This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json)
Hash identifier: KbuH1RNZJ0hSiAw5l/1aJ4yITnOsJAzHF4N8wBRmCJE=
Subject key identifier: FB:73:4E:0F:D2:88:B8:84:9A:68:C8:D0:D1:96:6F:0F:CA:EF:00:63
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial: 069C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
Manifest number: 0697
Signing time: Sat 24 Jan 2026 21:42:39 +0000
Manifest this update: Sat 24 Jan 2026 21:42:38 +0000
Manifest next update: Sat 31 Jan 2026 21:42:38 +0000
Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: DWF6M04EIeY5NVdT4TQIfpYCH17izlUHqPe4G1DOUdw=)
2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: casLvQjbiWmoUm1zZDsT8rFqITbKKo8QIpvIUSskW7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Validity
Not Before: Jan 24 21:42:38 2026 GMT
Not After : Jan 31 21:42:38 2026 GMT
Subject: CN=69753ccf-3be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:9a:c5:25:0b:c6:f5:b5:4b:6d:fe:19:9d:
4b:c7:53:cb:06:24:d7:36:71:1d:64:36:8f:ab:c1:
48:bd:f6:45:e0:2a:f7:8f:d4:6f:b5:65:b3:43:11:
eb:88:af:99:09:b1:fc:3b:53:10:e9:00:f9:35:5d:
06:5e:de:00:96:bd:ab:be:42:1f:74:ab:38:6c:16:
22:45:af:a2:43:a3:50:1f:84:b2:23:da:ca:71:10:
5d:0b:32:f1:30:63:75:dc:31:b6:1e:66:36:a1:27:
ff:6a:67:67:40:6d:cd:83:78:04:2c:02:c7:fa:96:
5f:a3:5d:3b:93:52:ad:44:6f:01:58:50:77:ec:57:
64:e2:bd:22:7a:b9:c0:d4:0d:5f:8d:57:78:21:81:
b0:29:5d:73:68:3b:86:24:75:8e:1e:2c:03:a5:7f:
d0:be:3f:12:47:d0:84:68:b2:ce:a8:b2:44:81:6d:
26:79:af:09:c1:57:40:ab:fb:d8:ff:b7:a9:f4:41:
ce:f4:ed:f7:53:6e:90:ab:15:7f:64:fd:a4:82:d8:
f1:c4:9c:cc:74:52:26:53:7d:80:cd:a6:fe:0b:ed:
8b:04:b7:11:5c:2a:06:ab:7a:a1:7b:11:74:41:26:
81:e7:e4:9f:56:8c:9b:dc:bd:dc:5d:c4:37:26:e0:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:73:4E:0F:D2:88:B8:84:9A:68:C8:D0:D1:96:6F:0F:CA:EF:00:63
X509v3 Authority Key Identifier:
keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:db:40:ee:b2:9f:40:41:3b:b3:1a:5a:23:7a:42:ed:41:74:
c3:30:76:12:b1:d8:59:e7:50:6d:1f:ba:2c:19:57:28:65:bf:
67:d6:53:87:39:09:f6:75:3d:6e:fc:52:6c:56:83:55:25:01:
59:b5:af:72:79:26:16:fd:e6:b2:2a:af:5e:07:52:5c:03:9e:
23:e2:5d:87:02:34:75:bf:0e:f8:79:46:54:7c:8f:a8:94:eb:
f2:10:b6:b5:0a:3a:75:d2:00:b9:e7:d7:ed:9a:a6:e2:e9:f7:
5d:44:1a:f1:a4:ea:1f:f5:79:2e:43:70:5c:14:4f:9e:28:58:
f4:db:c1:05:7f:ee:27:83:5d:49:f5:24:e1:9d:8f:f6:8a:32:
29:a1:52:f6:d0:20:e8:21:77:a0:2a:ef:a4:04:ee:50:8e:49:
2a:38:d8:16:22:4a:a4:c4:1d:7b:b5:1e:37:2a:93:6e:de:43:
a9:c6:e2:19:e8:39:e9:ce:4c:c9:0b:48:10:6e:11:d5:ea:42:
68:61:20:7c:3f:0d:ce:84:6f:56:a5:19:26:16:ac:6f:ff:df:
17:9b:e2:ef:38:76:da:54:8a:40:00:d2:a2:65:de:1a:48:c8:
f0:b6:11:da:6c:28:bf:e8:a3:f6:3f:e0:04:90:87:14:7b:f0:
9f:2c:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:27:55 2026 by rpki-client