This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: Ji68oObWxHxdVRZujaQSfFZJlz89oTWw3sv98OBcwEQ=
Subject key identifier: DE:74:97:60:A6:F7:01:98:E0:0D:45:11:70:32:4C:D9:50:B1:4C:3D
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 18FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 18E1
Signing time: Sat 24 Jan 2026 16:14:00 +0000
Manifest this update: Sat 24 Jan 2026 16:14:00 +0000
Manifest next update: Sat 31 Jan 2026 16:14:00 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: lPRJrk/CFZ2L/WifTlwEGaSPJ4MSqTeyI5ddRNAYTpM=)
2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=)
3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=)
4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=)
5: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6397 (0x18fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Jan 24 16:14:00 2026 GMT
Not After : Jan 31 16:14:00 2026 GMT
Subject: CN=6974efc8-c801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:0e:b4:0d:5e:71:f0:80:72:9e:5c:98:cf:
fe:68:de:b5:f2:1f:46:e1:51:92:cc:9b:11:3c:2b:
dc:e2:3c:74:07:30:b5:7d:4a:8f:c3:8e:42:d2:76:
69:9c:5f:b7:ea:de:11:07:98:d7:6d:eb:84:37:04:
85:40:a7:47:63:ff:1d:81:c7:94:18:04:63:85:b0:
d1:c8:c1:96:cd:b4:b7:2a:e3:2f:b1:15:1f:11:d6:
5b:51:d3:59:1e:87:e5:73:e0:0f:55:ca:b0:a2:d3:
51:cb:08:fb:83:bf:c2:bb:2d:12:e4:88:8c:0f:ff:
e4:e5:cb:2a:0d:c1:3c:7a:36:cb:f7:c0:17:ae:85:
55:47:db:61:4e:23:0d:e6:61:e2:70:08:9e:cb:c9:
d9:32:28:71:69:94:27:41:92:d9:89:d1:ab:8c:c1:
16:2a:3b:e8:a8:61:20:af:fe:d7:1a:18:2f:aa:2d:
3f:8d:38:f2:ee:86:5b:49:1b:e9:b4:43:7f:a0:30:
c3:c4:d7:48:d5:c1:19:4c:ba:6f:08:4d:a7:64:5b:
1b:a6:c8:65:b6:01:b5:18:0f:27:0d:4d:86:ec:2e:
c4:63:24:b4:4a:c2:fd:61:5b:b8:c9:ce:eb:03:42:
25:26:36:6e:eb:44:0b:56:3d:91:88:ee:55:17:aa:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:97:60:A6:F7:01:98:E0:0D:45:11:70:32:4C:D9:50:B1:4C:3D
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:3c:27:1a:33:71:2c:23:13:6d:7a:60:26:9b:37:eb:6f:
a6:64:11:98:a1:a9:35:13:e3:06:e8:e0:e0:ef:b9:1e:28:a6:
f0:15:fd:44:48:dd:f2:08:94:4a:64:36:ee:14:d5:38:45:78:
5b:53:ba:17:cc:ae:15:46:f4:a8:a2:90:48:30:e1:b4:90:ca:
ea:eb:a3:95:58:d2:ff:d5:1b:00:a4:9d:f1:ff:c3:6e:32:74:
46:1e:dd:a4:02:bc:09:5f:88:0c:e2:77:69:88:d5:3f:c0:a4:
b9:22:3a:94:06:1a:67:bf:6d:46:18:93:74:5d:c4:91:e7:20:
3a:60:40:55:14:b0:70:36:93:ec:98:b3:f9:8b:8a:2d:f1:6b:
73:1c:a8:ac:2c:21:b7:6e:3c:01:b8:92:af:f1:ff:e2:85:df:
23:e9:c7:c8:a9:ac:b6:fa:e8:d1:7f:dc:e8:6a:1e:eb:f7:94:
a0:15:6c:9d:c3:70:8b:17:68:a6:ca:1e:20:eb:7f:48:e0:9d:
75:e8:44:71:d8:75:6e:ab:17:d0:ba:64:30:25:06:6b:57:ea:
6d:6a:2b:e8:89:1c:40:5a:68:d6:c1:d8:b0:9f:b6:78:0b:9d:
7c:97:16:ac:36:cb:ee:ea:0d:c5:dd:12:cf:4c:ea:0e:19:4d:
21:73:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:58 2026 by rpki-client