This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: 4RgqB4KO4nzYsk+67Eo47M498+qNzOZZLevdrM84AUU=
Subject key identifier: 6F:50:DA:1E:F5:41:16:4A:0E:79:5F:F7:1D:52:6B:92:67:B7:4C:93
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 34
Signing time: Sun 25 Jan 2026 06:46:36 +0000
Manifest this update: Sun 25 Jan 2026 06:46:36 +0000
Manifest next update: Sun 01 Feb 2026 06:46:36 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: AGk+YOTBNaTwfw547jClWEg16SQeiu6iiALQ1JJBkoE=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: Y96pVTrMdeKkXESI3mBfKCnkNu7eLETGHBB6EtnJI3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Jan 25 06:46:36 2026 GMT
Not After : Feb 1 06:46:36 2026 GMT
Subject: CN=6975bc4c-b161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:ea:36:5b:16:a4:90:36:4c:ba:e3:0e:83:
ec:42:88:c0:41:22:21:21:5b:ec:c4:bb:c6:9a:e0:
2c:6c:6b:98:0c:7d:aa:90:e5:35:5e:87:c7:51:2d:
d6:56:9b:f8:e7:07:5a:84:07:9f:76:25:f9:27:55:
4e:05:d5:1c:df:4c:a1:3b:61:de:b5:ad:7b:af:0d:
71:2a:a3:7e:14:e5:f7:96:89:4b:b8:9e:2d:8e:c0:
f8:79:69:81:32:ed:5d:28:08:f5:1a:94:64:76:0b:
89:f3:08:99:f6:95:23:12:40:67:93:01:74:5d:86:
eb:f7:8f:10:6b:e5:fd:cf:b7:5c:48:ff:7e:4c:88:
56:9b:cb:1c:47:e8:db:d1:4d:74:7d:e1:01:da:53:
56:6c:52:5e:5f:3c:85:5f:1d:25:24:d1:f2:93:f0:
56:aa:ad:a3:51:42:4a:8d:b9:d6:54:12:46:36:7f:
04:b2:42:03:f6:4e:36:40:00:02:f3:d1:e3:4f:3c:
bf:99:92:e9:4d:a4:d4:a6:e0:c9:57:1a:70:0f:64:
c5:8e:d2:b6:47:0c:e8:a2:a3:ee:42:d3:6f:1e:be:
eb:94:8f:c6:65:2c:54:4d:3e:b4:b9:68:ee:1b:16:
c6:9c:fa:4d:14:f7:a7:5d:e9:5a:4e:54:f9:9b:67:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:DA:1E:F5:41:16:4A:0E:79:5F:F7:1D:52:6B:92:67:B7:4C:93
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:38:8a:14:e4:81:aa:ed:eb:9c:b0:ee:fc:c3:51:66:f7:e1:
35:c1:d8:34:8d:e9:65:b5:ec:d4:b0:74:7e:3c:05:92:8d:26:
1e:c1:ea:c7:d5:cf:51:ff:75:6d:98:03:10:7b:18:cf:29:ac:
84:ef:2a:cb:44:ab:2d:f4:ce:00:99:d1:d7:93:ca:90:29:15:
5d:7e:29:74:08:b7:ad:b4:77:1b:ce:97:99:17:ce:45:dc:00:
a3:e2:62:75:5a:a4:7f:dd:88:72:5a:66:d1:8f:d6:5a:cb:b3:
2f:0f:04:4b:ae:c6:3f:b5:ac:95:88:da:ca:6b:72:6d:fa:72:
e8:34:cf:6e:f8:c0:13:ce:c8:d2:5e:c3:f2:fe:97:9f:2a:e4:
c4:a9:f4:34:08:03:64:2e:70:c3:b2:8a:1d:26:31:06:c0:76:
b0:56:72:1c:08:6f:2f:a3:b0:7c:03:de:73:37:6d:78:6e:58:
12:a8:dd:20:80:19:d5:f3:a0:69:34:44:a6:9f:8a:d0:c3:d4:
af:be:ef:f4:d0:ca:bf:23:4e:0d:d7:05:fe:11:2c:3f:e3:cf:
47:69:7c:c0:35:81:f0:46:9f:15:1d:d2:08:b8:e2:b4:58:55:
35:d3:84:d6:8b:a3:58:4c:27:7b:af:39:90:95:59:f8:56:77:
82:36:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:13:54 2026 by rpki-client