This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier: B700td2v59cQxctznoTak4uCeXAnQrhmGYkDXYmsAT4=
Subject key identifier: 70:4A:C3:E8:11:50:28:DB:AF:32:DD:EE:6C:8C:4B:D1:36:C0:2D:02
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial: 1140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number: 1139
Signing time: Sat 24 Jan 2026 16:57:46 +0000
Manifest this update: Sat 24 Jan 2026 16:57:46 +0000
Manifest next update: Sat 31 Jan 2026 16:57:46 +0000
Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: oVqY9UjgYkR834Wgg65zQoNsI1rYoUKiq7A3WHGIw9I=)
2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: 4ddMyzUmIiWucVfUmzZbGoeIuz/De3rIfnynVpK/dAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4416 (0x1140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Validity
Not Before: Jan 24 16:57:46 2026 GMT
Not After : Jan 31 16:57:46 2026 GMT
Subject: CN=6974fa0a-e26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:76:cb:1f:5f:0c:19:23:01:d1:0a:c3:ea:
9a:b3:b6:31:1e:b0:e7:e8:fc:8a:ba:85:5f:5b:41:
55:cb:d0:5a:e5:cd:aa:2d:4e:4a:f6:f7:f4:04:f0:
e6:ee:1a:0a:d2:df:5f:50:4d:a6:81:c2:cf:a5:87:
cf:88:7f:bb:36:96:14:20:e6:9a:d7:f9:45:db:fe:
89:7a:bb:d1:a9:23:7d:65:41:f1:6a:d5:0f:e3:22:
ea:32:09:83:51:e5:ec:86:f6:55:45:86:8f:60:56:
12:df:c2:1a:4c:75:ef:3a:ad:08:80:1f:ae:36:8d:
b5:52:be:68:13:0d:5a:36:48:1a:ef:b0:40:63:da:
9e:6f:25:b9:31:04:cf:0a:78:55:cc:64:7d:bc:15:
d0:9f:57:bd:72:d3:d8:fa:31:f1:96:fd:92:35:56:
10:68:f5:9e:5e:e1:74:5a:23:0e:01:97:2c:99:8f:
62:13:d9:72:e2:30:bf:27:29:0b:9b:39:33:6a:48:
7a:4b:1b:a6:ae:59:96:e1:91:a7:78:a6:67:f1:e4:
78:c9:c5:71:9e:3a:2a:c3:6d:11:df:6a:af:d6:fc:
90:f7:28:cd:a8:88:cd:b6:58:ee:48:16:3a:73:63:
15:96:6d:c5:d2:9f:d2:a7:62:32:cc:98:50:65:1c:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:C3:E8:11:50:28:DB:AF:32:DD:EE:6C:8C:4B:D1:36:C0:2D:02
X509v3 Authority Key Identifier:
keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:46:42:95:44:93:ff:76:34:50:d5:e1:3b:7a:2b:4f:70:62:
cb:b8:de:38:57:d9:ff:3f:25:2f:55:eb:22:77:d0:d2:1c:e6:
35:76:ca:7d:4e:a9:03:81:8b:6a:76:28:b8:01:3e:2a:4d:ba:
b1:46:d7:96:37:4b:2c:ba:b7:3c:35:91:d9:38:19:3d:98:cc:
e5:8e:84:c7:8b:d0:5f:bb:71:b5:f4:d1:35:f7:6a:fc:f5:3d:
0b:46:c6:23:5c:6e:e8:bc:fe:66:f7:67:72:eb:40:cf:4e:01:
ad:16:84:60:3c:fe:af:02:0d:84:14:93:28:2d:bb:7e:62:e0:
9c:6f:57:b3:6d:53:ca:2d:84:71:38:52:b9:75:50:35:fa:21:
97:d7:61:1c:f3:5c:fd:f2:aa:17:b8:47:42:60:11:74:55:58:
e2:9a:c8:b5:66:9a:e7:e3:d5:43:e2:5a:be:4f:4f:7c:d5:25:
38:47:8e:4e:d6:e3:87:b7:de:00:62:eb:6d:56:1f:7b:7a:66:
2e:5b:a9:2c:aa:46:0b:c1:ae:bf:eb:18:fd:2e:f2:9f:23:bb:
a8:e8:1c:46:48:89:18:3e:6c:8d:a2:f8:a7:c8:96:5d:3e:f7:
92:a6:42:35:87:00:f0:8e:a3:ef:7c:a0:b7:da:25:23:d6:81:
dd:a4:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:21 2026 by rpki-client