This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier: JocIiY7YDhDiyTcPdQa4wr4HRcanHtdBTgP8zU1PCnQ=
Subject key identifier: 2B:E1:46:FD:4C:23:B8:74:22:FE:97:25:CF:0F:E3:3B:A2:1A:49:84
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 0813
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number: 080B
Signing time: Sat 24 Jan 2026 20:24:25 +0000
Manifest this update: Sat 24 Jan 2026 20:24:25 +0000
Manifest next update: Sat 31 Jan 2026 20:24:25 +0000
Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: UkJOVi2CXi6kEOzxkMoBhsj6A4SUxAkPCiG0ZNLg3FU=)
2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: Jan 24 20:24:25 2026 GMT
Not After : Jan 31 20:24:25 2026 GMT
Subject: CN=69752a79-75b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:ab:34:12:c4:4a:dd:ce:9f:d4:df:e7:95:
2b:be:4e:df:bf:f1:b3:90:2f:de:bb:e2:ee:f0:83:
5d:c7:6a:88:47:7e:86:af:83:88:c4:0d:ea:2f:47:
50:af:d5:2b:aa:ce:91:12:10:c6:81:b6:50:d8:0e:
78:9b:24:bd:da:cc:99:dd:c6:1d:2f:82:34:e3:9b:
93:af:ef:fb:d3:b8:d4:6a:04:8b:d7:06:47:24:a7:
63:67:34:73:d6:10:9d:73:41:cf:0a:96:63:80:ce:
b0:bb:60:8c:2b:d0:b6:f7:81:06:13:f9:09:91:0f:
0d:95:26:6d:c2:ae:72:ad:e8:ee:c2:07:d8:0b:d7:
8b:cb:26:dc:3f:44:9e:a4:ed:53:64:ce:c1:00:60:
d5:aa:e9:05:53:02:30:3f:89:f9:9e:c1:58:47:5a:
21:fa:14:4c:dd:fe:5e:bd:a0:36:ac:c1:10:e4:e1:
60:87:d2:b1:82:38:d4:e5:98:e0:8a:a9:8e:7a:8a:
7e:6c:5f:e0:23:5c:97:74:54:6b:9f:ef:1a:be:94:
bf:0d:d4:78:25:a3:eb:6b:c2:1e:0c:78:78:4d:c4:
25:fd:30:d9:29:08:9d:2a:68:4c:a8:99:6f:b5:91:
17:ee:33:9c:bc:64:9f:c3:d0:e1:39:bf:96:bd:50:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:46:FD:4C:23:B8:74:22:FE:97:25:CF:0F:E3:3B:A2:1A:49:84
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:0b:d7:e4:29:ae:62:b6:5a:32:bf:63:b5:f9:81:04:64:52:
db:88:b0:2f:35:ea:83:27:f7:fb:01:07:f8:15:24:31:c1:37:
05:37:cc:0c:b5:0d:67:88:64:50:bd:e5:48:3c:69:5c:58:e0:
88:4d:e3:42:a5:a9:e1:d8:a4:c0:37:4b:ef:1a:83:2b:0f:ac:
f9:76:43:07:61:6a:5d:5a:92:85:7f:e0:b3:79:ed:cb:90:87:
63:d9:38:2b:f4:ed:3d:8c:42:4c:0b:53:d1:d3:b6:1d:c5:a6:
70:b0:5b:f5:be:84:75:67:fd:b3:0b:ef:78:37:97:9c:3a:96:
7e:5b:bb:70:1c:09:29:c6:4e:da:d9:d5:9d:dd:74:a3:91:29:
00:9d:32:45:81:27:d2:80:a6:0e:c2:d9:81:1b:8a:56:7c:15:
9d:55:b7:45:df:66:13:7c:92:5f:31:b4:dd:66:91:2f:8c:33:
b3:b1:7b:04:f9:a7:2f:cb:f0:87:65:b0:13:6f:bc:1d:54:bd:
6e:07:83:52:fb:cf:27:6a:c2:30:63:57:78:d5:55:75:79:07:
58:fa:57:78:3f:92:cc:1f:26:11:0f:94:c0:f1:07:b9:1b:33:
42:ff:8e:f6:6d:d0:c8:cb:83:68:aa:b3:9a:e7:bf:7f:05:cb:
f1:cd:be:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5
MDM4NTU4NkUwHhcNMjYwMTI0MjAyNDI1WhcNMjYwMTMxMjAyNDI1WjAYMRYwFAYD
VQQDDA02OTc1MmE3OS03NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfOrNBLESt3On9Tf55Urvk7fv/GzkC/eu+Lu8INdx2qIR36Gr4OIxA3qL0dQ
r9Urqs6REhDGgbZQ2A54myS92syZ3cYdL4I045uTr+/707jUagSL1wZHJKdjZzRz
1hCdc0HPCpZjgM6wu2CMK9C294EGE/kJkQ8NlSZtwq5yrejuwgfYC9eLyybcP0Se
pO1TZM7BAGDVqukFUwIwP4n5nsFYR1oh+hRM3f5evaA2rMEQ5OFgh9KxgjjU5Zjg
iqmOeop+bF/gI1yXdFRrn+8avpS/DdR4JaPra8IeDHh4TcQl/TDZKQidKmhMqJlv
tZEX7jOcvGSfw9DhOb+WvVA1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvhRv1M
I7h0Iv6XJc8P4zuiGkmEMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD
MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2
UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWC9fkKa5itloyv2O1+YEEZFLbiLAvNeqDJ/f7AQf4FSQxwTcFN8wM
tQ1niGRQveVIPGlcWOCITeNCpanh2KTAN0vvGoMrD6z5dkMHYWpdWpKFf+Czee3L
kIdj2Tgr9O09jEJMC1PR07YdxaZwsFv1voR1Z/2zC+94N5ecOpZ+W7twHAkpxk7a
2dWd3XSjkSkAnTJFgSfSgKYOwtmBG4pWfBWdVbdF32YTfJJfMbTdZpEvjDOzsXsE
+acvy/CHZbATb7wdVL1uB4NS+88nasIwY1d41VV1eQdY+ld4P5LMHyYRD5TA8Qe5
GzNC/472bdDIy4NoqrOa579/Bcvxzb5s
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:47 2026 by rpki-client