This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json)
Hash identifier: Z2Zxd57WL8meyrXnPyibdQJyk4exaBAS0Bm20TVwGEs=
Subject key identifier: F0:47:20:76:DB:1B:25:E1:24:63:4F:6D:5B:AB:26:C0:D3:61:6C:41
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 2941
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
Manifest number: 28CD
Signing time: Sat 24 Jan 2026 15:28:04 +0000
Manifest this update: Sat 24 Jan 2026 15:28:03 +0000
Manifest next update: Sat 31 Jan 2026 15:28:03 +0000
Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: rUiG8BPRPd9FCALfxP2xQkCX8ZXWoLIEpVfA/YwK4QA=)
2: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY=)
3: 57D5BBF870F211F086293675C4F9AE02.roa (hash: MfxJKHAl2OU7PVOYPpiK4bilcuV1ajcVyr3SRatYOEw=)
4: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10561 (0x2941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
Validity
Not Before: Jan 24 15:28:03 2026 GMT
Not After : Jan 31 15:28:03 2026 GMT
Subject: CN=6974e504-982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:00:1f:2a:76:9b:08:4f:0e:a4:36:a1:ea:
e3:f5:57:2a:29:ce:e7:9a:cd:52:28:03:c6:3d:a5:
03:07:9a:68:99:fb:fe:d9:a3:54:84:5b:48:8f:2b:
be:b7:cd:3d:c7:42:af:6d:b1:e7:04:34:0f:0f:42:
cb:a1:52:69:3c:f9:1b:d5:aa:b7:03:41:aa:cd:e3:
6c:a5:e6:7b:6f:16:1a:5e:a7:78:d3:80:ca:45:04:
42:3e:ae:56:bd:47:4a:b6:98:b7:72:f8:91:e4:3e:
83:17:a4:84:3c:82:b9:e7:31:ce:1f:b4:66:d0:bb:
c9:30:c7:5f:96:b1:d6:65:ff:7b:2a:94:63:a6:5b:
f0:38:4b:f6:ed:23:97:89:3b:e7:95:18:2f:b0:1d:
d7:db:30:36:c0:04:9b:de:be:79:64:a6:0a:12:25:
8c:a9:d6:7f:25:22:d5:76:d6:57:12:6a:0e:9a:f2:
ef:37:80:ad:76:63:44:b4:37:09:bd:51:cd:07:66:
8a:c3:86:65:4f:f4:8f:79:52:bc:ca:18:6e:2b:7a:
97:32:aa:96:82:fa:52:fa:7f:24:70:12:3a:f8:1d:
a2:4c:0e:9b:5c:b5:1e:07:c8:ae:07:34:9b:98:b0:
70:6d:ff:93:11:c6:cc:23:62:3c:e5:e5:b5:ee:05:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:20:76:DB:1B:25:E1:24:63:4F:6D:5B:AB:26:C0:D3:61:6C:41
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:f9:dd:7d:4d:0d:41:6d:84:67:1e:10:2f:0b:8d:60:2f:
b0:02:cb:5b:5b:42:a9:80:13:97:26:c0:d8:7a:fa:54:14:3e:
f5:df:13:c4:fc:6a:1e:c1:d6:0e:7f:a3:e0:ea:36:87:8e:92:
13:ab:88:9d:0d:1d:26:52:ac:fe:c2:c8:bb:38:e5:26:35:6b:
fa:17:62:44:db:a9:9f:43:32:eb:cd:a4:ce:1f:a4:37:d1:f2:
b7:57:e7:ba:63:94:55:3f:7c:33:84:15:16:3d:7a:d6:b3:34:
9c:83:11:c9:44:5e:f2:ff:4c:24:75:3a:d4:23:41:42:c1:6d:
09:6b:e3:88:89:b5:43:7e:89:88:43:8c:2c:d3:b1:1e:0c:59:
38:56:38:65:ec:c1:5f:3e:d3:f6:68:47:cb:b6:de:b5:49:6c:
79:21:34:29:25:b5:19:e2:ca:aa:a0:b5:83:90:23:2a:24:7f:
59:cf:40:00:d9:3c:bf:31:29:2e:dd:fd:f0:b6:95:9f:7a:ac:
f7:f0:7e:55:27:a3:e2:d8:f3:e8:23:82:65:21:0c:64:36:ad:
00:64:07:58:02:a9:3d:6f:f2:b3:a4:9e:08:4a:e2:00:d8:92:
3a:b9:de:c1:69:c8:b6:83:0e:39:f6:99:4a:cb:47:0d:fd:f4:
49:fe:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:34 2026 by rpki-client