This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json)
Hash identifier: vDVaXeB8U03QqzxtO55cWFEg8P+Aqr9YcBWwDSO01uk=
Subject key identifier: E6:C2:5E:2A:A9:19:82:01:D0:91:1F:D5:FE:C4:B9:7B:24:66:7D:2B
Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
Manifest number: 7E
Signing time: Sun 25 Jan 2026 05:50:43 +0000
Manifest this update: Sun 25 Jan 2026 05:50:43 +0000
Manifest next update: Sun 01 Feb 2026 05:50:43 +0000
Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: i2digE3gSConxpzmmAvtQled/QdDcuxyW3y4MSvzncw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Validity
Not Before: Jan 25 05:50:43 2026 GMT
Not After : Feb 1 05:50:43 2026 GMT
Subject: CN=6975af33-4550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:49:1d:7c:31:eb:e9:08:75:f2:18:1c:09:
7d:be:37:1c:54:11:14:86:ba:e5:96:a2:b6:18:db:
62:38:b9:5f:4a:75:4e:2f:84:0e:8b:05:7e:12:58:
ec:69:43:26:8d:46:9f:c8:fe:f0:54:d5:45:e0:da:
01:f4:31:b5:b9:1f:ee:b7:21:61:5f:b0:13:2b:54:
2f:78:55:98:4f:c0:e7:5b:84:5f:22:98:ac:26:bf:
6b:48:31:07:f2:c4:1e:e3:70:ce:32:93:54:05:02:
c8:07:b2:83:15:ea:7a:87:a1:06:d8:e6:21:c8:0f:
d3:2a:1c:52:08:4d:9d:70:dd:81:7a:68:2f:c0:c1:
dd:57:44:96:bf:fd:7a:af:83:fd:25:34:63:4a:94:
34:14:99:6f:74:08:92:dc:e6:db:89:ca:96:0c:49:
d1:06:1a:9c:04:68:78:bd:54:af:92:0e:34:e0:36:
55:d3:13:4b:c3:b5:a9:f5:4e:a6:32:e7:05:a7:9d:
8e:f1:66:10:4c:8f:0f:dd:8f:78:07:5e:a3:4e:cc:
9f:c8:01:13:fc:ae:ab:49:b7:7c:1f:ae:ea:ac:36:
db:b1:c0:13:f1:77:d5:62:37:5a:7f:c7:e1:93:ff:
4f:4c:3e:ab:ab:e2:6d:98:0c:b0:95:60:46:37:5b:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:5E:2A:A9:19:82:01:D0:91:1F:D5:FE:C4:B9:7B:24:66:7D:2B
X509v3 Authority Key Identifier:
keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:bb:2a:33:fe:2d:84:1a:04:b1:32:41:e3:f1:12:92:89:
cc:f3:ec:96:ad:c9:3c:f6:9b:77:15:9f:1b:d3:d1:92:88:28:
e8:a3:31:5e:cb:97:72:28:87:2c:32:f0:66:d6:2d:bd:9d:5e:
4d:b3:29:9a:5d:73:e6:61:cf:f6:2a:3c:19:94:f2:e8:4f:c0:
28:3e:60:65:51:a8:a7:72:50:e9:46:be:18:1a:2b:69:66:f7:
36:32:b0:5c:c6:9f:6a:3f:93:80:e2:fe:06:ef:9e:58:c7:6f:
91:e7:92:f1:77:91:09:36:f6:ec:c0:c4:76:44:94:c5:cb:f3:
58:06:78:f6:bb:3b:8d:80:65:19:f1:6f:4f:64:65:dd:cc:51:
3b:66:5f:9a:76:f4:46:88:6a:4c:ee:68:ed:38:9b:96:21:eb:
49:ce:98:96:09:d5:23:10:37:fb:50:04:cc:eb:b3:47:fd:1f:
5c:92:2f:8a:bc:62:8d:df:40:f9:be:d1:e7:f2:d9:9a:e0:78:
6a:47:87:5e:1d:9b:3b:2e:2a:60:96:97:8c:35:4b:ec:d0:aa:
01:ed:2c:28:89:a8:e3:a2:91:07:34:e1:85:15:4d:34:b8:47:
35:b4:09:9b:06:39:8e:2e:14:d1:1a:c4:52:22:ad:31:ec:a6:
a6:9f:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:46 2026 by rpki-client