This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json)
Hash identifier: 4pKCv0Q6x50WbRvW6oC6fEeASwVvy3YY/64u8/Rn0SU=
Subject key identifier: FE:3C:AC:48:58:62:47:B2:24:81:80:A0:A0:B6:C0:94:EA:91:43:47
Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
Manifest number: 30
Signing time: Sat 17 Jan 2026 06:45:42 +0000
Manifest this update: Sat 17 Jan 2026 06:45:41 +0000
Manifest next update: Sat 24 Jan 2026 06:45:41 +0000
Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: CnARYlVmpOZCUr7e3Aq8o5sUqxiGzjR7l2cCttxGz2A=)
2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: Y96pVTrMdeKkXESI3mBfKCnkNu7eLETGHBB6EtnJI3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B
Validity
Not Before: Jan 17 06:45:41 2026 GMT
Not After : Jan 24 06:45:41 2026 GMT
Subject: CN=696b3015-39b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:07:28:cc:bd:53:b7:ff:a3:a8:3f:97:c0:
71:35:85:65:2b:14:59:b1:f7:d0:e5:a0:53:58:a5:
a6:0b:40:06:87:75:3b:cb:d1:98:13:8e:a3:ca:e0:
7a:47:3f:6f:1f:b4:78:2b:83:4b:66:34:98:3f:6a:
df:4e:1b:c6:9e:66:d2:b9:a0:c9:be:97:9e:5a:d6:
63:79:d7:29:5a:d3:1a:9b:34:c8:ff:54:71:fd:40:
80:ee:73:36:30:44:32:f9:93:c8:cd:93:3f:3a:75:
98:57:4d:5f:d2:c5:a0:0c:3e:82:3f:f6:9f:2a:6c:
59:c8:62:cf:6c:aa:f7:3c:77:36:52:1a:b8:3d:1d:
67:6d:4c:5b:05:2b:44:b0:3b:44:5e:85:77:8b:ae:
f1:d8:81:67:e0:da:25:d6:62:80:24:03:6e:34:78:
48:55:18:cd:f9:97:a4:63:fe:f5:2d:aa:ab:49:20:
70:d9:d8:ed:f5:52:57:f8:d7:e8:eb:de:0f:90:fe:
93:9f:dc:2f:c8:f9:31:75:c5:70:1a:2b:b0:53:e4:
dc:46:ee:9f:64:94:ff:b4:ef:06:c9:09:04:95:9d:
b1:9f:b4:e5:64:46:4c:83:73:27:52:3f:b0:1d:b1:
6b:88:a7:0d:9b:3c:6c:92:7a:87:b5:c7:46:be:f4:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:AC:48:58:62:47:B2:24:81:80:A0:A0:B6:C0:94:EA:91:43:47
X509v3 Authority Key Identifier:
keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:97:8c:d2:65:63:24:d7:52:05:f2:c5:e4:a4:b0:62:db:
95:e7:f2:a4:21:24:68:57:96:75:ee:ab:82:99:3e:89:36:0f:
fe:97:df:c3:d9:bb:4b:bf:f5:08:0a:c4:dc:68:9c:03:eb:90:
99:d9:78:81:55:d3:b2:4d:45:13:b8:9d:01:1a:db:92:db:45:
a6:61:a8:d1:5d:c1:9b:62:95:fb:0d:db:d9:c0:24:1f:30:86:
e9:41:6b:dd:1c:2f:82:14:9b:74:e7:39:b0:66:25:95:af:7e:
3b:ea:a7:6e:17:55:0a:0d:24:0a:d8:8a:85:a4:45:94:21:13:
91:04:89:95:05:8c:f8:a3:63:4d:b1:d3:98:35:72:df:46:d6:
47:b6:bf:48:c0:d7:3e:a0:8f:97:4d:64:7f:bf:1c:5b:7e:7f:
56:8e:1a:29:18:57:d4:d1:f1:d7:b2:29:ee:75:c8:5f:da:e1:
81:93:97:a2:5c:fa:f8:70:25:81:b7:97:30:13:cf:32:f0:a3:
44:1b:7e:16:f2:16:e7:6d:35:0f:b7:f1:e5:23:45:0b:30:16:
8e:33:f9:eb:be:a4:0c:55:ba:bd:0e:bb:ba:3d:af:91:01:79:
df:30:a7:b5:46:8f:ef:71:2c:ed:f3:8c:d1:04:d7:de:f2:70:
ed:65:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:34 2026 by rpki-client