This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: 95LU9MAQtEphFl4UVcN7CfwNSK/uutQuJO6t6ulpjGI=
Subject key identifier: 6D:11:6E:39:AA:20:01:AA:92:A4:80:EC:51:7B:BD:59:91:FF:C2:8C
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0CDD
Signing time: Sat 24 Jan 2026 18:41:35 +0000
Manifest this update: Sat 24 Jan 2026 18:41:35 +0000
Manifest next update: Sat 31 Jan 2026 18:41:35 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: KfNKOt7m4fzRTeFO6l/aabYUQybqrTQdMXyzY9MCZPg=)
2: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=)
3: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Jan 24 18:41:35 2026 GMT
Not After : Jan 31 18:41:35 2026 GMT
Subject: CN=6975125f-49db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d8:3a:66:d4:a4:56:75:ef:63:ae:2c:19:
6a:2f:82:7d:66:48:cd:45:a5:3a:1e:7c:99:48:b2:
40:60:df:c9:cd:92:84:28:ce:15:16:ab:03:34:0b:
b3:a2:3c:76:41:cf:9f:d6:f5:9f:d3:af:3c:e7:3e:
01:b9:b2:d0:08:d7:46:32:ef:1e:64:0b:9e:ec:03:
ba:66:60:2d:4e:2b:4a:9d:04:97:3e:09:d6:13:dc:
03:6f:71:5c:cb:38:90:9b:d7:cc:af:be:58:18:88:
97:3a:c2:52:1d:23:32:2a:46:f7:28:00:0b:fb:f4:
6b:5e:c1:f9:76:c9:e1:1d:66:75:60:91:d8:bb:eb:
4d:a7:c7:a0:32:24:6f:f5:a6:1f:71:63:eb:6a:88:
63:66:3b:c2:ac:2e:c4:84:51:93:30:f7:96:da:fe:
f9:09:65:bc:07:32:3c:16:0d:ff:97:f5:07:fc:b9:
ab:10:c1:b0:ad:62:0b:e3:1e:64:47:c0:d8:23:4c:
d2:df:4b:ef:ab:2b:60:be:be:04:d6:fc:38:49:65:
6a:bc:dc:23:87:ca:99:ee:6a:f8:08:c0:76:75:61:
d5:53:de:39:42:83:26:9f:13:1e:e5:3e:06:41:7b:
90:51:bc:d6:3f:4c:93:ce:73:3b:51:c6:23:e8:73:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:6E:39:AA:20:01:AA:92:A4:80:EC:51:7B:BD:59:91:FF:C2:8C
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:9a:f3:3e:93:58:b9:06:d1:de:be:71:6c:98:49:f7:67:
be:45:61:c1:d0:0d:f5:ba:3e:18:b0:e3:ae:16:6f:83:cc:43:
9e:3e:db:ef:9f:9d:5e:5d:31:d6:ad:83:6d:22:5b:3a:d4:61:
56:ef:5c:dd:31:d7:4d:8a:f1:37:d8:78:12:3d:12:6a:e0:84:
85:8b:6f:01:d5:be:05:b1:26:a9:31:e2:0c:2a:43:12:b1:9a:
07:d8:6a:0a:11:68:1e:b9:b9:6c:7c:f2:ac:3b:b9:70:a8:11:
fb:4e:1b:71:5f:3e:24:6b:84:7f:4c:96:5f:bc:c0:08:2f:70:
09:f8:0a:0b:b5:21:ad:5a:53:be:cd:66:b6:bc:23:27:e0:b4:
9d:37:62:d1:e8:6a:98:9c:6c:96:7a:4f:fb:1a:83:26:e6:9a:
c7:e7:7e:7b:11:e3:65:06:d1:cf:59:44:1a:9b:dc:e1:df:ed:
2b:a9:d5:e3:f6:19:39:0a:e6:cd:17:7a:c3:29:20:3f:7f:65:
8e:73:d6:fa:d2:0d:03:2e:9b:cd:fc:95:72:ce:20:44:f5:4c:
7e:42:bf:3c:8c:49:ff:55:17:b4:46:89:63:58:d2:01:90:b1:
47:0f:5a:d1:0d:14:52:6c:2c:48:8c:6c:89:59:0f:ab:fd:2c:
82:ce:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:17 2026 by rpki-client