This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier: J1fmApK1v78bCVhLAGuU5WB41DcFANzcvIh4or0ozYQ=
Subject key identifier: 60:91:E3:87:BC:FD:69:BE:DB:F4:86:AE:0B:B4:19:C2:0B:7A:94:A6
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number: 015E
Signing time: Fri 23 Jan 2026 03:37:50 +0000
Manifest this update: Fri 23 Jan 2026 03:37:50 +0000
Manifest next update: Fri 30 Jan 2026 03:37:50 +0000
Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: Yz01GMtzd4fFxP7ln4iGzN8Lr0282scwBbJ320sD3yI=)
2: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=)
3: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=)
4: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Validity
Not Before: Jan 23 03:37:50 2026 GMT
Not After : Jan 30 03:37:50 2026 GMT
Subject: CN=6972ed0e-d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:e6:bb:d9:27:ad:3e:73:7d:98:fc:33:9a:
65:02:ef:0d:9c:c8:76:64:e2:53:10:d8:c4:68:96:
42:4c:6f:b5:9b:5c:ad:83:17:4a:ac:59:37:86:c5:
a4:6b:41:bf:e6:52:cc:ef:53:9d:5f:3b:c1:de:18:
2e:b4:7c:63:a1:ba:e0:c2:8b:69:23:5c:31:65:6f:
ca:f4:ce:50:d6:79:a0:34:63:6c:01:dd:66:96:52:
f2:75:13:56:e2:0b:0a:90:bc:58:0b:50:b8:3b:84:
a8:d8:05:51:85:a1:b3:15:7a:24:81:37:50:1d:40:
e6:72:85:9d:ee:25:3e:ab:41:b8:29:e3:c9:55:76:
2b:04:f6:09:fc:66:27:f6:1c:56:30:fe:db:4d:e2:
df:32:68:6f:f0:10:55:8f:ee:84:9f:46:9e:cc:6e:
2c:f0:15:ee:98:38:19:4b:ca:4f:39:38:6b:67:1d:
2f:c6:a6:a0:19:d4:72:48:8f:ae:54:d9:91:88:15:
4c:1b:6e:0c:8e:4c:c8:70:9d:63:46:a0:14:42:6f:
b7:51:b4:26:88:11:eb:ec:71:ef:30:f9:38:44:e0:
cc:55:a8:5e:4e:69:6e:a4:e4:a7:ab:37:f6:65:9b:
09:16:99:29:8a:e5:e5:fe:de:a6:de:b7:c1:9a:a5:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:E3:87:BC:FD:69:BE:DB:F4:86:AE:0B:B4:19:C2:0B:7A:94:A6
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:2a:1a:7f:e9:ae:4e:11:2a:22:ff:9f:48:6b:91:6e:82:
77:76:c3:9e:71:c0:a4:43:ab:f4:08:ab:ac:45:0e:e0:7e:36:
34:2d:00:19:cf:63:98:9f:88:99:c2:7d:6d:25:c7:7d:e9:ad:
86:20:0f:73:8e:ef:24:c2:b3:0e:8f:0f:bc:c7:76:81:e8:12:
d1:4f:4c:6d:0c:8d:97:7e:dc:cf:77:bc:a8:2c:a9:97:f3:66:
80:fe:22:af:35:c6:1d:2b:62:ac:fb:4b:1c:fe:3b:31:fa:b5:
e9:bc:dc:86:e4:f3:de:4a:65:96:fa:53:85:1e:f7:ec:2f:2a:
95:aa:a3:0c:fe:fb:14:8a:97:9b:9b:fb:5a:e5:4e:d0:77:da:
f6:59:5d:0c:b5:f6:62:01:85:05:73:9c:a6:dc:3e:ba:f7:3d:
6c:c9:7e:4c:1e:f8:c6:e3:fa:53:68:ca:64:83:ea:5a:2b:1e:
9a:f7:27:96:46:6c:cb:29:c6:be:0d:be:39:19:34:1b:dd:a3:
19:2f:dd:2d:e1:43:8b:11:15:0d:c2:c6:b4:7b:e0:b6:8b:96:
ce:57:d8:ed:d4:04:74:11:e1:4a:2b:7e:27:ca:b1:6d:42:83:
6c:ea:7f:5b:14:d7:68:36:76:5f:23:ba:79:f7:2c:a2:c7:dc:
2a:1c:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:49 2026 by rpki-client