This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier: dFsOnix7N8xeh5SMyljH+urQECzMOxYgX9oOMlZyWsw=
Subject key identifier: 9A:3B:7B:C3:FE:B4:98:C7:D1:7D:45:2B:77:B1:EC:19:09:33:88:84
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number: 024C
Signing time: Sun 11 Jan 2026 01:01:49 +0000
Manifest this update: Sun 11 Jan 2026 01:01:49 +0000
Manifest next update: Sun 18 Jan 2026 01:01:49 +0000
Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: 2vq/b9nkT6Tew3ORfgZMrsWUeC4y6lqD2t2wr1a70Qo=)
2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Validity
Not Before: Jan 11 01:01:49 2026 GMT
Not After : Jan 18 01:01:49 2026 GMT
Subject: CN=6962f67d-fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:31:0b:21:f4:82:9a:4e:1c:2e:7d:ef:e9:
23:f7:96:53:15:59:6f:bf:7a:a6:18:9f:d0:21:87:
1f:71:c2:49:b7:73:aa:c8:0a:d4:cf:0b:05:e9:6d:
e2:e9:5a:fa:8f:93:58:8f:a8:e5:9f:1c:c1:88:ca:
ec:5a:a2:04:37:86:18:9f:18:84:47:fb:ed:1d:bb:
7e:80:b6:fe:25:b7:50:e6:3a:b4:dd:c8:79:bb:62:
95:c2:e6:f8:3c:13:ad:f2:50:0f:f8:a2:12:aa:b3:
65:4d:67:5f:2a:b3:ca:7a:e9:41:27:27:97:3e:b3:
6a:80:06:f1:8a:04:88:6b:55:c2:d5:4f:4c:e4:0b:
7d:2e:a8:d7:46:0b:64:ae:ce:ee:88:c0:20:42:a3:
84:02:15:e4:f7:39:7b:30:0a:9c:6a:4a:75:b0:cc:
b3:8e:b2:aa:a6:be:d5:e9:c6:73:70:df:fc:91:14:
53:1a:7c:eb:4e:34:2f:6a:65:30:16:30:b9:14:6f:
c8:6d:dd:ea:6e:ba:df:1c:d4:14:d2:c8:2a:4c:b6:
fd:c4:ad:04:65:aa:f6:85:f3:a7:4e:e7:99:d9:10:
dd:8e:5e:54:22:fd:2a:11:f4:d4:34:a7:b5:fb:21:
87:95:0b:6d:e3:29:90:24:3f:5a:a3:3d:c2:62:c0:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:7B:C3:FE:B4:98:C7:D1:7D:45:2B:77:B1:EC:19:09:33:88:84
X509v3 Authority Key Identifier:
keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:8f:0f:8b:b6:31:82:69:fa:c3:1a:45:fa:28:75:b0:6b:
5e:cb:54:d5:db:cd:ec:70:d2:b2:d4:73:b8:d5:77:39:54:96:
57:54:89:9b:25:b6:81:20:92:76:15:e7:1d:81:4e:89:be:fd:
01:09:1f:81:0a:62:0d:a7:ac:2c:41:40:c9:56:ff:d6:55:d9:
d6:ec:a1:82:3c:50:88:2e:f4:4c:1a:79:be:f1:aa:25:e8:9f:
da:9d:d9:ad:f5:ff:a1:f8:46:83:41:d5:f7:11:09:0f:18:07:
6f:eb:87:7d:32:cf:8e:0b:90:55:2f:37:7c:29:d3:61:ec:f7:
01:54:df:7d:8b:e9:e1:4d:09:4c:41:49:ca:a5:1d:fb:c7:82:
39:da:c0:47:09:8d:9e:ad:83:e5:e6:80:42:7e:79:93:30:c2:
58:01:a6:d3:76:4a:08:94:c8:2d:54:a6:41:e0:b1:74:ae:8b:
18:b5:6c:f6:28:9c:71:a7:a2:28:29:07:d5:16:c9:ba:d9:c5:
a8:ad:26:67:58:16:f0:f6:20:41:ea:bb:c7:c9:45:dd:42:05:
64:0a:e3:f5:cd:96:49:e7:17:89:60:23:f6:f9:26:47:1c:d4:
0e:47:02:34:ae:66:b9:b6:70:0f:17:2d:61:2f:f6:7e:9a:da:
61:25:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:14 2026 by rpki-client