This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json)
Hash identifier: ldlAR8TPgMSSHQMkzjR3J7C91lGPpZzn7tlvs7R4kJs=
Subject key identifier: 3F:CB:B0:B1:DD:EB:F8:30:05:5D:6C:CB:4D:F8:B7:8C:5F:70:69:40
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
Manifest number: 27
Signing time: Fri 23 Jan 2026 06:42:22 +0000
Manifest this update: Fri 23 Jan 2026 06:42:22 +0000
Manifest next update: Fri 30 Jan 2026 06:42:22 +0000
Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: L/xIlL6sDxlPksSZwddw2WW1aCfiFnA4G+aILkNy4Qc=)
2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: 2X/xAt2NpQgJSrpIK+jQKjbm6p9J7Q5z+jWa7ZqFy0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Validity
Not Before: Jan 23 06:42:22 2026 GMT
Not After : Jan 30 06:42:22 2026 GMT
Subject: CN=6973184e-4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:09:4c:12:08:27:9d:9b:db:51:04:c7:4a:
c5:28:76:7d:c2:5a:90:78:75:2c:9b:be:58:24:0f:
2d:76:34:6a:36:32:6e:a7:d2:8d:62:8a:5d:fd:98:
3e:2d:f8:4c:ad:22:9c:bf:59:6f:b6:3c:d2:3d:17:
cf:cd:44:ea:a3:17:84:7b:cd:74:f5:2c:25:d0:44:
70:f7:8f:dc:d7:83:eb:ef:1f:d5:ef:e6:fc:a1:c6:
47:59:a3:8c:87:3d:20:46:c9:14:ab:65:e6:3c:58:
51:7b:c6:2e:cb:1b:07:ff:f6:3b:6c:1d:22:a1:7b:
8a:70:ca:f2:96:b3:d5:fe:34:d2:cb:ca:2f:97:a6:
05:1b:95:57:c3:bd:06:57:23:33:78:17:bd:75:c5:
2b:32:f9:69:3b:47:46:e4:a9:9a:72:7f:00:27:bc:
4e:bb:fd:33:22:69:80:22:a1:64:68:be:9c:be:1e:
89:04:15:a5:ad:8a:05:15:1f:f8:e6:a2:3f:9f:7e:
24:80:ea:32:17:44:b0:51:9c:ef:32:11:13:5c:60:
a9:94:ec:9b:bc:44:3c:82:9f:bf:f0:1f:65:6d:9b:
2e:51:a6:57:1b:d5:45:a9:17:09:fb:81:7d:74:dc:
2e:00:5d:6f:86:16:03:96:dd:3a:68:a5:7f:47:c6:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:B0:B1:DD:EB:F8:30:05:5D:6C:CB:4D:F8:B7:8C:5F:70:69:40
X509v3 Authority Key Identifier:
keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:3c:3b:18:2e:25:5f:c6:fb:82:5f:97:b7:a6:ea:a1:95:
cd:e9:09:86:ff:1d:c0:5f:04:35:90:ff:7d:95:9b:06:9a:1b:
76:b2:cc:56:e4:47:cf:d8:d5:43:11:44:52:6b:b4:ce:9b:27:
d4:d5:06:a9:71:fe:db:f5:1b:e2:e3:ea:86:85:89:4c:1b:17:
ae:ab:7d:6a:48:31:0a:60:36:02:55:b9:d8:18:99:1a:75:9e:
60:3e:aa:d9:fc:34:76:af:90:de:99:22:ea:3d:a4:14:90:fd:
24:7c:8a:49:5d:20:0d:9c:2f:f2:c6:91:e2:2b:d8:60:c6:20:
6d:0a:92:f5:a2:f9:2e:28:46:53:89:41:4d:1e:00:ef:6d:0d:
f5:57:66:75:4e:be:0a:14:35:1a:eb:3a:3a:9e:02:64:8a:bb:
8f:e3:b9:86:43:5f:cd:e8:5e:30:78:49:0b:41:17:e4:f4:c2:
f1:ae:41:d2:49:68:e9:20:54:43:c3:9c:1b:e7:eb:d9:d8:04:
97:30:8d:71:2f:58:bc:93:5b:d8:1e:a2:f3:b7:b9:31:d5:b7:
37:ca:eb:a0:81:d7:8f:1b:24:24:d4:d1:4e:8e:bf:01:a7:d3:
a1:52:77:69:ac:65:41:ed:bd:37:a5:2e:da:c6:3c:55:41:b6:
28:cd:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:49 2026 by rpki-client