This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier: gkMk/DlUSeFbA8A1u9kchGjdTdMkgKXxE1ypcB5u0mY=
Subject key identifier: D4:9E:49:1B:6F:59:4F:0C:25:5D:BA:5F:DF:9D:AE:CF:CC:13:AB:4C
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number: 015E
Signing time: Thu 01 Jan 2026 03:41:50 +0000
Manifest this update: Thu 01 Jan 2026 03:41:49 +0000
Manifest next update: Thu 08 Jan 2026 03:41:49 +0000
Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: fruUE7mLvOzS3djJ6vOt1UmHhVjo9qrPYcnAWM1AGys=)
2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 03:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Validity
Not Before: Jan 1 03:41:49 2026 GMT
Not After : Jan 8 03:41:49 2026 GMT
Subject: CN=6955ecfe-077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:f3:44:ca:f9:db:68:a1:2a:97:37:14:a6:
c4:20:b2:29:2a:33:d9:fc:e3:06:2b:33:40:26:92:
9f:ef:ba:11:c7:1c:73:19:c8:a2:bb:9e:34:70:2e:
db:a9:34:b2:de:f1:c1:63:b8:13:07:26:ae:0a:df:
2d:78:9e:b8:74:22:c8:9b:32:b9:27:7c:49:bb:f4:
fb:14:d0:81:d0:3c:89:4d:18:b5:50:a4:e6:91:dc:
18:a4:ec:a9:56:34:39:44:93:0d:a0:b4:19:17:a3:
48:0e:b1:89:9a:86:7d:81:46:37:c7:4d:58:87:4f:
3a:d2:f8:41:0e:3e:57:e9:75:68:c5:e5:74:0c:d5:
ba:9c:b1:38:9c:90:eb:01:70:40:58:76:9f:ca:94:
ee:81:e9:e9:b9:f9:d6:a3:b0:83:44:4f:e7:e9:c9:
5f:05:3c:e5:b8:29:98:f4:f1:48:15:de:c3:85:9c:
04:85:4e:42:ca:a3:03:aa:ed:bc:2e:be:ff:2c:c8:
7d:70:c8:f7:60:be:6d:b7:4d:cc:2d:80:9e:7a:ca:
4a:08:d0:e1:e8:29:06:98:74:a5:c6:92:86:ee:93:
b6:12:73:68:59:7d:cd:f0:5c:20:e0:0f:17:6b:a2:
a3:cb:c4:63:5a:96:1a:c6:db:b2:3d:ab:7f:1f:7e:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:49:1B:6F:59:4F:0C:25:5D:BA:5F:DF:9D:AE:CF:CC:13:AB:4C
X509v3 Authority Key Identifier:
keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:b6:52:19:a9:e6:0b:5f:3e:54:76:b3:bd:01:a1:cd:94:
a0:16:b3:b5:ee:11:0b:82:45:26:9f:d1:f3:c6:0e:db:18:11:
9f:61:04:8d:ed:ec:c3:af:bc:10:b1:e8:e8:f1:e1:e9:95:45:
db:53:f8:1a:c4:3d:35:33:58:fe:96:11:cf:80:94:f1:3d:ea:
aa:72:04:e2:2a:6f:2c:da:24:15:8a:49:9a:af:1b:e6:60:22:
cd:eb:ee:f6:80:f6:10:d7:65:26:89:b3:7e:ca:0e:15:ac:a8:
17:84:fc:1d:be:4c:ca:16:8d:5e:f3:d3:fc:c1:d6:49:9e:77:
38:39:73:fa:aa:78:61:8d:a2:81:7a:79:41:2c:7d:0e:77:a8:
bd:69:6c:04:f1:bf:4e:82:8e:51:8f:95:91:7a:9e:f4:91:d6:
46:f8:01:f5:0f:39:74:af:c1:0a:1c:98:59:0e:7a:b5:02:b1:
06:6c:4a:db:3f:5f:7f:9f:18:fe:d3:67:f6:f4:a4:80:29:9f:
e4:a0:c2:df:90:38:86:58:1c:04:d4:87:f7:83:a3:ac:3e:ae:
0f:84:ba:d8:fe:1e:a5:3e:24:91:04:92:e5:04:bb:d5:00:d5:
9c:22:55:01:ed:1f:68:68:a6:ce:28:b4:ad:70:3d:a1:d1:7d:
3f:27:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:02:19 2026 by rpki-client