This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json)
Hash identifier: ldGD1vRtLZDon2QO7nvpfGaHTiUAKMlIMhn2XyDkx4A=
Subject key identifier: F4:96:A4:6D:68:07:43:E8:59:03:D7:B7:21:F9:88:6E:99:2E:15:0B
Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1
Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
Manifest number: 0243
Signing time: Sun 25 Jan 2026 01:33:10 +0000
Manifest this update: Sun 25 Jan 2026 01:33:10 +0000
Manifest next update: Sun 01 Feb 2026 01:33:10 +0000
Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: kRcYaDMhAq0jAJu0gQGxelZawJHOhqgJayCrgb6EK8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl
rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1
Validity
Not Before: Jan 25 01:33:10 2026 GMT
Not After : Feb 1 01:33:10 2026 GMT
Subject: CN=697572d6-1c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:c6:5f:16:96:66:13:99:0b:a8:22:48:e6:
31:a7:7f:43:0f:17:6b:3b:d3:86:57:bd:4c:a4:1c:
b9:1f:c1:43:c8:ae:16:97:06:e1:0a:b6:2e:97:d1:
e2:31:a4:2c:8d:25:d6:6a:c4:2a:90:13:66:b3:a6:
0f:ef:e1:b3:c5:70:d7:f0:85:37:79:bf:22:28:cd:
75:da:5a:cf:7b:55:0c:0f:bf:b1:c1:ce:6e:db:9f:
55:b6:30:f2:38:98:e3:6a:79:c7:62:9f:a3:46:6b:
56:93:58:f4:7e:d0:52:2e:2a:01:54:fc:90:9d:12:
35:d0:d3:56:fe:bf:b6:16:f0:7e:87:b6:ab:87:3b:
b4:06:32:17:fc:04:9b:b3:75:a1:bc:00:da:b9:c8:
a5:0d:7f:cb:7b:31:1a:93:f9:b3:14:a1:42:2d:b4:
d3:fa:ff:c9:01:b9:7e:ac:c0:c2:94:2e:6e:12:57:
09:e8:b1:59:f6:f9:e1:73:45:17:d2:7e:91:f3:10:
23:6f:10:0b:4b:98:cb:82:4d:cf:03:3a:66:31:4e:
1c:2b:24:5c:ed:9f:1c:53:02:47:8b:3c:57:6a:98:
7c:4c:07:ec:cc:99:09:63:2c:c9:72:82:e4:94:89:
48:ef:4f:55:45:fc:b2:5f:c4:02:c5:3b:5e:df:ab:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:A4:6D:68:07:43:E8:59:03:D7:B7:21:F9:88:6E:99:2E:15:0B
X509v3 Authority Key Identifier:
keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:97:64:0d:f0:28:1f:b6:c1:01:14:d3:03:05:d2:76:d4:
96:99:e5:85:3f:7d:ae:c5:83:b6:e1:34:0e:d6:e7:fd:36:41:
01:ba:53:5f:fe:7a:fb:58:72:d0:be:b5:d1:06:1f:2a:f5:07:
44:f7:ee:88:3a:8c:30:ef:ac:d4:77:01:9b:03:f1:ca:ad:5e:
a3:23:f9:df:4c:82:86:02:99:2b:d8:56:94:5f:d6:40:44:c9:
d4:34:96:05:16:50:e2:73:db:19:bf:5c:20:1d:d2:6e:2a:2b:
8b:1a:73:5b:88:ca:cc:e9:9a:dd:5f:af:af:5a:5e:b9:92:a6:
5c:0d:f2:2f:77:77:29:6d:b8:8e:86:10:01:eb:9a:d3:bc:e7:
66:60:73:d3:56:87:e5:5e:ac:2b:c8:31:56:23:f9:3d:84:e8:
58:df:b3:6a:fd:d1:ca:eb:df:df:6d:32:2c:e2:73:4b:a5:bc:
37:32:13:0c:4e:4e:5e:f1:4a:ee:e4:7e:f8:37:36:c0:fc:76:
b9:d5:6c:1d:af:ad:f3:f4:e9:40:2e:cf:ae:89:47:ee:9a:31:
15:06:9d:17:a8:08:c3:4f:9f:9e:13:cc:7a:1d:5a:02:3e:5f:
a2:31:d6:3a:40:24:6b:47:4d:dd:c8:c8:d1:ff:fe:38:6e:45:
82:1c:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:59 2026 by rpki-client