This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json)
Hash identifier: SsupDXtJGzu10QVFgAc9t7xdTnxFW82OwsEKTZPK90M=
Subject key identifier: E4:13:CE:06:43:0D:B1:4A:38:5F:4A:34:44:EA:4B:79:15:50:DC:7B
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0B9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
Manifest number: 0B6B
Signing time: Sat 24 Jan 2026 18:48:28 +0000
Manifest this update: Sat 24 Jan 2026 18:48:28 +0000
Manifest next update: Sat 31 Jan 2026 18:48:28 +0000
Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: Vi9ip6WzoJmK2AEmB5DwfxFiXZGHUMvxSfYTE7Sbyj0=)
2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: kj+LbGbtBvSSpF59xQ/oF6zo99e75Fj59GXX8sxOzfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2971 (0xb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Jan 24 18:48:28 2026 GMT
Not After : Jan 31 18:48:28 2026 GMT
Subject: CN=697513fc-2ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:2b:15:f1:ab:9f:a6:ff:4f:33:f1:5f:73:
af:8e:c9:62:eb:b5:e6:70:f4:83:8f:4f:e9:ac:17:
f4:65:8d:bd:d4:b9:80:89:64:73:61:52:bc:d8:99:
d4:d5:95:19:b4:1b:ac:e1:b7:ca:db:96:28:53:7c:
1a:13:b5:c3:be:95:27:06:43:e9:d4:49:a4:f9:48:
da:97:d7:0a:24:2b:2a:99:f2:39:e7:79:3b:ad:1b:
44:0d:23:50:54:c6:5f:0d:5e:0c:8d:9e:15:16:44:
64:25:17:e8:a1:a6:74:da:1b:39:90:ef:bd:41:34:
6c:09:24:eb:18:c5:05:0b:a6:1d:c8:f8:73:8f:67:
88:e4:b4:ae:2d:9f:c4:26:ba:b1:8f:e1:0e:92:66:
2a:28:8d:a1:4b:58:7b:2f:d9:0c:c3:e5:f3:81:1b:
73:a6:94:21:f8:19:2f:b1:5e:c5:b0:20:02:39:49:
77:4f:6c:c1:84:4c:9a:36:37:42:8d:5d:fb:ac:6e:
ad:52:ad:44:43:34:62:17:80:a2:ed:4f:37:8e:e5:
80:3a:0e:a9:09:7c:59:63:83:19:19:b5:b1:f8:81:
33:16:cd:a0:8e:f9:e3:6b:3b:20:f1:e0:8b:53:58:
06:a1:ad:16:af:ce:a7:63:3c:50:4a:36:b5:49:bf:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:CE:06:43:0D:B1:4A:38:5F:4A:34:44:EA:4B:79:15:50:DC:7B
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:cc:05:21:86:82:21:48:1a:3b:7e:6f:61:c2:01:d3:84:
1e:f8:b5:4d:16:8f:e2:94:ff:ff:10:18:b7:17:70:32:d7:b8:
cc:66:8c:c4:04:33:1d:b0:a2:d9:b4:42:dc:32:2d:ac:4e:65:
83:42:0c:16:a8:72:fe:55:73:8e:98:7a:88:6c:8d:05:56:f9:
86:3c:b1:3f:7d:d1:3e:05:6d:0e:23:7b:b5:53:17:f5:95:f0:
09:1a:fe:86:f0:5b:47:10:56:b5:cb:a2:29:87:15:c4:95:d0:
38:ee:ae:cd:dc:bd:8c:17:34:7d:dd:ec:b8:0a:90:bb:07:17:
f4:54:95:f8:c3:f5:99:22:fe:5c:bb:bb:c5:a2:10:94:98:75:
7c:80:2a:65:ac:c6:b8:b7:09:93:ca:9f:5f:b9:5f:ee:3a:b5:
e6:47:c2:b3:bb:c5:17:d5:6b:13:fc:e9:cb:19:24:d7:9b:2e:
a1:73:12:ae:24:99:bd:be:ed:95:a6:7e:83:e5:cd:d2:97:b9:
6e:c6:ce:6c:14:f8:25:d1:ee:82:27:92:30:f2:1f:60:b5:81:
c7:4a:2e:19:26:26:e3:7a:49:a2:82:bb:60:09:bc:65:c9:27:
1b:af:0f:13:42:bc:ff:b1:f8:2e:e5:35:13:38:c9:9a:f1:e4:
25:51:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:34 2026 by rpki-client