This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier: xXr6LzDAw5WCj0wTYnGM7i7BsDfuY55ZvBramHqJF/Q=
Subject key identifier: 26:58:F5:10:4B:F5:77:25:B8:1E:68:AB:62:03:2D:A0:2E:A9:A9:84
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer: /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number: FE
Signing time: Sat 17 Jan 2026 04:20:58 +0000
Manifest this update: Sat 17 Jan 2026 04:20:58 +0000
Manifest next update: Sat 24 Jan 2026 04:20:58 +0000
Files and hashes: 1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: /LyFs65u1ATCOXWnOJbw39bKiHng7ZGAWaUFN8eNB0Q=)
2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: w4Rh9NpZ/IQ60xsdouCsCPn/eRzJ06RRF4GvfzZ5uwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Validity
Not Before: Jan 17 04:20:58 2026 GMT
Not After : Jan 24 04:20:58 2026 GMT
Subject: CN=696b0e2a-cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:3b:7a:d5:60:ad:af:77:e1:a4:77:25:ae:
bc:f8:5d:88:24:5f:58:9a:80:87:11:97:b8:b4:6f:
e8:b1:53:ed:b3:13:19:7c:ef:2f:22:f5:74:60:37:
78:35:be:35:ea:43:5c:42:d5:3c:5e:96:90:1f:ee:
b1:08:06:47:14:3e:d2:b4:2a:c5:44:c6:a1:48:c5:
1c:b7:fd:03:0f:7c:03:61:18:c2:57:00:27:86:c0:
25:70:31:fc:97:6e:dc:92:5f:87:d4:98:8a:54:be:
d1:ad:5a:02:1e:74:e0:70:ca:86:d6:a1:71:66:4e:
9c:af:3d:e8:af:fe:76:9b:80:29:37:fc:d6:8f:f4:
00:f8:3f:d9:0c:08:8f:b8:73:e4:66:fa:51:ca:61:
9a:0d:e0:ba:fd:03:9e:f5:16:31:8e:fe:50:b3:60:
7b:8b:cd:14:3e:b8:fd:bf:4c:76:ce:f3:09:f9:ac:
05:bb:8f:24:fd:d5:fd:a0:da:08:85:b3:cf:6a:b8:
02:ef:46:f0:32:7f:b5:d1:ad:41:54:aa:a8:c7:90:
f3:dc:ee:05:ee:9a:85:1f:f6:f2:ac:db:8e:5e:e3:
68:bb:2d:27:e1:f5:ad:88:3d:f1:ed:86:d1:10:c4:
ba:b7:3c:6c:40:05:45:4c:68:3d:82:4b:b8:19:47:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:F5:10:4B:F5:77:25:B8:1E:68:AB:62:03:2D:A0:2E:A9:A9:84
X509v3 Authority Key Identifier:
keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:56:f2:60:13:35:57:3e:9f:ee:04:48:de:ec:48:b2:55:5e:
da:18:b6:75:24:ba:74:9a:95:83:b0:7b:3c:0d:81:29:30:df:
6c:a6:ae:a6:b2:cb:72:38:ed:ed:42:bf:b1:63:1b:c6:73:85:
78:cc:50:22:bf:17:96:87:0a:30:51:be:dd:31:07:05:fb:22:
5a:45:48:b9:1c:56:23:44:2d:29:5b:0b:35:42:8e:f8:e3:f6:
0f:dd:62:a0:9f:54:54:70:03:b6:f2:f5:3e:b0:95:12:27:ae:
8d:74:19:cf:e7:36:89:17:93:f7:46:ab:02:a8:4c:73:71:4d:
b0:34:92:9f:36:e2:5f:91:b9:d1:91:12:96:d8:ab:5f:07:da:
b8:fe:24:2d:df:cb:b6:ca:d4:c0:c1:f6:5c:69:02:b4:03:70:
86:fc:02:86:f7:61:2b:13:63:34:51:c9:e3:54:d0:ca:bc:f0:
03:66:10:0a:16:8b:9f:cd:51:20:7c:15:fa:ac:55:bf:aa:0d:
74:7e:1c:3a:b5:40:94:06:d4:2b:d3:33:c0:72:df:b0:55:e5:
59:96:fa:3d:05:2d:94:04:36:d6:38:62:b4:22:eb:17:aa:79:
77:00:11:ad:8e:71:58:16:11:14:58:08:b3:19:97:0c:0f:31:
f0:ea:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:27 2026 by rpki-client