This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier: S3ZEfzXH1aY4N6ZwjYi8PlyfnumIjjWl47ZjcbnuZ5I=
Subject key identifier: 19:D5:4F:E7:ED:52:93:E7:83:24:C1:8E:F5:59:C8:C4:DA:10:71:FE
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 21DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number: 21BE
Signing time: Sat 24 Jan 2026 15:43:50 +0000
Manifest this update: Sat 24 Jan 2026 15:43:50 +0000
Manifest next update: Sat 31 Jan 2026 15:43:50 +0000
Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: aLT8P9qVPBCT1mkjaVV267NGya8/CwskVGQb+IZiutg=)
2: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=)
3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: lQXg+x/pxYEw6RZp1vPPXfhhm8xX80IO6STDBaCkyJw=)
4: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8666 (0x21da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Jan 24 15:43:50 2026 GMT
Not After : Jan 31 15:43:50 2026 GMT
Subject: CN=6974e8b6-e976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:db:5b:49:bd:ae:fb:b1:a0:a7:21:75:23:
dc:4c:c4:9a:d7:6d:a1:37:a1:2f:bd:54:56:e0:96:
2f:65:d8:21:a2:d7:7c:0b:e9:0f:98:60:b4:e2:f1:
ad:91:0f:6c:f1:ac:f7:41:0e:12:88:02:83:54:be:
08:ae:60:4b:37:12:2b:65:e2:71:77:f9:55:10:3f:
ce:45:4a:4f:d7:6c:06:be:47:06:eb:ab:e5:5f:aa:
95:17:29:81:16:2d:30:9a:33:50:d0:d7:b2:37:ed:
2e:be:95:cc:db:7c:09:77:06:91:b5:c3:f2:6c:59:
38:ce:da:72:aa:11:a0:0e:97:bd:1c:cd:58:85:0f:
ae:e9:cd:c5:33:32:10:e7:fa:39:6e:0c:13:7d:1a:
e2:76:66:ed:7f:b8:ed:3d:71:d2:88:a0:9e:03:9e:
bd:9d:00:c3:b2:3f:41:e9:95:6b:49:e2:06:4c:14:
46:ad:35:71:06:e8:ff:eb:68:5a:c9:aa:98:0e:cb:
ff:5c:47:df:80:aa:39:d3:a8:f1:cf:4d:9c:c9:d1:
4e:69:32:2c:c8:85:06:6e:6f:a7:99:19:4e:3c:e9:
a7:de:25:34:1a:ad:75:77:82:19:52:4e:70:8f:b8:
e2:25:70:50:75:f3:b9:3e:c1:c3:79:a7:5b:6e:9e:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:4F:E7:ED:52:93:E7:83:24:C1:8E:F5:59:C8:C4:DA:10:71:FE
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:e9:e5:dc:72:51:20:9d:fe:ef:0a:22:cf:c7:79:07:31:fd:
17:20:a4:c6:d8:e1:03:a9:69:2a:25:d7:a7:d9:e5:7d:62:12:
fb:13:c2:3b:c0:7a:4d:41:0c:c0:89:56:a1:4d:87:21:34:5e:
ce:f5:af:7b:dd:30:6e:82:a0:b0:f4:84:72:2a:90:80:fd:85:
f9:a1:01:88:91:6e:e1:4d:04:9a:18:20:c6:9c:75:76:16:f8:
0d:21:2f:62:26:79:97:d3:c5:10:ad:71:d2:78:30:2d:15:55:
94:d2:86:ba:8d:0e:4d:59:04:82:4b:82:6d:8f:12:ff:54:87:
d9:ef:c8:60:a6:f0:bb:d8:6e:6e:96:9a:fe:be:f0:63:0e:b4:
1b:4d:ec:cb:fa:a5:20:2d:de:d7:55:51:9e:ef:5f:1e:a5:b2:
d6:bb:38:8d:82:16:03:71:71:ef:84:f2:42:a9:29:69:a6:2b:
f2:fa:e1:e5:e8:a5:01:74:2d:6c:02:e4:95:de:e7:4a:12:ae:
26:3e:9b:2c:ed:ce:f0:0b:e6:ce:e4:f8:12:4d:c8:27:a8:fa:
79:77:ee:38:ca:02:40:b4:8a:de:17:c7:76:a4:d0:9b:58:6f:
4c:3e:24:ec:e2:59:d6:bd:01:8d:a2:e6:68:01:43:4c:36:e3:
e5:77:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:45:50 2026 by rpki-client