This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft
File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json)
Hash identifier: 7C4JQ/riT47cIQnsX9Pv2nsxeha7aGMegkpb+pE5Jco=
Subject key identifier: 99:7D:AD:11:B8:C1:80:6E:27:EE:5C:1A:1A:14:36:FF:34:28:78:C4
Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97
Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft
Manifest number: 6E
Signing time: Sat 17 Jan 2026 05:57:25 +0000
Manifest this update: Sat 17 Jan 2026 05:57:25 +0000
Manifest next update: Sat 24 Jan 2026 05:57:25 +0000
Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: RVWAKlBYG8M2J7KrvFIHvBgKjhzZ7hyCDmFVDtKqOrI=)
2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=)
3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl
rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297
Validity
Not Before: Jan 17 05:57:25 2026 GMT
Not After : Jan 24 05:57:25 2026 GMT
Subject: CN=696b24c5-53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:68:93:58:79:be:6c:f5:53:e0:3e:7d:03:
4a:28:34:25:2d:af:ac:cb:fc:c6:5b:f1:36:72:66:
92:a0:aa:41:b8:38:63:c0:cd:a0:69:57:cf:e6:54:
8b:2c:a4:cc:dd:7e:01:85:6b:90:0e:dc:69:9e:62:
9e:31:f7:04:8e:8e:d6:7c:44:38:d0:0c:0b:8c:1d:
b5:6d:70:28:a7:c8:4b:04:4f:2b:21:85:7d:41:ed:
80:f3:36:dd:26:7b:b6:7f:91:3d:61:64:99:69:6f:
54:f0:d2:3d:b2:32:8a:aa:26:90:ca:81:bd:08:82:
c5:01:cd:e3:92:87:99:33:21:65:84:fd:f7:85:89:
9a:06:f0:8d:b9:04:99:2a:6c:39:22:a2:f3:10:5e:
75:a1:b4:8d:8a:73:47:f2:22:8d:c9:9c:e2:ee:da:
96:a6:6d:fb:38:86:3c:24:a3:32:6e:b0:b3:38:92:
57:47:d7:25:17:ca:9e:31:20:e1:9c:da:4e:59:f2:
0f:70:a4:21:76:be:90:27:db:80:6b:4e:42:25:3d:
b8:8d:7f:35:19:ae:ab:0e:a5:a5:f3:a9:08:c6:b6:
51:85:1e:e2:94:4c:05:1f:c2:74:53:34:00:27:82:
b2:9d:05:f3:88:18:38:b7:0e:ab:75:c1:57:e6:33:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:AD:11:B8:C1:80:6E:27:EE:5C:1A:1A:14:36:FF:34:28:78:C4
X509v3 Authority Key Identifier:
keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:90:31:7f:97:69:d1:53:52:42:d8:e1:72:6f:fa:09:d9:
b3:3a:b2:b8:5f:08:47:8c:2f:80:d3:01:e6:09:66:20:c1:aa:
62:b5:31:7d:45:6a:46:15:15:e4:61:1c:57:f3:99:4f:96:10:
58:64:1e:94:9a:78:17:8d:3b:8b:cd:0f:f8:6c:9f:c5:72:a3:
ff:e7:38:be:f7:60:f4:2a:fe:f6:d5:d9:0b:9f:5d:f5:b9:8d:
be:af:1a:d2:06:c2:f4:cd:59:04:36:52:f5:48:ca:bf:5c:24:
80:a7:ad:b4:35:ca:06:4b:17:df:b2:70:27:f7:c4:57:76:1f:
3d:58:ae:12:2c:f7:a4:4d:ae:74:3c:e7:3f:b0:36:8c:06:c3:
a5:99:fd:e2:36:9f:d5:4b:87:6f:ee:51:d8:8d:bf:3a:7e:21:
6b:47:34:28:6a:e4:76:ad:12:ce:f2:84:81:d3:7a:65:62:d1:
d7:f0:9c:98:e0:35:cd:fe:bf:98:4e:13:80:fd:76:e9:ff:68:
ff:d0:10:a9:97:a4:89:51:d9:e8:ca:ee:29:6b:b4:ef:34:6c:
ef:89:cf:29:a8:e5:8c:78:ea:7d:61:dc:e3:98:78:b1:a3:55:
91:ca:9e:5e:6e:b1:27:8e:b7:f0:46:06:7d:83:50:55:8f:97:
3d:7f:64:3e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2
NjhCNjI5NzAeFw0yNjAxMTcwNTU3MjVaFw0yNjAxMjQwNTU3MjVaMBgxFjAUBgNV
BAMMDTY5NmIyNGM1LTUzYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMzmiTWHm+bPVT4D59A0ooNCUtr6zL/MZb8TZyZpKgqkG4OGPAzaBpV8/mVIss
pMzdfgGFa5AO3GmeYp4x9wSOjtZ8RDjQDAuMHbVtcCinyEsETyshhX1B7YDzNt0m
e7Z/kT1hZJlpb1Tw0j2yMoqqJpDKgb0IgsUBzeOSh5kzIWWE/feFiZoG8I25BJkq
bDkiovMQXnWhtI2Kc0fyIo3JnOLu2pambfs4hjwkozJusLM4kldH1yUXyp4xIOGc
2k5Z8g9wpCF2vpAn24BrTkIlPbiNfzUZrqsOpaXzqQjGtlGFHuKUTAUfwnRTNAAn
grKdBfOIGDi3Dqt1wVfmMxb9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmX2tEbjB
gG4n7lwaGhQ2/zQoeMQwHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx
NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx
UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE65kDF/l2nRU1JC2OFyb/oJ2bM6srhfCEeML4DTAeYJZiDBqmK1MX1F
akYVFeRhHFfzmU+WEFhkHpSaeBeNO4vND/hsn8Vyo//nOL73YPQq/vbV2QufXfW5
jb6vGtIGwvTNWQQ2UvVIyr9cJICnrbQ1ygZLF9+ycCf3xFd2Hz1YrhIs96RNrnQ8
5z+wNowGw6WZ/eI2n9VLh2/uUdiNvzp+IWtHNChq5HatEs7yhIHTemVi0dfwnJjg
Nc3+v5hOE4D9dun/aP/QEKmXpIlR2ejK7ilrtO80bO+Jzymo5Yx46n1h3OOYeLGj
VZHKnl5usSeOt/BGBn2DUFWPlz1/ZD4=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:53 2026 by rpki-client