This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File: Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier: odrs1Ci6wjm8V/q9MfKLyTkxZhqO6NoOufIm51rzbGE=
Subject key identifier: 4E:FA:99:CE:AB:DE:5C:69:30:D3:FB:EB:F5:AF:7D:3F:A9:2A:4D:57
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 073B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number: 071A
Signing time: Sat 24 Jan 2026 21:13:13 +0000
Manifest this update: Sat 24 Jan 2026 21:13:13 +0000
Manifest next update: Sat 31 Jan 2026 21:13:13 +0000
Files and hashes: 1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: kjh3OkPHmXR6XDPBls9njIO4ZtqeULJ21/XpDPbSd6A=)
2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=)
3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Jan 24 21:13:13 2026 GMT
Not After : Jan 31 21:13:13 2026 GMT
Subject: CN=697535e9-2f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:fc:45:d9:1e:36:81:2b:76:6b:c0:50:d3:
f6:38:db:98:ec:ff:36:e4:e4:18:db:0b:4a:9b:74:
18:af:a0:a6:26:40:10:7f:c6:80:b6:ca:27:41:2b:
85:1d:31:5a:15:01:23:bd:79:81:6f:38:df:13:86:
2c:55:fe:29:f3:9c:2f:39:68:1a:8e:0c:37:89:2a:
07:a1:35:ca:be:d5:ac:03:76:fd:ca:2e:76:a9:32:
9e:df:50:f9:07:6e:e4:ab:c8:7a:46:fc:48:9e:69:
20:9f:3b:01:d1:69:c8:1a:0e:24:f1:c2:10:64:1f:
5f:4f:98:09:50:d7:1a:2a:f2:44:ae:28:c5:68:e7:
b0:60:98:c3:f0:08:ab:3b:4a:d7:66:7d:d7:01:22:
0d:87:15:4c:d5:2f:d1:23:79:c8:96:4a:eb:48:ef:
4f:39:32:8f:e2:84:04:44:3f:c5:05:be:1d:26:50:
88:30:b8:67:ee:fd:dd:cf:5e:91:06:bb:09:fc:78:
c8:3e:e3:e7:58:b5:a8:ac:e0:9b:f2:d8:9c:21:79:
1b:ff:ed:85:5f:39:62:24:03:73:90:5a:94:a8:a6:
dd:cf:14:b1:59:55:a8:04:ae:a0:f3:13:1e:a1:11:
8c:7a:31:a2:79:fe:32:17:32:71:f8:54:31:04:e3:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FA:99:CE:AB:DE:5C:69:30:D3:FB:EB:F5:AF:7D:3F:A9:2A:4D:57
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:d9:f5:a8:99:cc:00:82:c5:5d:e4:14:8e:6c:7b:8a:b9:
09:24:be:c3:d6:8d:82:0f:e8:db:36:23:1d:a0:31:15:b8:09:
80:41:c0:00:bd:e7:be:3b:f1:16:62:b1:e9:82:77:14:e9:7b:
78:75:b7:b3:b1:24:13:3e:96:a4:0a:a5:f3:15:bc:47:2d:ab:
f3:ec:c7:7d:89:25:d4:50:0c:f1:c6:10:24:92:62:03:89:7a:
6e:68:b1:31:c1:b7:10:a3:27:56:58:ef:13:3c:a2:4b:e3:77:
24:3a:c3:a7:33:d5:93:12:e0:f9:8b:17:93:a5:f8:79:12:41:
03:90:ad:1e:33:87:b0:f8:9f:7a:7d:e1:08:e7:e8:15:e2:8e:
ba:16:d2:c6:97:e7:11:d8:cc:2b:02:3f:6a:9d:09:38:e4:70:
ce:b0:61:55:dc:2a:73:be:e3:3c:03:a9:98:b2:bc:1c:6d:1a:
f7:36:ab:1a:c5:22:6a:fd:2c:0e:5d:b5:f9:a3:14:61:09:03:
1a:91:b8:1d:a4:68:0c:65:9d:7e:1b:8b:15:64:e4:a3:5a:18:
00:07:e3:74:81:a6:b1:b8:ab:65:b9:59:ac:52:05:d3:27:36:
90:1f:58:60:59:aa:0a:66:cf:46:92:20:6f:bd:1d:ca:8e:a9:
ff:83:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:05 2026 by rpki-client