This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json)
Hash identifier: M/qKcO7piJN36lpzrGwXkFuWGgKsXXUUsEJF1mhh+J4=
Subject key identifier: 80:A4:AA:5A:26:D8:8E:1A:D6:BB:D8:31:24:E2:2C:B7:D4:0A:C4:0F
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial: 060E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
Manifest number: 05F9
Signing time: Thu 05 Feb 2026 08:40:06 +0000
Manifest this update: Thu 05 Feb 2026 08:40:05 +0000
Manifest next update: Thu 12 Feb 2026 08:40:05 +0000
Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: fNlHX7uQbHOEPR4N7R6DZ2radGXnfvHH71A/pvyLN3w=)
2: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: DhSTi6VJS5rtKH1k/CftckyKrkez1MOBdZEc9ULEwcE=)
3: A6EF097068F911F092D77151C4F9AE02.roa (hash: +Nx+9vtI/ajtrGJ4XxnWZitAs5dqJzjJlk5F6di/U+g=)
4: 09182D38084E11EF89D29620C4F9AE02.roa (hash: l5pKuM/mrivEfECkuC3JGTW4NOB1AFghLVLplL5of14=)
5: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: 9DSn+zGfL95qDZ32w1sJ9OMjoR2cYSPxUDsDDarH1os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 08:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Validity
Not Before: Feb 5 08:40:05 2026 GMT
Not After : Feb 12 08:40:05 2026 GMT
Subject: CN=69845766-a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:df:74:e7:53:6e:34:53:1a:93:14:9f:6e:
39:44:74:e2:7d:28:31:12:62:c0:6a:d3:97:1a:42:
39:69:a5:20:82:78:31:95:4a:0f:25:07:21:ed:f9:
a1:8f:ed:49:3f:0d:4f:ee:7a:bc:ad:2d:38:4c:51:
6e:9d:2f:1f:ea:31:a7:56:11:68:04:20:87:44:5a:
20:00:0c:72:8b:4d:28:13:e4:c9:cd:8e:05:8e:b4:
ce:b4:a3:d7:db:6a:c9:79:90:83:29:99:8e:69:f5:
44:a4:d3:48:73:d0:df:22:a1:bb:95:6a:df:d0:1e:
20:cb:42:ea:64:f5:1a:9f:c2:02:a1:ea:7d:46:3b:
07:f7:d2:0a:66:52:bf:51:46:d1:5f:d0:46:7a:e5:
c4:00:b5:31:25:4c:b6:3d:e5:06:74:aa:ca:89:6f:
a7:ce:20:f0:bd:e5:a3:54:05:5e:78:d1:92:21:6d:
44:13:b5:4e:25:98:88:45:27:12:01:2e:c7:b9:da:
26:37:61:74:cf:f2:c9:7b:60:2b:34:cf:b4:f6:b5:
a8:2b:dc:c7:14:74:e2:97:d6:6f:f5:cd:3d:ec:24:
78:14:f0:e5:ce:ec:fa:43:65:62:50:f2:16:a9:87:
87:0c:7d:0a:61:79:91:56:f1:0c:31:93:90:f3:ce:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:AA:5A:26:D8:8E:1A:D6:BB:D8:31:24:E2:2C:B7:D4:0A:C4:0F
X509v3 Authority Key Identifier:
keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fa:43:73:db:d5:6a:7a:9c:ae:8a:5b:c9:2e:fc:66:0d:65:
25:60:20:98:ef:71:1d:59:c5:d3:c4:d3:73:06:1c:e0:1d:a4:
c9:c2:28:fa:4b:81:55:5a:91:84:4c:61:ed:d2:00:c7:93:20:
82:aa:80:e9:2e:d8:2f:68:21:01:81:dd:04:e0:df:b4:84:ab:
c8:98:b9:29:fe:4f:36:36:16:ba:35:a0:28:75:8a:fa:b8:bc:
e4:6a:74:3e:4e:4b:15:d0:07:37:f5:b2:dc:b5:10:7b:0b:75:
c7:60:16:f6:a3:0c:3f:d0:ec:45:8d:37:f7:42:b6:14:04:25:
b1:09:68:0b:a1:f3:c2:53:18:ed:b9:a1:64:44:2a:3c:a5:6f:
22:a9:17:3c:44:7b:1f:9c:36:35:38:70:f0:5a:6b:d7:27:e6:
a2:4b:b1:e6:bb:3e:6f:45:01:c4:6c:46:e1:5e:6b:af:89:cc:
3a:a6:da:70:a2:76:98:d9:b1:8c:bd:26:5a:90:1f:f8:cd:7a:
0c:64:8c:5a:bf:b3:19:e0:98:fb:be:75:25:6b:f0:bc:e0:37:
4f:05:7e:22:25:04:e3:75:92:9e:81:87:9d:c2:82:87:21:f0:
3b:b7:d0:59:ed:93:6c:95:87:94:ba:63:07:79:a2:3a:a3:4c:
eb:e6:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 17:26:48 2026 by rpki-client