This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json)
Hash identifier: 6sqOK3MPzfg6Y/xkHdE7vDZOVVou2pJVWEIorZ1NYzw=
Subject key identifier: B8:E5:F4:0F:20:48:29:8B:24:DC:17:DE:B7:14:89:EC:43:49:DC:67
Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Certificate serial: 0A74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
Manifest number: 0A69
Signing time: Sat 24 Jan 2026 19:06:26 +0000
Manifest this update: Sat 24 Jan 2026 19:06:26 +0000
Manifest next update: Sat 31 Jan 2026 19:06:26 +0000
Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: 09OQa0jSMKCZcllcAbSLVg7na6ZkAyjd3Epbm2Z4xCw=)
2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Validity
Not Before: Jan 24 19:06:26 2026 GMT
Not After : Jan 31 19:06:26 2026 GMT
Subject: CN=69751832-34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:1f:e0:fe:19:d2:f0:d7:3d:c7:bd:c0:6a:
c3:1f:a5:3c:d3:d3:78:ca:d2:47:83:66:82:b4:53:
3a:f0:32:1a:dc:f3:a6:b6:51:05:07:8e:90:26:78:
5c:78:38:90:fb:a1:e1:52:7c:93:fc:0d:c2:90:91:
21:20:a1:eb:11:8e:bb:6a:a3:c9:1c:f2:a3:66:a9:
d9:04:1c:5d:09:d1:d5:ed:87:5b:84:e5:c2:e6:ea:
d5:e6:5e:18:93:ce:a3:2e:80:7d:30:49:8b:0d:57:
2c:6c:d7:e0:1e:bb:14:6f:1f:3c:a6:44:07:30:91:
f8:9f:fc:66:9f:df:10:06:b1:d9:fc:68:5a:23:e3:
5b:48:75:b1:ae:1c:25:9b:a5:66:5b:21:b7:57:32:
cd:0c:f8:7b:3a:f7:fc:67:e1:ec:0e:ea:34:e6:4d:
4e:09:d5:d6:66:9b:11:61:2f:37:53:f0:32:be:70:
4c:7b:a4:a2:d4:0c:85:4a:df:41:6a:10:c1:a8:25:
4e:eb:e9:87:b0:f9:c7:27:92:2c:71:f2:b5:0f:0f:
03:20:28:de:ce:59:7d:c4:d4:68:20:84:91:be:b5:
55:58:50:51:78:75:03:72:5e:47:53:8a:5a:18:00:
d9:bb:26:98:dc:08:e1:a2:70:ed:84:68:91:d0:42:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:F4:0F:20:48:29:8B:24:DC:17:DE:B7:14:89:EC:43:49:DC:67
X509v3 Authority Key Identifier:
keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:d9:8c:1a:d2:91:1f:82:e1:98:f5:3a:62:30:c2:c2:62:
eb:3f:a4:c6:3b:e9:35:38:70:4c:28:95:07:39:3e:f2:85:c4:
8f:83:fa:e2:50:9f:f1:a0:22:ea:73:16:a8:91:51:fa:d3:ee:
9a:f9:ff:ee:fa:b1:21:e4:81:af:6f:1c:3b:4d:2c:b3:29:14:
bc:63:19:c3:0e:86:57:fd:b5:c9:38:fb:2c:72:5d:8b:19:d9:
47:49:a8:0f:8c:8b:d7:c2:c8:2d:a3:e1:59:39:c1:e1:19:a9:
88:73:5c:5f:e2:1b:f9:c2:a0:dc:aa:ed:0b:50:c9:60:b9:5f:
34:ac:12:93:64:1e:42:24:7a:2f:9a:62:66:67:7a:09:a7:c5:
00:64:cd:62:2b:15:fb:6d:51:c6:6a:4c:38:78:17:08:db:56:
8d:ad:17:aa:97:f1:43:f1:08:a1:ee:85:9f:d6:c5:4e:0f:3e:
c8:92:af:c9:fa:8f:49:1a:ca:f6:bf:0a:26:ac:7a:ce:46:6b:
ae:45:01:d0:d3:b0:ac:91:93:95:41:39:06:69:0e:95:e9:15:
64:db:4b:0d:c7:d9:8c:68:91:2c:15:97:71:33:00:52:b2:86:
35:6a:d8:bb:53:17:81:27:3e:f9:24:89:a7:d0:70:dd:a3:17:
5b:8b:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:55 2026 by rpki-client