This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier: fPtQ5WJ8r9YxNohzbQXNlofpSGHabN610RqeFwi+5fY=
Subject key identifier: 0C:FE:E5:FF:2C:A7:0B:BC:D9:97:2B:18:8A:84:BA:9F:FC:10:AE:43
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number: ED
Signing time: Sat 17 Jan 2026 04:31:34 +0000
Manifest this update: Sat 17 Jan 2026 04:31:34 +0000
Manifest next update: Sat 24 Jan 2026 04:31:34 +0000
Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: 1VdK596FVUHN274yFmxiYNWO+ddwPAhIlu4VWnugTNg=)
2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: X+68fVuVtHa5fnoo84w/HjubbFGCJvnyWNu2O/OuVfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Validity
Not Before: Jan 17 04:31:34 2026 GMT
Not After : Jan 24 04:31:34 2026 GMT
Subject: CN=696b10a6-a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:21:d4:cd:2c:ba:e1:10:17:e5:11:f9:60:
49:bd:8a:e4:86:6f:4d:7b:16:72:d0:76:66:eb:f4:
f3:3d:7c:8a:20:58:a8:07:de:b9:91:af:73:f9:bb:
81:5b:90:fa:4b:53:f5:a7:21:64:e9:8f:dc:22:52:
2e:ed:50:71:60:92:21:18:42:ce:0f:32:b3:89:89:
ef:ba:05:f2:69:72:d6:00:03:77:24:d4:58:16:27:
01:fe:8a:7d:da:39:20:fb:7e:ab:38:ba:80:e7:e2:
76:6c:76:a5:bd:12:3b:1c:b9:c6:00:78:97:9a:62:
08:4c:cf:e9:34:7e:0c:b7:30:da:f2:78:f5:a9:5f:
3c:8a:c4:b0:41:53:b0:70:95:a0:98:ef:c5:2b:34:
fe:a9:f5:05:a6:65:c9:8d:02:78:00:90:eb:89:7d:
10:2d:e6:45:0f:90:19:eb:ef:c5:10:2f:5d:18:d8:
b1:a5:39:14:39:b9:fd:e7:0a:88:63:62:e4:42:55:
df:d1:19:d2:e0:52:3e:fd:d2:43:3c:1d:08:65:c3:
58:d9:32:4b:27:e4:33:f9:5c:94:24:bb:f4:fd:68:
ec:68:02:4c:b6:49:71:87:b9:07:72:fc:f2:ae:2e:
a0:6d:69:c7:38:da:8f:55:58:dd:79:90:b6:92:5a:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:E5:FF:2C:A7:0B:BC:D9:97:2B:18:8A:84:BA:9F:FC:10:AE:43
X509v3 Authority Key Identifier:
keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:36:24:89:43:d7:df:3a:8a:5c:3a:75:c2:61:d1:28:30:
f3:45:f4:40:41:c4:9b:ff:09:9a:47:2b:5a:1c:84:4f:e3:ab:
4d:b3:15:42:9f:ec:aa:9a:49:48:17:a8:9d:d4:3b:71:22:54:
ee:5d:3b:be:e6:c8:4a:e5:0c:3f:e5:66:cc:97:81:f3:d4:6d:
dc:f7:1a:15:0d:6f:0c:cf:3e:d2:65:2b:50:7e:dd:e8:b1:6f:
e7:07:7d:07:b0:aa:a9:67:82:18:c8:dc:8b:13:66:a3:96:b8:
43:cc:95:10:00:e7:8a:6d:8d:66:65:ff:66:5f:e8:e9:ef:de:
da:e9:25:77:29:60:ac:5a:06:23:04:71:e6:56:d7:46:cf:86:
3c:48:0e:cd:c1:ff:8c:b3:70:8a:e6:55:9f:da:8b:80:81:3e:
89:18:3d:e4:f6:d6:e9:8e:ec:4f:05:a9:f6:66:53:e3:d2:24:
2f:fe:94:cc:f5:34:a6:75:0e:33:7a:e7:2e:f1:5e:34:10:0d:
5a:f0:cd:43:5a:20:05:01:97:ba:26:91:40:75:4e:91:2b:d1:
f8:ba:85:f9:9f:17:f9:99:cc:5b:91:93:31:ac:c6:e0:f5:5d:
c4:7c:c2:d2:18:96:24:38:75:d0:ae:90:c1:e7:da:a0:d6:f7:
dc:76:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:38 2026 by rpki-client