This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json)
Hash identifier: R0o0Pj4UvBf4Bp+BC38RCN7OF2t2k5fBrAApXTVrn5Q=
Subject key identifier: 73:47:FC:76:87:0F:0C:A9:36:08:AB:D6:72:85:8C:30:25:53:BD:D2
Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Certificate serial: 3507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
Manifest number: 3500
Signing time: Sat 24 Jan 2026 15:01:46 +0000
Manifest this update: Sat 24 Jan 2026 15:01:46 +0000
Manifest next update: Sat 31 Jan 2026 15:01:46 +0000
Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: G7dDyWiZ8rV6lTynke1TQ6WwTBeT6Jw/c+oS0lzVsYo=)
2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13575 (0x3507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Validity
Not Before: Jan 24 15:01:46 2026 GMT
Not After : Jan 31 15:01:46 2026 GMT
Subject: CN=6974deda-ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:d2:46:9d:da:7c:91:73:89:2d:9a:e9:c7:
93:d4:7c:c3:51:38:9b:fb:ba:bc:80:11:0d:8e:21:
8f:ac:38:04:df:b7:91:0c:a6:cb:04:da:11:7b:b9:
4c:cb:09:7a:53:3a:21:7b:19:5f:6b:8d:82:04:c5:
92:ac:39:cf:33:24:9b:00:9b:6a:37:3e:31:0d:47:
5c:08:17:11:0a:df:82:20:15:7a:7e:b3:1b:6f:66:
d2:ae:ad:ae:4c:09:dd:83:5e:53:9d:5a:e5:d9:eb:
19:66:98:83:53:06:1c:6a:d2:ea:e4:cf:54:f0:3c:
43:d0:fc:f3:29:d3:16:46:6e:d7:9c:06:bf:89:e2:
a7:bc:9c:cd:4e:36:0b:51:6f:76:4c:e1:33:70:0c:
03:59:17:e3:0e:81:dd:43:12:8e:aa:2a:a1:f7:b8:
cf:54:25:a4:d6:27:3e:8d:f9:84:62:3d:d8:35:70:
5f:0a:9a:ac:47:8d:7d:3e:d4:f4:0b:2a:64:8c:61:
55:66:89:6a:c7:c2:1f:cc:78:23:a7:37:e5:5d:83:
c1:81:21:6e:c0:a9:8d:d5:d8:cc:e1:48:87:15:cf:
56:b2:8f:e9:97:e6:69:68:a7:a2:12:b2:55:fc:12:
e5:7c:e1:04:be:c0:ba:7e:d7:e2:c5:2f:23:bf:a4:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:FC:76:87:0F:0C:A9:36:08:AB:D6:72:85:8C:30:25:53:BD:D2
X509v3 Authority Key Identifier:
keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:58:b7:f0:16:30:87:75:28:2f:5f:54:03:87:ab:ef:44:8e:
73:fa:d7:40:21:4d:42:91:4a:fd:64:64:10:74:f7:d2:09:da:
4c:7d:1d:24:56:95:30:02:d0:da:e1:cb:20:a5:a6:16:3a:83:
e1:29:92:e4:c4:c6:8d:c4:01:c7:98:e5:5f:fd:fc:b1:40:e5:
0b:96:66:82:b1:0d:ea:82:ce:a5:56:9c:41:97:ee:d1:c2:e6:
27:9e:81:6e:9e:69:f3:06:54:b7:d1:33:d9:c1:e5:45:06:17:
c3:ae:cd:d7:d6:1e:65:8a:8f:80:8e:8b:ba:ca:00:b4:8c:49:
69:b8:96:f6:ea:94:9e:7b:86:e0:d4:9e:2d:76:18:8f:f5:ce:
f7:3b:9e:a9:5a:c4:68:c7:9c:38:73:ec:e3:f9:4a:5b:75:60:
3c:0c:fe:30:69:20:40:7e:e4:64:62:a0:16:20:9d:11:0b:c3:
92:78:60:de:ed:60:05:70:16:b3:0c:56:15:c2:5f:1d:8e:1b:
96:9e:48:21:67:20:1d:6b:bc:12:0b:53:fe:2e:a5:65:3d:54:
84:17:b5:02:46:4c:3d:34:09:64:da:8b:df:8d:1b:2a:4a:a2:
79:e1:de:10:4a:fb:ae:c5:40:7f:1c:f2:b7:9f:a7:33:c8:de:
2e:2a:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:01 2026 by rpki-client