This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json)
Hash identifier: DHm+R7guWhfUCym0Rc+sU6sp5OQyc26t+lnxjrNhhpg=
Subject key identifier: 2F:6A:C2:78:82:7D:92:01:81:C8:C0:AF:62:E2:D9:39:50:DB:57:45
Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
Manifest number: 64
Signing time: Fri 23 Jan 2026 06:07:03 +0000
Manifest this update: Fri 23 Jan 2026 06:07:03 +0000
Manifest next update: Fri 30 Jan 2026 06:07:03 +0000
Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: EY+1pZus9FzdNDQe+jkEgTz8Y9anVYD9/zGA1lI/sEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Validity
Not Before: Jan 23 06:07:03 2026 GMT
Not After : Jan 30 06:07:03 2026 GMT
Subject: CN=69731007-fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:f8:60:89:01:2c:ca:cc:27:f9:f1:19:9a:
20:f3:27:4f:e4:21:83:3b:22:0e:e7:2c:a9:b1:a3:
03:d8:36:4a:25:08:48:13:88:e9:b8:03:65:a9:3e:
ac:bf:c7:4f:47:20:f4:8c:25:47:b5:d2:94:58:82:
3a:d1:c4:ac:f2:32:15:a4:86:99:d0:60:02:6b:68:
ea:bf:f4:7b:72:21:5c:1d:eb:28:af:2e:c4:d9:3c:
e5:5b:22:9b:d2:b9:09:16:1e:f2:00:a1:e4:da:66:
c7:03:a9:3e:43:3b:74:91:f1:74:a2:45:b9:27:05:
e6:9e:6c:75:47:fd:0a:b0:00:49:3e:97:29:51:4a:
3d:9a:4b:8c:47:12:f1:a6:2d:ff:cc:cf:dc:5a:bc:
2f:63:33:73:ae:ff:7c:66:ef:11:40:57:62:b4:d2:
49:71:0c:da:bb:11:bb:bd:3c:04:b8:bb:75:5b:d7:
90:1a:73:8f:d5:ad:7d:30:e7:97:59:13:74:2f:ad:
79:40:97:77:54:29:9d:2f:06:25:b1:64:b5:79:02:
74:e3:5d:6b:33:42:e5:40:c9:8d:a3:ca:44:c1:4e:
34:4e:1f:25:b0:cd:96:bc:ed:7b:76:d6:6f:02:3a:
c2:3d:a7:56:67:c5:ce:3d:94:88:06:35:bf:a9:61:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:C2:78:82:7D:92:01:81:C8:C0:AF:62:E2:D9:39:50:DB:57:45
X509v3 Authority Key Identifier:
keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7b:70:01:38:05:6c:1a:5c:d2:b2:ff:26:90:e0:17:39:35:
2d:f6:9d:85:57:c3:90:b5:f8:80:d0:ec:8e:2e:ed:73:34:d8:
f6:41:5e:b7:f1:d6:df:36:15:06:81:c3:16:1a:6f:b7:c2:76:
33:10:41:e6:35:37:6e:2c:0d:28:be:5a:24:90:89:11:c0:bc:
4e:d6:81:48:76:6d:83:50:b1:08:17:d8:24:f6:d7:56:f5:db:
b9:af:8a:6e:47:75:7f:ed:d1:61:6d:43:bd:ce:5a:09:1a:7c:
96:02:b5:b7:fe:07:ae:50:37:97:d6:28:88:7b:67:2e:1a:96:
1b:88:0e:84:77:37:5f:24:da:db:ce:50:8b:53:22:0c:5d:20:
d1:16:a7:66:8a:85:0a:45:ce:bf:c6:85:6e:34:91:32:c3:b6:
3a:2b:b9:0d:12:4c:f8:38:70:9e:90:54:75:69:ed:4c:7f:13:
04:ac:89:0a:3c:e7:92:5f:13:84:89:0a:c1:02:ed:0a:6c:0a:
eb:f7:80:6c:20:6d:eb:2e:cc:b7:a1:e8:64:36:80:22:8e:cb:
51:8e:e2:31:1a:ca:42:ef:c8:09:5d:a4:d2:89:58:aa:8e:2b:
dc:a8:57:c1:52:fc:38:47:b1:5d:2b:24:77:18:00:c6:73:01:
c2:30:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:16 2026 by rpki-client