This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier: 2OI7qpkWD/UQV/l8rzBEaUWnKQYf8WzEgXmwQDhfLdQ=
Subject key identifier: C7:91:DC:78:D0:54:C3:2B:4B:B2:82:5B:18:51:16:99:9D:48:C6:00
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial: 0C60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number: 0C59
Signing time: Sat 24 Jan 2026 18:12:40 +0000
Manifest this update: Sat 24 Jan 2026 18:12:40 +0000
Manifest next update: Sat 31 Jan 2026 18:12:40 +0000
Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: kCWGLAoTjZKewTv18+jbgaTRMrMX3p4lkaGMpGFPVTs=)
2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Fz9xAcvJFXu0Pf6KMuubLZczsPbShClcYVI7SnF7Up8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Validity
Not Before: Jan 24 18:12:40 2026 GMT
Not After : Jan 31 18:12:40 2026 GMT
Subject: CN=69750b98-20d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:e3:e7:b7:cb:60:89:6c:f2:1a:6f:60:28:
d9:34:5c:dc:90:ec:74:6e:e5:77:f3:09:3f:d9:5e:
d3:01:12:96:12:36:ac:e7:62:69:ae:6b:6d:b4:7e:
f0:a4:61:f6:43:e0:3a:42:cb:32:2b:f0:dc:d3:ef:
8a:44:7e:7f:a6:3f:4a:a8:17:68:15:65:c8:d5:7a:
c9:b2:ab:05:2e:28:96:50:e2:e7:32:cc:4b:15:84:
d4:d4:b4:4b:c5:81:da:39:c1:96:eb:39:7a:b9:ad:
ae:a7:fd:a8:d4:17:81:f5:7c:7a:bf:52:f0:d4:f9:
cd:da:aa:e5:51:b0:46:73:ff:60:42:7a:41:a0:fe:
63:6c:21:ba:a2:c2:bd:d5:14:fd:dc:33:34:72:c8:
2f:ee:a2:1f:e4:53:1c:43:72:ed:0b:46:1c:fe:71:
84:42:fc:7a:57:73:a5:b0:d7:7d:99:07:a4:1f:5c:
d1:79:33:cc:74:29:fb:cc:80:1d:3f:89:d2:c5:be:
83:b6:8e:36:79:cb:9a:a1:7c:1a:70:80:95:e3:e6:
66:38:23:9d:18:3c:80:2b:ec:7b:f7:d9:ea:7c:66:
5e:3c:87:dc:a4:b7:f0:59:92:50:1a:5b:f6:72:e6:
6d:a5:da:e7:eb:16:6e:c7:cc:5b:85:6d:2e:fe:76:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:DC:78:D0:54:C3:2B:4B:B2:82:5B:18:51:16:99:9D:48:C6:00
X509v3 Authority Key Identifier:
keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8d:d2:aa:cb:89:a0:aa:31:c7:5a:10:f4:63:e1:a9:28:2c:
4d:c1:12:fb:25:48:62:15:49:16:af:9c:d4:41:a6:9a:8b:82:
73:43:d7:60:20:5c:a5:23:46:e1:c0:3f:75:3d:aa:f3:c5:64:
8f:e1:6e:e9:95:79:c7:9c:15:00:30:e4:63:04:56:a7:4e:5e:
bf:7a:18:4e:eb:67:10:bc:f8:7e:1d:aa:7e:f6:d2:24:df:75:
64:fa:08:55:ca:17:52:47:92:b0:d1:bc:6e:c2:cd:c3:f0:b7:
2a:6e:62:8e:51:ec:03:a9:e6:85:32:bb:60:84:63:02:f9:04:
e7:f3:75:65:41:50:47:68:22:e1:c1:16:92:25:c0:ab:ff:c2:
50:87:53:0e:a8:77:c0:32:5d:48:40:3c:20:e9:c8:4a:2c:4b:
45:f8:f1:53:39:d0:a4:ec:f1:47:28:8c:2f:c2:07:af:d3:ed:
38:ed:02:d2:39:2b:2e:74:b1:45:70:00:c6:fc:80:83:21:d6:
2e:55:c0:bc:66:07:5d:46:66:03:b3:e0:f4:49:bf:50:9e:08:
71:dd:17:82:3c:ea:a0:ef:f3:a4:e3:13:bf:84:9c:1f:5c:29:
2e:8e:95:b3:95:c0:70:79:4c:3e:e5:d7:23:e6:3a:aa:4f:4a:
49:37:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:55 2026 by rpki-client