This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: NbiMilstDgUjEQAOqUChhhA/0cWBoPdde29K+8+ZUQg=
Subject key identifier: 0E:B9:58:CA:8F:8E:EA:59:4C:7C:EC:40:D2:8B:94:50:1F:C5:F6:80
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 0131
Signing time: Sun 25 Jan 2026 04:05:27 +0000
Manifest this update: Sun 25 Jan 2026 04:05:26 +0000
Manifest next update: Sun 01 Feb 2026 04:05:26 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: pLDUcTMFTM68eCaKomHoQwOzf8mjk9EeNi6aKMdJ3qs=)
2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: RrYkG8pDF5vbjVAvZp/A25BQbDhS8Q7IHXBpjDj5Bzw=)
3: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: xQbbLUx7h7kk+H0WrJFv17LPnpfULHNjuw2xaAYsdzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: Jan 25 04:05:26 2026 GMT
Not After : Feb 1 04:05:26 2026 GMT
Subject: CN=69759686-4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:e4:ac:b7:fc:50:fc:48:da:47:13:37:6b:
d4:4b:74:c9:4f:3e:ef:f3:40:f5:99:bc:b7:57:d0:
62:dc:61:78:7a:b0:87:43:a0:f4:05:c8:77:92:9a:
00:c5:79:ce:eb:2f:d7:a5:c5:42:cb:86:b9:7d:ec:
83:03:68:90:8a:b5:f9:24:77:11:eb:d7:33:21:56:
64:0e:16:75:9c:68:a9:ab:4f:79:d1:7e:fc:76:93:
7f:42:79:c0:5b:84:b4:ac:47:fd:50:2d:d8:6a:e8:
2e:4b:7a:bf:65:fc:f5:4d:6c:af:7d:9d:83:f5:5f:
3f:99:e8:a8:d2:55:30:fd:da:d7:ee:c8:4a:e2:f7:
c0:ec:74:02:50:3d:73:cf:43:02:34:8f:27:19:18:
0e:1d:2a:8f:7c:a0:15:6e:e3:2f:80:37:f4:8a:d5:
af:8c:f9:85:06:35:f5:29:56:6d:ba:16:f4:50:08:
b2:c8:74:43:b9:fd:0b:bc:28:6a:4d:cd:66:1f:69:
c9:5a:51:2d:74:b3:10:69:84:87:97:b7:49:28:4e:
af:99:ad:c0:fd:10:08:d2:ee:e0:28:6a:e3:1d:3b:
0b:37:a9:d8:08:a8:e8:6e:d8:eb:70:4d:c7:42:16:
52:5e:a6:cc:cd:e5:b9:9b:27:f3:58:0a:0e:59:8a:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:58:CA:8F:8E:EA:59:4C:7C:EC:40:D2:8B:94:50:1F:C5:F6:80
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:83:0c:b4:bd:6e:87:30:28:1d:7c:db:9f:a7:39:15:cd:
c9:da:04:b4:c0:1c:8e:8b:6e:87:fe:5b:80:0f:25:f5:6a:f1:
7d:46:1b:c9:55:e7:56:02:38:ab:13:df:db:d9:8c:1e:4e:09:
c8:d5:6f:e0:6d:ca:34:eb:62:9f:a7:b2:3b:67:ec:c7:5e:23:
34:62:58:16:3c:c0:7f:f9:1a:4e:5a:33:27:b3:5c:b2:c7:43:
4f:c3:78:27:dc:a3:da:68:11:9a:08:04:c4:a8:85:98:b8:5f:
cf:e3:8c:b4:35:fe:8e:07:7d:61:c0:b5:a8:f7:0c:f7:1b:f9:
60:68:20:1f:03:c8:c2:12:32:21:4b:1f:93:2c:ee:bf:04:2c:
57:90:dc:7c:e8:23:3f:1f:d7:99:c3:eb:c0:ff:1e:60:78:36:
30:12:b5:d5:ec:2f:d8:34:95:60:ab:39:12:a6:95:7e:ea:3e:
73:1b:d2:7b:94:84:48:0f:8a:5a:0d:e9:b3:62:6d:14:05:1c:
52:cd:c1:6b:83:2d:d8:f5:8b:0e:b2:26:df:b5:86:36:6d:4f:
9c:51:3f:76:e8:7d:db:b3:77:89:39:89:0e:45:51:6b:24:00:
8e:a2:31:da:92:db:6c:8c:48:6a:a7:26:11:74:3b:e7:89:c1:
c3:d8:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:22 2026 by rpki-client