This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File: 6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier: QQwFXmzZxyiDkKzN3duJGxy1uz9bKL67Ysd714T6U9Y=
Subject key identifier: 42:B0:5C:3A:F0:24:02:D9:26:F6:B2:30:FB:C7:1A:97:1A:63:82:A8
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number: 24
Signing time: Sat 17 Jan 2026 06:43:17 +0000
Manifest this update: Sat 17 Jan 2026 06:43:16 +0000
Manifest next update: Sat 24 Jan 2026 06:43:16 +0000
Files and hashes: 1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: RCw1gtXg76RXdX0GUdqNOQMM2SraUR8J0j6NhgM3teE=)
2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: OVDXYXiPK6DUjh7GuuPjYLe4oNz6kILt+KBikGM4NtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Validity
Not Before: Jan 17 06:43:16 2026 GMT
Not After : Jan 24 06:43:16 2026 GMT
Subject: CN=696b2f85-aaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:71:c7:7f:ea:a8:65:8f:97:7e:d7:10:84:
93:43:28:41:98:3f:97:5d:22:b8:9f:d9:51:44:fd:
b7:7c:10:f6:21:e5:bc:4c:e9:e0:c3:f9:04:9a:15:
2e:88:17:dc:c0:3b:0f:9c:40:7e:d1:6b:3a:bd:62:
02:19:6b:04:66:21:d4:f0:31:89:2f:d3:a4:1b:81:
25:bc:f7:2d:f1:ad:2c:89:e5:8e:d5:32:ef:ab:4e:
4d:1f:d9:3a:ee:a0:ca:2f:92:8f:a9:8b:b7:03:82:
b9:03:ef:c1:4e:d1:45:c0:90:97:94:20:8d:42:2b:
2c:b0:c9:34:c7:a7:4c:29:f0:87:37:02:a5:34:83:
03:e4:23:d5:e0:6f:58:14:eb:f3:eb:d4:ce:bd:b8:
6b:4a:df:a1:fd:64:41:dc:13:9c:39:7b:ec:51:cf:
6c:ba:bc:62:38:a7:6b:6e:73:64:36:31:c4:bb:ee:
d5:00:b5:18:ad:7c:6d:e2:e1:69:8e:57:bb:fd:69:
df:a9:a0:40:e8:86:e1:26:38:2e:ea:88:bb:91:65:
1a:85:74:85:38:b5:81:60:1c:a4:a0:47:0a:e1:d1:
ce:06:b7:e0:8e:ff:4a:c1:bf:8d:49:44:cb:2b:9d:
e9:14:58:f1:c1:81:bf:fd:a0:86:09:86:2e:ae:60:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:5C:3A:F0:24:02:D9:26:F6:B2:30:FB:C7:1A:97:1A:63:82:A8
X509v3 Authority Key Identifier:
keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:00:2f:96:ae:01:0e:f4:8a:e8:05:63:16:69:2a:47:cc:
e9:0f:79:55:dd:19:47:c0:79:d8:48:ff:0a:a0:90:cc:14:e3:
63:e6:25:c6:50:53:44:4c:cf:0e:c9:40:0c:96:99:3e:ed:47:
8c:a3:01:62:52:c3:c7:2b:9c:ce:51:38:84:b4:3a:ad:e6:54:
af:c9:56:e8:9d:4e:17:44:91:0b:b7:3b:c9:a8:b6:46:6a:7a:
a4:93:b1:ff:64:c5:03:b4:12:b7:9c:8a:62:10:8a:b2:38:0d:
7f:bc:1b:79:91:f0:6b:77:69:bd:73:45:96:04:2e:85:ba:c4:
c0:04:98:8c:46:cc:2e:f9:ef:44:c3:cb:40:e7:c5:09:a5:a9:
23:24:4c:49:d6:90:3b:d8:94:4f:53:8e:a0:ad:06:ef:86:03:
43:bb:9d:78:0b:d3:ec:75:d8:dc:62:0f:ca:71:b1:8c:f1:59:
63:2d:6a:40:a4:1c:63:08:b6:15:db:e0:f4:31:f8:c4:83:4d:
c3:de:89:47:88:e1:57:be:21:1f:fb:e8:3f:9b:87:e2:03:33:
74:46:35:49:dd:16:78:db:0a:05:90:7e:1f:73:dd:61:96:cd:
e0:f6:4f:8d:98:21:f1:8e:ce:49:d6:fa:1b:1b:dc:2d:87:13:
23:c5:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:21 2026 by rpki-client