This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: wCKeguQPtzuWf5VdGVDqYumdVkl53LylmYDPTBpcWEg=
Subject key identifier: B4:06:8C:71:08:9F:13:CD:3C:99:71:9B:3A:29:BB:D9:DD:7F:B2:DA
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 0253
Signing time: Sun 25 Jan 2026 01:00:49 +0000
Manifest this update: Sun 25 Jan 2026 01:00:48 +0000
Manifest next update: Sun 01 Feb 2026 01:00:48 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: MTzf5kkxZvlYBTw1u48DsXzFk0A12nEojuRDhvhhyWA=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: Jan 25 01:00:48 2026 GMT
Not After : Feb 1 01:00:48 2026 GMT
Subject: CN=69756b41-9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:c4:7e:8f:ea:84:86:33:ad:66:82:d8:38:
6f:29:61:bb:f4:1c:e3:f0:d6:4f:04:9c:8a:b6:d7:
5a:82:ef:30:70:81:5f:18:76:9a:df:93:b2:c2:22:
ee:14:d8:d0:46:d2:5f:e5:c4:e2:05:1c:d3:14:aa:
2e:47:4e:3c:52:36:d8:f9:1b:83:1a:ce:d4:db:ef:
a2:4b:a4:ca:ce:ff:cb:b5:14:ce:f8:ed:fb:ae:99:
bd:87:a4:d4:53:87:a1:14:b3:c2:86:85:45:52:be:
d6:7e:27:43:da:7d:46:2e:99:fc:fc:2e:33:45:9f:
64:08:55:54:f3:a6:9e:a6:57:31:c6:7f:78:9f:ac:
cb:e4:dc:ef:40:f2:3e:39:5c:06:50:f6:0f:e6:bb:
e0:f4:ce:6f:8a:02:01:70:8d:a1:b6:8e:94:27:16:
e4:bc:79:0f:23:76:e6:4e:7d:09:44:21:91:71:3c:
8d:f5:42:58:9c:20:c1:80:6f:37:03:c4:40:4e:0d:
9f:aa:99:75:56:18:7b:e3:c3:90:fa:c8:60:8e:e3:
f2:a6:e6:a0:bd:39:b9:69:38:d6:08:31:63:14:57:
d4:d6:67:00:12:e4:d9:8c:7b:97:1e:2b:f7:d3:7c:
a9:ff:d7:90:30:da:d0:bb:6e:3b:71:90:a2:5d:53:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:06:8C:71:08:9F:13:CD:3C:99:71:9B:3A:29:BB:D9:DD:7F:B2:DA
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:1a:62:07:47:ba:ae:36:94:8c:63:94:65:38:7e:3e:13:
df:16:bb:10:8f:2d:25:85:03:8a:31:3e:36:16:e2:95:d9:cc:
4e:6c:1e:fe:c1:38:d0:24:6a:f5:93:a4:3c:68:46:23:54:29:
e6:07:8a:46:e9:b2:f9:a9:9e:20:16:67:90:e7:ea:e1:56:67:
28:e3:f9:75:cb:9c:66:ba:be:af:22:bc:0b:0c:6f:d2:4b:5e:
8a:29:e7:2c:f0:1c:04:47:08:44:f6:a2:d3:27:e9:c0:53:7f:
48:5c:73:65:54:bd:ee:8e:bb:6f:fd:9d:60:a0:13:5d:65:cf:
69:6e:ef:8a:29:fa:18:96:a1:54:f8:3a:a1:0a:ef:f2:3a:25:
90:60:a1:ae:bf:ac:57:43:d3:4c:86:05:cc:b0:59:20:68:22:
aa:3e:cf:27:63:47:71:e5:0d:8f:5d:c2:91:14:05:51:0d:de:
1d:a4:63:76:cc:35:c0:bb:ce:7d:8a:b5:35:54:e7:26:e9:50:
e7:ea:78:1c:dc:29:5e:68:58:e0:a5:9b:88:7c:76:70:2b:68:
f1:55:12:88:95:3d:7e:3b:62:e1:7b:3c:80:64:50:6d:14:dd:
55:a4:e5:e3:1d:96:d4:92:ac:27:17:5e:3e:33:13:27:ca:f1:
89:f9:69:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz
NTgzMDk1NkMwHhcNMjYwMTI1MDEwMDQ4WhcNMjYwMjAxMDEwMDQ4WjAYMRYwFAYD
VQQDDA02OTc1NmI0MS05YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkOfEfo/qhIYzrWaC2DhvKWG79Bzj8NZPBJyKttdagu8wcIFfGHaa35OywiLu
FNjQRtJf5cTiBRzTFKouR048UjbY+RuDGs7U2++iS6TKzv/LtRTO+O37rpm9h6TU
U4ehFLPChoVFUr7WfidD2n1GLpn8/C4zRZ9kCFVU86aeplcxxn94n6zL5NzvQPI+
OVwGUPYP5rvg9M5vigIBcI2hto6UJxbkvHkPI3bmTn0JRCGRcTyN9UJYnCDBgG83
A8RATg2fqpl1Vhh748OQ+shgjuPypuagvTm5aTjWCDFjFFfU1mcAEuTZjHuXHiv3
03yp/9eQMNrQu247cZCiXVM3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQGjHEI
nxPNPJlxmzopu9ndf7LaMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD
QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0
RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCflRpiB0e6rjaUjGOUZTh+PhPfFrsQjy0lhQOKMT42FuKV2cxObB7+
wTjQJGr1k6Q8aEYjVCnmB4pG6bL5qZ4gFmeQ5+rhVmco4/l1y5xmur6vIrwLDG/S
S16KKecs8BwERwhE9qLTJ+nAU39IXHNlVL3ujrtv/Z1goBNdZc9pbu+KKfoYlqFU
+DqhCu/yOiWQYKGuv6xXQ9NMhgXMsFkgaCKqPs8nY0dx5Q2PXcKRFAVRDd4dpGN2
zDXAu859irU1VOcm6VDn6ngc3CleaFjgpZuIfHZwK2jxVRKIlT1+O2LhezyAZFBt
FN1VpOXjHZbUkqwnF14+MxMnyvGJ+WnJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:53 2026 by rpki-client