This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier: xvwWPcQ3bMCnhcsn/Oyoiw7u6aewDSEGJewDnjiOfRU=
Subject key identifier: 72:FA:EA:86:06:E8:CE:F8:A4:86:07:5D:F7:2A:50:99:A4:DF:21:04
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number: E8
Signing time: Sun 25 Jan 2026 04:39:05 +0000
Manifest this update: Sun 25 Jan 2026 04:39:04 +0000
Manifest next update: Sun 01 Feb 2026 04:39:04 +0000
Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: CGpnZtA+Rkx9cdvhbafHCSBQnprnyqZ5G3vQHzzjap8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Validity
Not Before: Jan 25 04:39:04 2026 GMT
Not After : Feb 1 04:39:04 2026 GMT
Subject: CN=69759e69-d922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:bb:64:ed:c7:94:78:71:04:77:7e:5d:a6:
fb:ea:c1:a8:0c:52:4b:b1:c8:ae:b4:33:e0:1c:7a:
51:21:71:81:1e:f3:5d:08:ea:3f:e7:1b:b5:aa:57:
f2:66:b6:c2:30:15:7e:ce:97:d0:04:47:ca:df:29:
64:84:c4:e3:f7:d1:03:70:e0:e4:b9:28:88:09:a6:
2d:05:d8:18:19:92:00:50:8e:4a:0a:5f:b7:1d:54:
c3:5d:4d:4b:8d:69:a3:bf:fd:aa:97:3f:44:08:e0:
7c:87:c9:05:40:cf:23:c6:d2:f2:ea:bf:5c:45:e6:
0c:64:27:66:98:26:24:c1:1e:51:03:40:c9:8b:4f:
a3:9e:ae:7a:64:40:9c:57:61:a1:32:e5:01:62:ed:
8d:4f:c7:cd:a9:d4:57:61:e9:6a:70:36:2d:87:f8:
a7:fc:a6:11:59:40:ea:9e:01:ac:18:6f:fd:c2:2b:
83:6c:64:61:7a:86:36:67:5c:a1:fe:94:21:2d:b1:
02:d3:be:24:b0:3d:61:4b:13:34:f8:3e:f8:97:bb:
51:4d:2f:f7:d9:90:0a:08:55:d6:e7:fc:74:60:fd:
fe:21:d5:20:84:52:ec:66:a7:b1:eb:ca:1e:73:a5:
f9:46:29:65:19:55:27:7a:60:25:9b:4f:29:e2:53:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:EA:86:06:E8:CE:F8:A4:86:07:5D:F7:2A:50:99:A4:DF:21:04
X509v3 Authority Key Identifier:
keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:2c:47:be:c4:75:8c:d0:8b:ad:7a:ed:0c:bf:a1:2f:ac:
c6:e7:c9:95:ad:64:a2:90:e3:e1:98:84:aa:ce:40:e5:22:df:
fe:e7:b5:2d:b1:9a:5d:e8:e5:c1:73:de:18:65:3e:c6:11:ee:
19:90:3b:d3:11:d5:03:5e:25:f2:05:d3:9d:00:30:4f:62:d5:
9c:9f:d9:76:e0:fc:bd:51:fc:c9:8e:51:2f:78:a8:a2:82:75:
e1:2c:ca:4e:0e:88:94:e1:a9:1d:99:ac:5f:31:7b:1b:88:ab:
1c:b5:8b:0f:85:69:8d:07:09:ca:a5:9c:5e:13:8a:02:3c:92:
dd:95:d3:58:df:c7:76:78:17:e2:0b:a9:7a:4f:1e:60:8d:7b:
35:cb:ef:76:90:71:1a:e8:a3:f9:3f:53:8e:1b:89:a7:d9:ce:
83:83:15:b8:94:0e:fd:d7:3e:4a:ec:a8:82:a8:d4:c6:fa:b1:
a6:88:17:c7:31:cf:ee:46:0d:72:f5:b4:33:c3:1d:cf:76:0a:
2f:6e:42:cd:22:85:3d:22:20:d6:3f:b1:36:69:75:72:5c:fa:
a2:54:3f:78:83:7b:bf:24:c6:8d:dd:49:eb:e8:15:be:3b:1b:
b5:52:74:d9:b5:0e:73:68:a7:fc:6a:61:9f:77:b8:e3:c6:51:
2f:93:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:14 2026 by rpki-client