This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier: a3limt3YKfV0tKiXGTp/4n3hoIcpf7rPYIUQFFZpjsk=
Subject key identifier: 3D:FB:F9:57:35:7A:46:07:07:DE:54:A6:6D:63:15:4F:C6:13:84:6C
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number: 0741
Signing time: Sat 24 Jan 2026 21:08:23 +0000
Manifest this update: Sat 24 Jan 2026 21:08:23 +0000
Manifest next update: Sat 31 Jan 2026 21:08:23 +0000
Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: T6rYEccHSqRbnz7FhgVed9+vyH96NDB9lzOqaZSs5Bw=)
2: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=)
3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=)
4: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Validity
Not Before: Jan 24 21:08:23 2026 GMT
Not After : Jan 31 21:08:23 2026 GMT
Subject: CN=697534c7-f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:cf:e2:f2:0e:bf:19:e6:7f:e8:48:25:25:
1b:02:37:37:ae:6c:3d:fa:27:0d:28:b3:a6:63:d7:
f1:00:ae:41:23:ea:67:36:12:48:73:a2:2d:06:58:
fa:0b:76:e7:7c:ac:db:d6:9e:b8:da:f4:d2:0a:76:
94:22:d0:05:1d:a5:45:ea:81:39:1e:70:b8:3e:8a:
88:27:3e:52:b2:db:35:e3:f1:b6:5e:06:00:45:3e:
57:9a:ba:b4:68:0f:79:d0:84:c1:49:14:06:10:00:
b5:a4:79:42:cd:b5:b3:27:2a:02:d6:8c:a7:29:74:
31:47:d8:49:2f:7d:ad:91:92:c1:f7:f5:ce:93:7f:
98:11:d6:53:63:1a:e8:fa:1a:c7:65:41:1b:dd:ff:
bd:cd:2e:b9:d7:81:fd:51:0d:2d:c5:7f:90:78:86:
c8:f6:93:62:78:cf:27:08:5d:cb:7d:b6:50:fb:90:
20:3d:57:b3:4f:6d:38:5f:ce:0b:7f:33:9c:60:7c:
e1:8c:7d:67:93:2c:1d:5a:36:00:b6:38:47:d6:ae:
4c:0b:93:75:09:b6:7c:77:86:d0:02:af:55:1a:a6:
79:0d:a7:28:84:01:8a:a3:f4:ea:b4:b7:09:98:c0:
8c:d1:02:bc:29:e4:6b:ff:7b:e7:83:5c:3b:b8:dd:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FB:F9:57:35:7A:46:07:07:DE:54:A6:6D:63:15:4F:C6:13:84:6C
X509v3 Authority Key Identifier:
keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:5a:db:1a:97:52:7f:fb:a3:4f:1d:ea:29:ac:0a:fb:7d:
46:e6:78:66:35:a2:28:82:cd:8c:1c:dc:a1:e1:f6:55:cb:e9:
74:37:3a:ac:6f:70:33:b3:29:f9:08:c0:18:53:a0:a0:d6:3c:
aa:c2:86:d7:a5:0d:80:48:0c:2a:6f:73:17:ee:9e:1e:94:9f:
f4:cf:bc:33:19:cf:e9:37:1a:ca:35:79:ad:a6:74:01:5f:cd:
c5:5e:31:5c:ea:1e:2c:f6:c1:7b:de:93:76:6c:ca:bb:8c:80:
7b:68:08:49:bf:8f:8f:fe:5c:6f:1f:d4:b2:55:1f:e7:e5:1f:
df:f8:61:7d:34:b9:d2:e2:89:3c:c3:00:b6:43:27:b8:06:d5:
30:c7:af:d9:88:f4:b6:11:be:6a:85:1b:cc:4b:10:00:1f:f5:
45:08:fe:e3:92:53:61:11:b4:23:12:c3:64:37:7f:31:f2:85:
ed:74:fa:9c:11:d3:29:a9:d4:da:0a:5e:d4:80:7f:eb:ca:1d:
56:c6:fc:1f:b2:1d:02:63:9d:da:78:55:2c:ad:7f:7e:43:d9:
52:29:79:70:5f:cb:e6:02:eb:52:3f:48:57:87:8b:61:b7:a3:
c6:01:2e:11:e2:2b:a6:61:23:1c:37:ae:5c:22:5b:57:85:fc:
25:99:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:25:22 2026 by rpki-client