c:ec:03:e3:3d:23:46:08:36:a5:4c:
7e:b6:13:e7:46:93:63:ae:d9:8a:53:7d:30:29:b3:6c:d1:84:
c9:a0:5a:0d:f3:8a:4c:43:a1:d2:b5:14:e6:d6:89:87:50:d7:
36:fe:b0:c5:f7:c7:6d:04:d2:4e:d8:e8:37:bf:4e:31:fd:0e:
49:79:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:16 2026 by rpki-client