This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: lqJdR0Y5NenWbz+8kNr/SPhHZ8GfpepRLLforpz7n64=
Subject key identifier: 36:40:44:71:81:EA:5D:5F:DD:28:90:63:A2:44:AB:D6:42:12:5E:B3
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 06F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 06E7
Signing time: Sat 24 Jan 2026 21:22:57 +0000
Manifest this update: Sat 24 Jan 2026 21:22:57 +0000
Manifest next update: Sat 31 Jan 2026 21:22:57 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: 36q35BKUwTLini9O3lcHXnsxQI4Ser5RHy6uF47Cjq8=)
2: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=)
3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Jan 24 21:22:57 2026 GMT
Not After : Jan 31 21:22:57 2026 GMT
Subject: CN=69753831-4ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:14:a2:ae:3c:78:84:d0:6b:25:b6:16:c3:
05:4c:b1:36:ac:c2:07:a5:c8:75:31:c6:79:53:81:
99:d9:1e:95:2c:5e:f4:4a:6f:93:94:9f:00:c5:92:
e5:f8:3a:71:0c:2c:a9:65:8e:27:76:8e:24:02:b2:
b0:e4:15:41:df:c5:e5:e7:b9:4a:2f:5f:85:c3:66:
39:9a:05:c1:96:4f:b9:1b:54:83:a0:ea:c3:01:13:
f1:7d:a0:cf:4d:e0:13:01:90:5b:f3:40:1a:6e:69:
f3:17:dd:32:4d:95:ae:62:04:89:0d:cf:0d:ec:ec:
0d:ab:9e:d0:8e:0a:47:5b:31:d3:eb:72:7e:de:b1:
03:38:a6:89:34:55:52:4c:46:cb:e8:4d:22:e2:fa:
71:43:7b:5a:ad:88:c8:34:a8:76:cb:6f:47:fb:34:
a9:d8:b3:0d:28:9d:2c:55:f4:4a:c8:95:20:cd:ad:
9b:0b:5d:99:3e:0f:90:89:99:43:1b:96:1a:f5:61:
4a:39:bf:a3:09:2b:56:3d:e6:47:43:e4:7e:89:f0:
1c:99:6c:57:17:c9:78:09:bf:23:f4:7c:53:33:05:
60:46:cf:8b:7f:3b:3e:4d:f0:14:ac:5c:bb:4b:ca:
df:ad:db:de:8c:8e:8c:fe:38:14:94:a0:37:97:33:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:44:71:81:EA:5D:5F:DD:28:90:63:A2:44:AB:D6:42:12:5E:B3
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:15:1b:49:8d:8a:3f:7f:33:83:a5:d3:9c:ff:89:0f:4d:
64:91:0c:02:0f:93:1c:fa:d6:bc:5f:53:c8:fc:d7:21:7e:f3:
40:61:81:c9:0e:e2:8d:93:6c:46:cf:01:14:6f:11:6b:8a:f4:
40:0e:67:75:14:67:41:96:0e:de:cb:a4:e6:22:90:4b:a7:c1:
25:d2:6d:18:05:27:3f:68:31:3d:84:31:4b:b2:be:25:ab:1e:
1b:09:99:05:c5:3e:ee:c1:28:64:9e:9f:04:b8:0f:6d:ab:81:
77:33:e0:45:6f:36:57:e9:bd:95:d7:32:30:7d:28:68:f3:ca:
1a:cb:c7:e4:b6:b0:9e:0a:cd:fc:70:76:10:ce:0c:e6:6e:1b:
08:61:38:37:3c:82:77:98:a6:5d:e9:89:d4:0a:72:89:b3:05:
38:88:04:32:15:a7:0f:3c:ea:ee:80:15:6e:23:a6:89:cb:b9:
01:65:e4:1e:6d:ae:9d:a2:2b:5b:2a:da:50:87:a8:3f:cf:bb:
83:4d:a0:ca:c1:79:f6:9d:c4:cf:0e:76:eb:a7:60:e6:a0:9c:
ad:6e:53:8d:32:b2:d2:4c:29:1a:8b:f3:cf:9c:4b:24:7b:1b:
db:1a:d8:17:61:9c:d7:61:82:0b:10:ac:1c:7e:85:42:8c:49:
1e:15:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:06 2026 by rpki-client