This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json)
Hash identifier: 5l7Wuukfzp2rQ60xaKSmVsQKnv5yMSdZdt3OkuIp1Xk=
Subject key identifier: D5:B6:45:25:8B:FF:69:80:9C:71:5F:FA:F3:F9:5E:15:B2:7D:E4:25
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
Manifest number: 01B9
Signing time: Sun 25 Jan 2026 02:24:21 +0000
Manifest this update: Sun 25 Jan 2026 02:24:21 +0000
Manifest next update: Sun 01 Feb 2026 02:24:21 +0000
Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: Kyz8yUdRBr1jc0ELb8poXeISCZzNtXix8NB5Cd+BNeI=)
2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: J9YGptWflbGV2JaXinbDtAZUW1YZRHNJL5vf2fh2XOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Validity
Not Before: Jan 25 02:24:21 2026 GMT
Not After : Feb 1 02:24:21 2026 GMT
Subject: CN=69757ed5-db07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:2e:d4:39:b0:2c:8c:f0:23:82:02:8f:06:
82:1f:c2:39:03:d2:d2:25:79:26:46:a0:bf:c4:82:
c7:d5:61:0a:60:c2:bf:e1:7b:73:64:ef:f4:26:b4:
48:82:36:fb:85:0c:6b:d5:17:74:ed:44:ab:30:09:
36:67:af:a1:a4:d3:d0:95:5f:d8:52:d4:5b:04:ac:
38:c3:37:e1:0c:d3:a2:aa:d4:e5:0b:7c:b5:f4:1c:
1d:1e:8d:c7:80:4f:1e:c8:9e:fb:fc:ae:4e:ff:9a:
30:9e:a7:b7:e0:0d:21:c0:82:f9:e1:47:bc:4b:b4:
48:4f:65:e5:51:39:d2:8a:74:7f:ab:0f:1b:5f:31:
56:48:a0:16:83:88:01:fb:bb:50:9a:f4:a9:1b:ba:
70:b7:b3:90:d2:b5:e6:7a:84:e8:2d:57:8b:38:47:
ed:73:20:e9:63:e0:3b:97:56:6d:bb:06:61:53:f5:
aa:ae:7f:02:98:26:e7:44:26:9d:f5:5d:c4:ee:7a:
db:a8:25:f6:26:2b:8e:23:d8:1d:88:fc:31:9b:e3:
24:a7:8a:c1:11:e1:26:03:7f:59:a9:12:f5:4d:d5:
57:ff:51:b6:b7:47:e5:37:61:f9:c7:db:50:cf:82:
46:76:b1:1e:d9:84:de:e3:66:db:a4:f6:75:91:83:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:45:25:8B:FF:69:80:9C:71:5F:FA:F3:F9:5E:15:B2:7D:E4:25
X509v3 Authority Key Identifier:
keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:a7:ba:09:52:e6:dc:6e:5b:c1:34:30:b9:48:01:24:26:
18:16:69:f4:88:8e:31:5a:d6:c3:d6:ab:fb:52:89:b4:13:ac:
6b:10:8f:06:b5:17:69:24:0d:74:a2:73:89:40:a9:ff:0e:69:
e1:ad:12:f4:4a:fa:44:00:ca:44:1c:11:54:5d:56:cb:b8:ff:
85:46:6d:30:5d:c4:ef:98:11:8d:48:0d:80:4b:2e:ab:5c:3e:
38:01:cd:bf:ea:c2:aa:6e:a7:98:cf:22:11:4f:19:f2:ef:bc:
cb:f6:0f:4c:f6:af:01:5c:c8:ae:d2:3f:d5:f9:eb:27:cc:e9:
b8:40:01:86:f6:81:f1:f5:d3:42:70:d2:a6:49:b8:67:55:21:
3c:9e:f3:b9:8d:7c:8f:81:51:ae:e2:ee:fc:68:7b:7e:57:d9:
ff:22:56:2d:85:aa:4e:e0:c1:b0:66:26:66:52:75:63:29:a3:
9c:b6:a8:1d:99:2d:cf:45:2f:5e:8c:b6:e2:bd:66:99:8b:43:
e2:1f:29:1c:f8:30:b1:bf:e1:88:d9:d4:fe:8e:d8:a2:4a:7b:
c1:9b:aa:f9:28:78:99:31:44:70:c1:c8:31:dc:c2:99:c8:53:
3e:09:f8:8e:ba:c0:cc:f4:92:63:be:b5:80:72:31:f8:ef:e3:
d1:be:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:42:53 2026 by rpki-client