This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier: FvCqqNtbEvw0CGe8du6xIx+wu6ZWpAirGKfxNLG7RdA=
Subject key identifier: EC:2A:EB:8C:9D:99:18:9D:14:3B:60:3B:B0:A6:9C:F9:EC:3C:2E:74
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number: 0156
Signing time: Wed 07 Jan 2026 03:44:39 +0000
Manifest this update: Wed 07 Jan 2026 03:44:39 +0000
Manifest next update: Wed 14 Jan 2026 03:44:39 +0000
Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: C0V4ZAmat+8pA/7SDIWOiGjuYDOU7j4ECXsfUbcdy8Y=)
2: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=)
3: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=)
4: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 03:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Validity
Not Before: Jan 7 03:44:39 2026 GMT
Not After : Jan 14 03:44:39 2026 GMT
Subject: CN=695dd6a7-73ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:9d:d6:61:55:9a:d8:84:01:01:65:fe:c7:
f4:b0:ef:c9:e7:c8:26:7d:1f:b2:2f:96:72:23:f7:
21:64:42:71:ee:d5:e4:2e:e2:c2:c4:db:ba:5e:20:
2b:f6:a0:d0:9b:be:bb:5c:ea:f0:5a:24:a3:3b:87:
16:b1:c4:d3:f3:5b:17:5a:2b:60:d9:5b:33:f4:f8:
2a:cb:92:3a:c2:4e:32:25:a7:94:fc:00:06:c0:ab:
2a:d2:ef:cc:10:e9:c7:73:a2:e5:4b:a7:ef:7c:76:
d2:5a:cb:be:1f:07:9d:c6:78:ec:94:23:7f:b3:67:
4d:59:03:0f:53:39:2a:98:f2:35:22:c2:60:15:f0:
a5:a9:26:6c:65:85:02:90:80:5e:89:d0:2f:eb:37:
e6:78:1d:1e:4a:20:8b:35:13:a8:19:38:c2:b9:8b:
1e:b8:70:da:99:1f:f7:e0:fb:ef:22:bf:c2:07:56:
dc:1a:71:93:d2:83:32:a4:47:b6:06:fe:53:54:33:
89:94:71:3c:83:9e:b0:c7:31:9f:f4:38:60:74:19:
a7:c5:70:4b:18:fe:68:30:96:71:36:0e:55:65:cc:
ff:cc:21:f8:9c:b7:ed:38:a3:b5:26:74:14:3d:f6:
f0:42:47:97:ec:e2:7b:47:86:72:38:bf:2c:96:47:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:EB:8C:9D:99:18:9D:14:3B:60:3B:B0:A6:9C:F9:EC:3C:2E:74
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b9:a9:89:cb:e0:12:24:9a:d7:38:46:5f:33:40:e6:df:98:
c5:c6:bc:51:2a:1d:77:fd:b7:00:7d:e7:82:45:47:51:fc:6c:
47:17:f5:d0:98:b2:22:cb:9e:9d:d8:a4:e4:a7:81:f2:4a:e6:
d1:c0:c8:3c:fe:65:50:d1:c9:08:8d:3e:bb:6e:13:eb:8c:eb:
2a:0a:11:6e:d5:5e:34:b6:25:c9:5f:94:92:19:fb:82:68:8e:
94:e5:bd:5d:d5:64:bf:bb:d6:96:75:47:d6:e2:04:e3:b8:8a:
c9:da:44:d4:df:c4:72:02:d8:3b:fe:77:29:03:a2:4b:0f:21:
95:cb:7a:80:7d:81:48:e4:c3:2b:ca:eb:b1:29:78:ed:2a:2c:
bc:24:0a:82:a4:05:39:78:a0:f3:e4:fa:53:f5:b1:b2:bf:6a:
f7:09:b8:81:2a:de:0c:67:61:1f:41:e2:6b:70:95:c6:80:03:
9e:61:6f:7d:22:4f:06:44:59:89:0b:25:3a:a5:f4:4d:22:65:
7f:ec:74:1e:1d:81:85:3e:77:32:60:16:dd:14:62:83:63:8f:
f9:a9:16:ec:17:71:38:02:6f:d9:9f:cd:b6:23:93:04:69:7a:
03:e7:b2:2f:36:19:36:81:91:89:91:dd:4a:24:31:ca:4d:8a:
c8:f9:90:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0
QkVDMERFNzMwHhcNMjYwMTA3MDM0NDM5WhcNMjYwMTE0MDM0NDM5WjAYMRYwFAYD
VQQDDA02OTVkZDZhNy03M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLad1mFVmtiEAQFl/sf0sO/J58gmfR+yL5ZyI/chZEJx7tXkLuLCxNu6XiAr
9qDQm767XOrwWiSjO4cWscTT81sXWitg2Vsz9Pgqy5I6wk4yJaeU/AAGwKsq0u/M
EOnHc6LlS6fvfHbSWsu+HwedxnjslCN/s2dNWQMPUzkqmPI1IsJgFfClqSZsZYUC
kIBeidAv6zfmeB0eSiCLNROoGTjCuYseuHDamR/34PvvIr/CB1bcGnGT0oMypEe2
Bv5TVDOJlHE8g56wxzGf9DhgdBmnxXBLGP5oMJZxNg5VZcz/zCH4nLftOKO1JnQU
PfbwQkeX7OJ7R4ZyOL8slkcSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwq64yd
mRidFDtgO7CmnPnsPC50MB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5
QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC
SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChuamJy+ASJJrXOEZfM0Dm35jFxrxRKh13/bcAfeeCRUdR/GxHF/XQ
mLIiy56d2KTkp4HySubRwMg8/mVQ0ckIjT67bhPrjOsqChFu1V40tiXJX5SSGfuC
aI6U5b1d1WS/u9aWdUfW4gTjuIrJ2kTU38RyAtg7/ncpA6JLDyGVy3qAfYFI5MMr
yuuxKXjtKiy8JAqCpAU5eKDz5PpT9bGyv2r3CbiBKt4MZ2EfQeJrcJXGgAOeYW99
Ik8GRFmJCyU6pfRNImV/7HQeHYGFPncyYBbdFGKDY4/5qRbsF3E4Am/Zn822I5ME
aXoD57IvNhk2gZGJkd1KJDHKTYrI+ZAc
-----END CERTIFICATE-----
Generated at Wed Jan 7 07:19:01 2026 by rpki-client