This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json)
Hash identifier: gJQSXhmWA0M+Lwvv2gTD3emL0MtayVRC59unu1IYzCU=
Subject key identifier: EA:09:AA:C2:3A:AC:3F:13:A3:50:86:11:65:12:FF:B8:48:80:7F:FD
Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Certificate serial: 0F1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
Manifest number: 10C9
Signing time: Sat 24 Jan 2026 17:17:39 +0000
Manifest this update: Sat 24 Jan 2026 17:17:38 +0000
Manifest next update: Sat 31 Jan 2026 17:17:38 +0000
Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: nhDfi7A3g4HSL+YSNyvBjMTJeTVADWH53xLOUfihhoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3869 (0xf1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Validity
Not Before: Jan 24 17:17:38 2026 GMT
Not After : Jan 31 17:17:38 2026 GMT
Subject: CN=6974feb3-59f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:a2:21:da:74:53:f7:f0:bb:77:c6:0f:2b:
59:d1:54:21:b9:eb:0b:71:ad:cb:14:39:b2:c6:ab:
17:25:39:00:80:60:65:ef:eb:28:96:11:55:2f:e5:
23:09:f5:72:fb:c8:2a:0d:df:6f:27:10:56:da:84:
eb:2a:3b:9f:9b:d6:6a:bd:3c:7e:e6:fd:ae:97:19:
11:60:90:22:f0:4a:52:17:21:e4:51:ee:77:0a:65:
b0:15:8b:ce:b7:d6:71:4f:97:4e:a2:b8:89:26:b8:
20:fb:4e:2e:30:2c:d6:16:b8:f5:c2:60:9b:e4:d4:
aa:e0:18:12:04:a9:e3:5f:ab:22:bc:19:90:af:7f:
7d:dd:b2:db:42:93:80:f7:77:0f:86:c8:2c:fb:7e:
cf:fd:90:e7:f7:2d:eb:bb:87:83:e1:33:b8:63:e8:
86:6f:da:cc:a7:52:88:ea:b4:2e:6e:80:41:df:33:
ac:a3:5e:7e:ed:8e:7a:12:a7:fb:86:2c:8d:d3:1f:
c1:dd:91:37:3c:4b:86:7d:81:e4:de:f3:cb:f5:bd:
7b:8e:84:4e:0c:a6:c1:7e:84:77:f9:71:ce:8d:73:
d9:e1:0f:f2:e0:70:da:d8:56:f1:92:74:bd:56:7b:
a2:de:a4:22:28:1c:85:15:db:5e:b5:58:80:5a:cc:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:AA:C2:3A:AC:3F:13:A3:50:86:11:65:12:FF:B8:48:80:7F:FD
X509v3 Authority Key Identifier:
keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:2f:98:d3:4e:80:16:ac:f0:33:e5:82:e4:0e:ee:2b:01:
fc:28:a4:70:58:cb:c2:7b:39:11:f4:ff:15:2b:b0:53:99:d6:
dc:65:de:9f:14:5b:0e:5d:c2:d0:8d:31:61:d1:8a:8b:19:d2:
40:0d:d5:bf:b9:5d:89:cc:1c:72:2f:e0:a6:2b:07:29:76:80:
00:53:35:5b:8c:8f:30:fb:60:6c:40:6e:aa:ca:ca:dc:fd:96:
8a:69:a9:80:ec:dc:ca:f2:7c:87:88:3a:ff:84:7b:ac:20:93:
b8:64:93:d4:ec:c7:fd:64:9d:ae:e6:97:99:83:07:35:b6:af:
dd:69:c1:e6:3c:d8:93:1d:23:a0:a1:66:d9:53:d4:e1:1c:35:
54:0f:34:b7:d3:21:b2:2b:4a:03:37:b5:7e:9c:e2:09:f0:eb:
11:b3:9d:bb:d6:82:f2:bb:03:5d:1c:24:d6:cc:3b:be:25:ae:
0a:b4:74:17:21:ba:0c:05:f5:3c:ee:48:a9:87:85:3b:9e:df:
1b:83:08:d5:8c:14:48:31:2a:db:7e:3d:58:ba:24:82:ef:6d:
38:bd:8d:4d:9b:a6:f1:ca:3a:93:93:4d:70:47:fa:46:db:27:
a4:0d:ca:48:0f:8c:99:57:66:ac:84:6c:7a:46:7e:6b:4c:91:
b4:8a:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:43 2026 by rpki-client