This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier: AsdiuAAtuYmMpGUif4V5yAWUYK7/5oQ98P2ZQKWxpfU=
Subject key identifier: D2:FB:66:46:A4:ED:36:76:63:D3:67:8A:DE:6A:00:10:AC:C6:FD:D0
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number: 016D
Signing time: Sun 25 Jan 2026 03:09:39 +0000
Manifest this update: Sun 25 Jan 2026 03:09:39 +0000
Manifest next update: Sun 01 Feb 2026 03:09:39 +0000
Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: zigSME8/i9hCnpA6/mbojfNpNxnvkqMkc74A927R2wI=)
2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Validity
Not Before: Jan 25 03:09:39 2026 GMT
Not After : Feb 1 03:09:39 2026 GMT
Subject: CN=69758973-e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:f1:4c:ee:28:b2:50:86:19:4b:6d:07:23:
12:84:b2:3c:32:67:50:71:40:cc:0a:b5:0f:c3:1d:
c6:78:40:4c:e8:79:a0:51:ef:de:f8:1b:99:ba:03:
70:48:b8:bf:d3:7d:fe:d6:ae:c4:01:2f:34:38:ae:
98:e8:8c:70:36:34:73:e6:d1:83:d5:68:fe:4a:64:
53:89:e9:52:68:00:34:67:ad:57:93:44:c7:31:36:
49:58:7a:4d:eb:da:88:10:c4:66:45:ac:2a:2f:d8:
24:9d:e9:52:df:78:95:22:3e:aa:bb:bd:c7:29:c5:
d7:98:65:46:6a:18:23:20:73:14:23:18:f9:28:c1:
fc:ce:84:8c:03:2a:5d:2e:a5:55:ff:42:cd:ca:91:
9a:d8:cb:cd:ca:26:7d:4b:6a:15:60:b1:d8:62:50:
05:6e:bd:df:f3:90:00:ce:ad:dc:ae:fd:6b:1a:7b:
9a:c6:4c:8c:b7:95:94:09:3e:76:8e:a7:5d:08:9f:
b0:2f:26:35:46:01:fc:40:b5:55:c2:7d:ee:71:c2:
26:6c:22:97:bd:f1:5d:29:58:42:2e:2c:1a:4d:c2:
3a:5d:c4:26:29:9c:9c:5b:42:b1:30:32:d3:b7:81:
85:27:3e:9e:16:02:4f:d6:19:b1:23:e3:9c:09:4c:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:66:46:A4:ED:36:76:63:D3:67:8A:DE:6A:00:10:AC:C6:FD:D0
X509v3 Authority Key Identifier:
keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:94:d3:cc:86:44:f8:a3:ac:44:c8:59:8a:bd:57:41:b4:c9:
27:80:d5:38:9c:71:46:c3:bd:76:a2:a4:97:54:c8:34:d0:b6:
6f:71:92:77:91:f6:f4:f3:40:5e:82:13:2e:d5:d8:0b:a6:86:
7b:11:16:d7:86:2f:37:ec:9e:07:50:e6:f5:92:0a:5a:7d:46:
25:5d:f0:f9:ce:b1:aa:eb:44:34:e7:3c:2e:3a:51:d3:66:62:
6d:a8:38:23:02:f3:75:1b:53:5a:1f:69:3b:2c:50:af:9d:9f:
42:42:0d:4c:5d:68:4d:43:a0:d4:30:63:6f:29:c7:a3:6f:f8:
a4:72:d6:ee:5d:cd:89:fe:8d:9d:aa:73:d8:32:3b:9f:a1:4a:
04:5a:df:ef:4e:cb:b8:7c:fd:cd:d1:93:7b:80:0d:ef:37:83:
27:ed:d2:c2:63:62:62:d0:6b:b5:4a:31:93:0b:30:b9:c8:ea:
5d:8c:d3:19:0d:b7:e8:02:85:cb:9c:c9:6e:f9:59:8f:db:c1:
54:3a:fe:62:33:29:87:41:2a:3a:00:a4:6b:33:7d:08:68:ec:
54:c1:6b:c5:90:ab:b3:25:b7:2f:6e:ca:2b:ba:1a:b9:fe:4a:
00:d9:fb:b8:5d:48:78:6c:ba:58:82:ef:44:50:cf:4b:e1:c2:
ee:e0:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:23 2026 by rpki-client