This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
File: hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json)
Hash identifier: eJ2uaRPMFkj8AWeJ2TZhD9pwMfCN34zXT3f1T0fSR+o=
Subject key identifier: 99:BB:C7:11:6F:B7:0B:64:4E:1D:A1:7E:01:80:57:DB:9E:B9:92:AF
Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
Certificate issuer: /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
Manifest number: 06
Signing time: Fri 23 Jan 2026 07:10:54 +0000
Manifest this update: Fri 23 Jan 2026 07:10:53 +0000
Manifest next update: Fri 30 Jan 2026 07:10:53 +0000
Files and hashes: 1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: CAVWjoJ3/Z9n5bgwr5PSnHMjFRhvvk7qWIa4QUndpco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Validity
Not Before: Jan 23 07:10:53 2026 GMT
Not After : Jan 30 07:10:53 2026 GMT
Subject: CN=69731efe-d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:1a:44:94:b0:a9:d6:29:48:55:f7:6b:30:
55:3c:3a:bc:3a:2f:56:ea:64:86:ba:93:3c:6c:69:
c8:cf:a8:52:03:7b:e1:20:84:fa:55:48:45:f7:01:
a6:b6:13:51:f5:f8:34:dc:d6:1d:04:37:14:b6:70:
9f:1e:be:f2:45:65:fd:63:cf:a0:82:e3:27:40:8c:
9c:da:a6:31:98:18:d3:90:be:86:fb:a3:dd:92:0b:
40:5d:37:ef:40:e4:87:ea:59:5d:16:3a:13:97:0a:
cc:f5:73:92:1b:ea:ba:8a:57:02:1a:76:60:68:67:
2d:a5:2f:e5:47:50:43:68:2c:15:d1:2b:a2:23:f7:
13:12:22:21:af:b6:ba:ee:39:46:0b:92:78:bf:1d:
40:18:6b:c6:d5:4c:b1:47:04:d9:e4:91:01:84:1c:
15:ff:c4:09:7a:b0:de:33:c0:27:9a:a9:ae:32:8c:
32:b6:e9:e0:a4:96:6c:86:f1:60:8e:7c:1b:94:b9:
7a:7a:54:d6:b7:8a:cb:fe:d5:dc:2f:56:12:14:e0:
b2:4c:b1:00:d0:6e:34:43:e9:27:3a:48:d2:2b:22:
8f:c2:bc:e8:bf:2d:3c:19:38:c0:4f:b8:22:33:ca:
e6:ec:be:51:a5:2e:c7:b8:98:6d:d5:4e:1e:af:9c:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:C7:11:6F:B7:0B:64:4E:1D:A1:7E:01:80:57:DB:9E:B9:92:AF
X509v3 Authority Key Identifier:
keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:bb:85:a1:06:d0:ab:18:ab:3c:4a:de:98:5d:12:e8:a5:81:
2d:99:05:67:17:6d:1f:6e:83:22:fd:71:bc:3c:48:bb:f1:3d:
62:54:ac:e8:12:1c:39:8e:30:d9:6c:4b:bd:3b:12:89:a8:ad:
94:43:df:67:02:9e:6f:3d:a9:3f:24:49:9d:48:af:91:de:c0:
24:eb:ba:49:1f:12:25:ce:38:20:43:a6:ec:06:e3:32:ae:47:
37:eb:98:3c:b0:de:8e:45:02:d0:fd:40:ce:24:f2:aa:10:52:
80:d1:6d:31:36:3b:88:1d:44:b9:72:79:f2:e7:24:24:0c:98:
40:f2:4d:d1:90:66:6b:40:0a:96:69:3a:b1:c0:62:06:ec:ca:
9a:43:7e:d0:c7:5b:91:73:44:29:08:ee:00:ee:9f:e2:0c:50:
1f:67:de:ae:f7:c7:6b:a1:b9:b4:7f:fa:f1:7e:8e:09:21:1c:
b1:39:db:ff:d2:c0:4a:ab:37:bc:38:ff:0e:ae:b0:9f:5e:f9:
f2:67:63:63:63:3d:1e:cc:62:3e:7c:49:00:cb:93:2b:ef:67:
3d:10:07:b0:9a:01:b0:aa:2f:4f:0e:1d:76:04:79:df:d8:55:
66:00:50:48:18:2e:bb:62:b1:15:bd:9d:87:13:d9:8f:89:7a:
bc:18:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:56:44 2026 by rpki-client