This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier: 9TgeU4bJhIq5ZqRSSFZ//y/sIZYOgV8NhnKzubI1lPY=
Subject key identifier: C7:78:8E:3B:B5:3E:6C:28:98:37:4E:9F:AC:EE:43:C7:6C:A0:84:FE
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number: 085E
Signing time: Sat 24 Jan 2026 20:28:00 +0000
Manifest this update: Sat 24 Jan 2026 20:28:00 +0000
Manifest next update: Sat 31 Jan 2026 20:28:00 +0000
Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: PbHg8/IjeFzbUDMadqj87qsb0vMtRokZ0yoLVAidhls=)
2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: cqaNGUAp+AM9Nk5TWMcE/5SRJKY4Makpxzc5uTKkH7g=)
3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: O05NjBwYNNvXC8JoMWk3EyZg7iktCjusVDBEEW7nGKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Validity
Not Before: Jan 24 20:28:00 2026 GMT
Not After : Jan 31 20:28:00 2026 GMT
Subject: CN=69752b50-cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:df:ce:10:63:af:e8:0a:67:92:70:3f:33:
10:ee:4c:ec:a0:4a:8a:ce:aa:b1:ce:ae:6c:25:e0:
94:23:43:3a:27:b7:64:ff:7c:00:4e:4d:fa:8c:9c:
64:f2:97:5f:61:ca:2b:da:5b:5c:8a:bc:b7:05:5b:
35:d9:6a:d1:af:0e:ec:90:07:4c:c6:4d:88:bc:78:
d8:90:df:44:e9:fa:12:b6:56:55:04:76:75:a4:ab:
24:04:af:94:35:54:e0:93:1b:f5:d5:c0:e5:92:27:
da:ad:30:79:ed:a6:18:ff:06:f6:43:0e:49:df:4b:
1a:d8:77:c3:26:2a:d7:45:f5:6e:6d:46:0c:5f:1a:
6f:81:e2:bd:f0:e1:af:12:63:85:f9:cc:77:2e:c5:
b0:88:24:09:94:7d:26:af:a3:d1:29:8f:9e:fd:97:
f5:7b:1a:6e:22:2f:0a:a2:7e:a2:9f:38:7c:fb:22:
c7:53:ac:f0:63:60:0b:f8:82:9f:32:17:b9:e0:d4:
e6:52:17:8d:84:c0:fa:37:87:51:bc:d9:f8:82:f8:
19:2c:88:14:34:f9:f1:5a:8b:ce:57:ff:0b:f1:cc:
fc:bb:60:14:ab:32:ab:d6:40:6d:ec:ab:56:bf:75:
8c:eb:bb:20:6f:5b:a3:bc:54:8e:78:a7:a4:91:91:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:8E:3B:B5:3E:6C:28:98:37:4E:9F:AC:EE:43:C7:6C:A0:84:FE
X509v3 Authority Key Identifier:
keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:92:08:5a:5b:8d:5f:c7:07:af:08:6c:0c:5a:36:d0:4f:
ef:cb:89:5f:ec:d2:d4:50:9c:e2:34:af:27:84:79:a1:d3:c4:
2f:3d:d8:d8:5b:fb:85:cd:1c:ce:82:02:aa:f2:31:09:cd:33:
85:c7:54:a1:7c:05:7b:04:ea:b8:2f:1a:ec:3c:c9:4e:ab:28:
4f:b9:8d:80:6c:c0:54:4c:9b:85:07:ba:fc:b3:fa:64:c9:12:
78:ff:54:5b:2f:07:74:0c:40:d6:5e:6f:ba:c6:f1:8e:e8:5a:
ad:19:30:45:a1:8c:9d:e0:dc:d1:45:c9:74:5a:03:a1:da:95:
18:77:e4:12:2d:9d:48:09:6a:c8:7d:93:a6:d2:3d:50:71:3f:
f0:95:f6:10:3c:1a:54:c6:ac:4d:7f:6c:d1:5b:ef:19:a3:b4:
17:e4:c8:df:e1:e7:1d:72:88:b8:7a:ce:dc:99:8b:c6:48:52:
74:46:5f:95:59:51:98:85:dd:a0:44:a2:9c:38:ed:57:06:c6:
bf:9e:2a:07:7b:8a:9f:89:db:a9:50:91:00:03:a7:7a:d1:7a:
20:35:bd:84:4d:ba:50:f4:b5:c8:ff:16:3c:b7:58:60:17:fb:
92:08:f4:27:1a:61:42:c7:ad:0b:a0:fb:da:87:52:92:88:64:
e0:23:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:49 2026 by rpki-client