This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json)
Hash identifier: w3RrGzWUxjt9DJ25nL/ZGzL29aUW/pQyajxkmxJvBEU=
Subject key identifier: 7C:B9:1D:C7:7C:13:A7:F9:86:4B:C2:C3:6B:02:C4:D4:BE:6A:3C:5F
Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Certificate serial: 17D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
Manifest number: 17D1
Signing time: Sat 24 Jan 2026 16:19:02 +0000
Manifest this update: Sat 24 Jan 2026 16:19:01 +0000
Manifest next update: Sat 31 Jan 2026 16:19:01 +0000
Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: yVcCegaMRqR5524k8HFjsQQ/XOYqMrQmnW1ftosmAM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6097 (0x17d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Validity
Not Before: Jan 24 16:19:01 2026 GMT
Not After : Jan 31 16:19:01 2026 GMT
Subject: CN=6974f0f5-c221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:6c:7f:72:03:b5:45:e0:c3:ce:01:98:30:
04:d0:a6:f2:21:a2:c7:2c:56:53:e3:c9:9b:46:b5:
6f:34:ae:ae:5e:17:0f:e2:eb:37:c6:7b:2b:3c:fa:
3a:ed:25:58:48:10:ca:e0:45:90:92:f3:57:67:c2:
02:9b:34:c6:ca:71:56:24:a0:a8:15:2e:59:32:3f:
ac:d6:8c:d2:a1:5a:55:ec:81:f8:53:3c:66:1a:d8:
2d:81:b0:30:de:6f:2a:6b:a3:25:58:a3:82:cb:c1:
b2:5c:2f:00:16:57:cf:a9:c1:f7:f1:a9:57:9f:f0:
b4:87:5b:ae:d6:85:76:69:1e:29:d9:f0:f4:51:10:
0d:0f:15:ef:c2:4c:6e:e1:2f:a8:e7:6d:0c:40:54:
2f:6f:84:8a:02:bf:58:7c:2c:a8:f4:e8:f8:c0:9c:
b7:22:c9:b6:72:3d:1b:49:aa:2c:78:f5:1a:c1:9a:
90:76:4a:2b:c1:71:ab:0d:fb:b6:95:6c:e5:46:68:
05:07:04:f7:85:51:db:2e:6c:f2:93:6f:e1:48:ff:
1f:84:24:4f:ad:e1:82:05:d4:75:21:14:50:16:a3:
a3:66:db:9e:99:65:86:eb:26:db:61:76:da:5f:d7:
cc:61:0c:52:2c:d3:ba:5e:42:ea:ce:d2:50:d7:9b:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:1D:C7:7C:13:A7:F9:86:4B:C2:C3:6B:02:C4:D4:BE:6A:3C:5F
X509v3 Authority Key Identifier:
keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:ea:1a:db:92:95:70:15:11:a0:21:4d:ad:a1:93:35:d4:
c2:74:f8:c5:d1:e2:87:b0:b3:79:89:39:8f:1f:b3:4e:e2:99:
98:29:9c:9d:43:6d:f0:cf:35:9f:b1:43:ea:93:51:07:ac:dc:
68:73:5a:af:ef:58:71:c3:05:cb:b8:b7:83:0a:cb:19:a4:48:
41:c3:eb:8b:23:b1:45:f1:7a:31:11:61:39:4b:72:4d:b7:c8:
27:45:39:35:31:cc:61:12:ae:26:6b:54:c6:70:c7:0e:14:c4:
37:0e:50:ea:da:aa:ac:ef:4c:12:97:42:8d:23:7c:9f:19:83:
7d:0e:4c:9f:81:b2:03:33:87:3d:c0:21:e4:b8:54:90:80:ed:
a7:2a:e6:07:3f:99:e7:bf:ae:52:aa:c1:d4:5a:c3:c6:5c:00:
54:f8:1f:7c:45:24:9b:e5:c8:c5:00:86:5c:8b:99:d5:55:73:
ae:89:67:c4:09:25:8b:5b:ac:8a:05:75:9e:fa:cb:29:e1:b0:
ff:d3:b1:92:29:bc:06:0b:d2:09:f6:84:dd:dd:f4:d6:c5:71:
d5:a7:cd:fe:58:5e:35:a9:37:bd:85:1d:74:8c:8c:ee:88:69:
fb:4e:80:f9:91:40:49:b8:da:cd:fb:81:b1:1d:9f:28:16:12:
b3:c1:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:25 2026 by rpki-client