This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier: zuC8Y73MFaeRjs6Zp6X3EjfVrHGiYFFcQegGLDusFuM=
Subject key identifier: 40:DA:9B:FD:78:0E:7E:E5:03:FF:EE:0E:4B:86:7D:8C:22:09:AB:D9
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial: 105D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number: 1053
Signing time: Sat 24 Jan 2026 17:06:17 +0000
Manifest this update: Sat 24 Jan 2026 17:06:17 +0000
Manifest next update: Sat 31 Jan 2026 17:06:17 +0000
Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: Fcsq5R9CTiPhbtMomjK67vfBztI/BMl39ghYg89V+5Y=)
2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4189 (0x105d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Validity
Not Before: Jan 24 17:06:17 2026 GMT
Not After : Jan 31 17:06:17 2026 GMT
Subject: CN=6974fc09-4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:16:c4:fa:59:d9:86:cd:8f:74:5a:74:8a:
03:f2:c9:54:9a:d2:fc:88:1b:37:c6:3a:96:d9:bc:
e6:5f:44:44:93:e5:d2:22:97:76:47:db:3d:c7:09:
17:ea:66:bd:97:f5:17:9a:a1:ea:1b:70:00:25:45:
cd:94:82:b0:ae:18:b1:99:c3:98:ae:fb:ed:9d:bc:
23:88:2d:42:c0:da:dd:06:c8:4a:b9:9e:2c:97:ac:
e4:49:24:4e:8b:45:8d:22:2a:7f:98:a4:5d:8a:ec:
09:ec:d6:3e:87:ff:f2:dd:7e:24:92:1b:0b:cf:45:
cb:a6:bf:35:a2:64:e2:b2:84:13:fe:39:65:19:f4:
76:40:b1:82:79:b3:d4:5e:e6:c7:64:24:4c:4b:30:
1d:8f:60:f8:ad:7f:32:53:06:12:3f:7b:a3:ae:25:
cb:74:7d:e1:93:92:65:2a:e7:79:d2:a1:31:e3:8c:
2c:e2:61:53:45:f8:24:48:1b:20:de:30:49:ab:dd:
e8:2b:30:3e:1e:37:6a:ff:1e:fa:89:f4:50:8e:ee:
e2:51:f6:bb:cd:af:0e:e3:46:4f:60:c1:db:ef:fd:
79:ca:18:da:89:25:2f:cd:52:3c:74:67:f1:df:8c:
4e:ad:1e:23:f5:f7:17:32:a3:71:3c:4d:b2:05:ad:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:9B:FD:78:0E:7E:E5:03:FF:EE:0E:4B:86:7D:8C:22:09:AB:D9
X509v3 Authority Key Identifier:
keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:75:ac:c2:14:1f:5f:cb:d4:9c:34:a7:fc:d9:85:90:9d:74:
80:f7:47:e4:64:72:74:1a:c8:51:02:fc:5b:5a:09:6c:4f:b1:
ae:97:2f:e8:b6:9f:6e:3a:60:25:6a:22:bc:de:a4:1b:7f:4d:
fd:f2:5c:04:9b:1f:ee:d0:ff:8a:e3:99:0e:d3:ed:09:2f:2f:
46:e2:26:03:6a:5c:fc:02:7c:91:f3:c7:00:f9:52:61:f1:12:
29:42:d1:23:68:93:88:72:3a:c6:e3:4e:c4:c4:78:33:31:0d:
36:c3:a0:dd:b5:96:ec:5a:0c:52:ff:fe:07:a4:bb:cc:e7:b2:
08:39:f6:f4:5c:67:c0:90:01:67:a7:27:2b:fd:29:2b:5f:57:
b6:ec:f3:66:5d:e5:07:a7:a3:8b:66:d8:0e:f9:05:82:4c:93:
36:45:63:d2:1b:a7:93:55:6d:09:5c:fa:f1:63:fd:6e:cd:52:
f1:2c:df:56:08:9f:b9:20:e0:96:c6:56:24:1b:35:70:e6:0e:
d9:56:15:c7:77:cb:fd:38:64:86:5b:12:78:00:e6:e2:7e:b3:
22:9a:cd:24:f7:6b:a6:b6:9c:4a:b3:c2:3a:0a:30:a1:e7:a3:
f3:da:79:53:77:a8:d6:6a:b6:5e:6a:45:94:47:38:47:0c:62:
7a:c9:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:38 2026 by rpki-client