This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json)
Hash identifier: MdbHzrIQ7nutGnJw7vhDj6IsbLb/mzi/egPNyQm+r5w=
Subject key identifier: EC:10:E5:DB:11:3F:80:D6:A6:58:CC:C4:81:A7:CD:E2:76:67:7E:BF
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
Manifest number: 0239
Signing time: Sun 25 Jan 2026 01:13:43 +0000
Manifest this update: Sun 25 Jan 2026 01:13:43 +0000
Manifest next update: Sun 01 Feb 2026 01:13:43 +0000
Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: Y6y2XnJ2P7mOogvP2VUZrlGzeWSv8OjZ9DzDeThGHl8=)
2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Validity
Not Before: Jan 25 01:13:43 2026 GMT
Not After : Feb 1 01:13:43 2026 GMT
Subject: CN=69756e47-a493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:4c:c5:1f:58:59:9f:fa:41:98:08:4f:f2:
65:59:26:e5:7b:72:1b:1b:1f:7e:5c:0d:95:b2:88:
f7:3a:3d:28:51:d9:ef:29:db:0d:12:65:ea:ab:c9:
d2:90:40:d5:6c:9d:38:e6:e0:13:53:64:19:a7:20:
54:b7:21:af:47:50:6c:fd:d9:86:e7:22:70:58:d8:
d9:45:51:23:75:53:69:99:59:fd:54:bc:ab:63:88:
e8:fe:71:e0:74:2a:03:f8:42:bc:f8:c7:31:8e:a6:
f7:1e:b0:9f:10:36:ae:08:f0:b4:ec:13:34:78:56:
65:f6:8c:9c:4b:7c:bf:0d:ee:ef:5f:5d:d4:3c:2c:
1a:aa:e5:60:59:39:2b:27:79:ad:93:77:53:86:ea:
69:b3:b0:8b:8f:ba:37:fd:bf:27:46:c8:78:20:62:
82:e5:e6:af:8a:ff:83:c5:eb:19:f4:d5:bb:89:da:
f3:10:a7:0e:e5:c5:59:26:0a:4a:4c:8e:24:2f:94:
92:d9:b9:d3:77:b4:9a:bf:c8:c4:28:ac:51:a6:50:
0e:70:2c:1c:a1:e2:32:2f:d2:07:fb:8c:07:ac:04:
9b:06:fb:f9:24:c9:d2:fe:07:ae:06:45:0c:e2:4f:
e7:f0:78:7e:66:ec:04:b5:d0:e0:25:4a:fc:ba:e3:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:E5:DB:11:3F:80:D6:A6:58:CC:C4:81:A7:CD:E2:76:67:7E:BF
X509v3 Authority Key Identifier:
keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:b6:52:af:ee:a2:c8:e7:11:05:33:2e:16:9d:ac:7b:0f:3b:
ab:6c:86:70:e5:06:6d:70:7b:8f:5d:75:2c:ff:d4:33:bd:8d:
42:3e:72:8b:8f:a0:b5:88:4b:85:4f:5f:3c:15:92:47:f9:ce:
17:d3:ea:46:c8:14:8f:48:28:ac:dd:b5:93:ff:15:13:ab:2c:
b1:ac:d1:38:dc:6e:80:f5:1e:12:ab:d3:1c:07:98:ab:0d:93:
d1:74:55:72:32:54:69:ee:c2:57:ab:dc:09:69:76:60:24:2b:
be:ca:94:de:d1:40:6d:c8:43:66:18:48:96:0a:2a:37:cd:a9:
9e:47:5c:7e:d6:a6:c6:86:e8:d1:74:1f:32:4d:8c:ef:06:e4:
f3:e6:95:c5:f8:1c:57:1c:57:68:ed:3e:4b:3c:7f:d5:36:27:
c4:34:20:45:fa:c1:a0:9b:4e:cd:87:c4:30:0d:09:9c:72:e8:
ec:90:d1:52:1a:2e:67:95:34:e6:79:e6:e9:0b:24:24:9e:05:
ef:2e:68:36:82:09:dc:ef:c8:6c:86:dc:c2:57:55:d8:8e:3e:
79:60:fd:60:91:29:e4:08:af:c4:91:fe:a8:b8:da:76:97:23:
36:09:3e:2b:e2:61:9d:ea:5e:57:da:ac:cc:54:28:ce:a5:b2:
1c:4a:f8:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF
Q0M5RUU5NkMwHhcNMjYwMTI1MDExMzQzWhcNMjYwMjAxMDExMzQzWjAYMRYwFAYD
VQQDDA02OTc1NmU0Ny1hNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmNMxR9YWZ/6QZgIT/JlWSble3IbGx9+XA2Vsoj3Oj0oUdnvKdsNEmXqq8nS
kEDVbJ045uATU2QZpyBUtyGvR1Bs/dmG5yJwWNjZRVEjdVNpmVn9VLyrY4jo/nHg
dCoD+EK8+Mcxjqb3HrCfEDauCPC07BM0eFZl9oycS3y/De7vX13UPCwaquVgWTkr
J3mtk3dThupps7CLj7o3/b8nRsh4IGKC5eaviv+DxesZ9NW7idrzEKcO5cVZJgpK
TI4kL5SS2bnTd7Sav8jEKKxRplAOcCwcoeIyL9IH+4wHrASbBvv5JMnS/geuBkUM
4k/n8Hh+ZuwEtdDgJUr8uuN1VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwQ5dsR
P4DWpljMxIGnzeJ2Z36/MB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG
REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t
RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAptlKv7qLI5xEFMy4Wnax7DzurbIZw5QZtcHuPXXUs/9QzvY1CPnKL
j6C1iEuFT188FZJH+c4X0+pGyBSPSCis3bWT/xUTqyyxrNE43G6A9R4Sq9McB5ir
DZPRdFVyMlRp7sJXq9wJaXZgJCu+ypTe0UBtyENmGEiWCio3zameR1x+1qbGhujR
dB8yTYzvBuTz5pXF+BxXHFdo7T5LPH/VNifENCBF+sGgm07Nh8QwDQmccujskNFS
Gi5nlTTmeebpCyQkngXvLmg2ggnc78hshtzCV1XYjj55YP1gkSnkCK/Ekf6ouNp2
lyM2CT4r4mGd6l5X2qzMVCjOpbIcSvhm
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:29 2026 by rpki-client