This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json)
Hash identifier: UI5kKN3i/FQtX3C3YPwCfcddegNJYgZLspStFOguxHk=
Subject key identifier: F2:82:96:1A:24:C7:37:80:06:74:B5:28:89:14:C1:C7:AA:2D:9F:DC
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
Manifest number: A8
Signing time: Sun 25 Jan 2026 05:26:47 +0000
Manifest this update: Sun 25 Jan 2026 05:26:47 +0000
Manifest next update: Sun 01 Feb 2026 05:26:47 +0000
Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: OG74IVt8DGx37VxSmX+svgegY30D6MelJ2uQ4nc+o9c=)
2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: Svu2JeuZ6CYR5ygmEoE5eVNloQDdE5gMCDtzf/8+0c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Validity
Not Before: Jan 25 05:26:47 2026 GMT
Not After : Feb 1 05:26:47 2026 GMT
Subject: CN=6975a997-32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:dd:f3:5a:bd:bb:9b:40:be:c7:85:e1:91:
9e:ba:71:b5:f5:82:66:30:12:2c:b2:f4:1c:20:66:
eb:3c:60:7b:57:47:f2:b3:2c:08:fc:65:94:4f:04:
ba:7f:61:72:ff:c1:ae:26:12:61:91:09:7c:80:47:
24:71:a0:13:21:d1:af:7d:bf:82:80:d1:05:cf:85:
85:6f:ce:44:bd:1b:af:9e:0a:8c:0f:91:79:97:41:
c9:73:32:c2:f7:c4:e2:ca:cc:67:54:68:6a:18:af:
51:a6:7a:43:ba:a2:0b:f3:9a:c6:72:8c:fa:a8:18:
df:95:12:fc:71:c4:61:75:4f:9f:5b:be:74:87:de:
49:7e:c7:b7:ef:3a:ac:ac:6d:78:f9:8a:0f:7f:77:
ec:ea:9e:cd:36:78:db:1c:09:48:e1:17:42:ca:8e:
f3:9f:f6:48:7d:20:a1:64:0a:4c:a6:74:c1:ae:2b:
b7:18:57:aa:4a:a2:88:a6:47:03:a1:80:dd:0e:79:
ed:50:96:2c:29:5d:c6:5a:e0:f0:84:af:c9:91:32:
3f:97:50:e6:1c:7a:8d:ea:bf:21:68:79:58:02:f3:
e3:69:1f:6c:6a:70:ed:e9:95:5d:36:c9:0b:5b:29:
7a:54:4b:16:60:e7:ea:16:bc:fb:c4:c5:06:bf:c7:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:96:1A:24:C7:37:80:06:74:B5:28:89:14:C1:C7:AA:2D:9F:DC
X509v3 Authority Key Identifier:
keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:7e:07:0b:fb:a3:9e:b1:49:2d:c2:93:9b:10:43:8f:18:
b5:1d:5d:99:df:66:57:09:b6:53:e2:e9:cf:61:66:8d:f1:c5:
7c:c8:52:e4:5c:b5:a8:a6:99:9b:e2:75:78:f9:3d:b3:a4:cb:
26:8a:bd:be:04:ce:f3:dc:4f:7b:72:57:e0:b9:11:f7:2c:71:
29:f3:ea:18:4a:be:fc:ed:01:fa:51:3b:71:bc:de:b4:55:d6:
8b:66:01:f1:b2:f2:df:60:d7:a6:b3:75:ef:5e:56:1b:3c:fe:
a8:e6:4a:95:52:4f:fd:91:ad:a1:74:e0:3f:3c:54:2d:f7:08:
06:60:6b:a6:ac:78:79:f4:70:3d:6d:c9:ed:05:5c:7f:73:2d:
2a:02:32:93:70:5f:1a:21:ca:f3:fc:be:a9:85:6c:e6:ec:00:
6f:6e:00:79:40:a0:89:6a:3f:e5:49:d2:8a:28:d1:b7:2c:c4:
85:36:9c:70:52:26:b8:32:77:33:78:ab:23:38:52:77:2e:d4:
bd:97:31:dd:3e:5d:0f:ec:b6:77:6a:67:b3:6a:dd:25:8a:03:
89:18:9e:b1:af:2e:cc:60:7a:de:ca:8c:9b:6e:f1:09:2a:0b:
20:5e:3a:82:91:fc:54:44:17:51:d0:15:a8:ab:82:c1:23:f4:
74:62:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:02 2026 by rpki-client