This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier: +EBGJw2O0fBu63KD5nqEWu/zxKJPjUUhLve0t7Q0upU=
Subject key identifier: 58:17:12:F5:44:41:25:81:1F:BD:77:FA:4B:C3:77:2B:81:E5:B4:70
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer: /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number: 1F
Signing time: Mon 19 Jan 2026 06:51:02 +0000
Manifest this update: Mon 19 Jan 2026 06:51:02 +0000
Manifest next update: Mon 26 Jan 2026 06:51:02 +0000
Files and hashes: 1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: rtdXJ7Z6BjV6+cvxzGDENNCpE6oCEtYtjamIZG5Zr/g=)
2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: diqgpUQTbZfPnisy8N8gpRTy+mMN5Jc9y1vSbe6yr1U=)
3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Z4quZZ4AjBNcwf+Xgudk1obpLQYlCRMBDjouQM28P8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Validity
Not Before: Jan 19 06:51:02 2026 GMT
Not After : Jan 26 06:51:02 2026 GMT
Subject: CN=696dd456-957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:66:f0:26:21:2c:08:cb:08:24:4c:c7:56:
29:a0:e4:18:cb:b3:18:89:ed:36:ef:8f:4f:d3:40:
b5:42:14:a0:e5:b6:c2:88:5d:f3:9c:48:97:93:e6:
3a:63:cd:4a:05:d2:9b:cb:2f:3e:db:77:9b:eb:ef:
06:5e:2d:84:99:61:22:56:69:eb:82:a3:26:f8:b1:
1b:db:d3:a0:e7:13:eb:26:39:e4:6b:a5:be:08:15:
5f:ab:0d:e3:cc:f4:e2:80:f5:4c:67:9e:aa:fa:03:
49:01:b3:57:85:e0:0c:d2:57:f6:c8:ef:18:4d:ee:
4d:c8:04:3c:ef:82:57:42:73:b8:07:8d:f7:5f:b4:
8c:5f:56:3b:1b:67:67:e6:fa:4c:6f:12:69:ba:19:
55:59:2b:c9:5b:df:ec:f6:23:ea:f7:a3:26:5b:48:
73:4a:c4:4c:69:94:01:ff:2a:73:57:b3:a2:f7:3c:
b8:a9:57:5f:e3:7f:f0:ec:d3:9f:ac:14:b3:68:aa:
9e:ad:dd:05:bd:d6:68:e8:ee:67:28:c7:2b:82:76:
e4:16:b2:c8:03:55:a1:8c:c1:2f:dc:3f:a2:e0:56:
83:b8:80:7c:06:cb:1f:1a:a5:78:0b:f0:0f:73:ff:
43:a4:74:10:3c:28:aa:10:20:da:a6:2c:f6:cb:0e:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:12:F5:44:41:25:81:1F:BD:77:FA:4B:C3:77:2B:81:E5:B4:70
X509v3 Authority Key Identifier:
keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0c:12:b3:b0:48:6d:be:fc:13:29:65:7c:33:87:28:3c:07:
fa:20:7b:6c:7c:a9:b2:5c:f7:04:46:01:6c:3a:ea:df:75:c4:
18:d2:1a:05:29:4f:08:1e:8f:94:bb:ec:71:51:f9:ae:4e:bf:
f2:50:04:93:9f:71:10:db:f2:91:b1:b5:04:9c:65:c3:52:fd:
a9:2c:c6:28:e2:18:7b:be:fb:d6:8f:40:ae:fe:83:37:41:fb:
a6:d1:07:cd:fb:8b:f2:ab:03:1c:b2:4a:b2:c7:0b:8f:c2:70:
db:dc:c9:12:08:4a:ec:50:c2:28:40:f2:66:4a:9c:7d:67:dd:
38:67:31:37:64:04:30:c8:c3:f6:05:91:17:12:cd:88:b0:c1:
c7:1e:04:b1:0f:f3:f3:0f:7a:ac:9e:d7:30:66:c9:69:73:ab:
1e:2e:c8:4f:e5:dc:95:f4:0a:61:b0:ec:7d:9b:94:7a:05:b8:
59:0c:92:dd:f6:2f:28:94:e1:a8:3c:3d:cd:ca:ce:3b:5c:e7:
0a:2b:47:f3:d1:64:60:28:b9:96:6c:2c:5e:5e:a0:cd:ab:71:
45:f3:85:f1:0c:70:f0:d1:89:39:98:23:28:0f:c5:9c:0f:08:
f4:98:2e:30:cd:93:6b:11:6f:01:23:a1:05:65:86:7c:91:d6:
38:f7:d5:3f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzgwNTExMC8GA1UEBRMoMUU1MzBGQTlGNjYwQThEQzE3MzhDN0FBMEM4QUZDNzdG
NEYwQkJCMzAeFw0yNjAxMTkwNjUxMDJaFw0yNjAxMjYwNjUxMDJaMBgxFjAUBgNV
BAMMDTY5NmRkNDU2LTk1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCP4WbwJiEsCMsIJEzHVimg5BjLsxiJ7Tbvj0/TQLVCFKDltsKIXfOcSJeT5jpj
zUoF0pvLLz7bd5vr7wZeLYSZYSJWaeuCoyb4sRvb06DnE+smOeRrpb4IFV+rDePM
9OKA9Uxnnqr6A0kBs1eF4AzSV/bI7xhN7k3IBDzvgldCc7gHjfdftIxfVjsbZ2fm
+kxvEmm6GVVZK8lb3+z2I+r3oyZbSHNKxExplAH/KnNXs6L3PLipV1/jf/Ds05+s
FLNoqp6t3QW91mjo7mcoxyuCduQWssgDVaGMwS/cP6LgVoO4gHwGyx8apXgL8A9z
/0OkdBA8KKoQINqmLPbLDkMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWBcS9URB
JYEfvXf6S8N3K4HltHAwHwYDVR0jBBgwFoAUHlMPqfZgqNwXOMeqDIr8d/Twu7Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzODA1LzQwMEM1REVDRDAx
MDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53WE9NZXFESXI4ZF9Ud3U3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSGxNUHFmWmdxTndYT01lcURJcjhkX1R3dTdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
ODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyL0hsTVBxZlpncU53
WE9NZXFESXI4ZF9Ud3U3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKcMErOwSG2+/BMpZXwzhyg8B/oge2x8qbJc9wRGAWw66t91xBjSGgUp
Twgej5S77HFR+a5Ov/JQBJOfcRDb8pGxtQScZcNS/aksxijiGHu++9aPQK7+gzdB
+6bRB837i/KrAxyySrLHC4/CcNvcyRIISuxQwihA8mZKnH1n3ThnMTdkBDDIw/YF
kRcSzYiwwcceBLEP8/MPeqye1zBmyWlzqx4uyE/l3JX0CmGw7H2blHoFuFkMkt32
LyiU4ag8Pc3Kzjtc5worR/PRZGAouZZsLF5eoM2rcUXzhfEMcPDRiTmYIygPxZwP
CPSYLjDNk2sRbwEjoQVlhnyR1jj31T8=
-----END CERTIFICATE-----
Generated at Tue Jan 20 07:37:10 2026 by rpki-client