This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json)
Hash identifier: sX1hn/MgqnJshuux45iiEH3PZGHoxr+w4pGir57+plw=
Subject key identifier: 12:81:2C:32:83:60:78:53:CE:CB:9C:12:4B:8B:4A:AF:E7:3C:7B:CC
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
Manifest number: 049C
Signing time: Sun 25 Jan 2026 00:30:21 +0000
Manifest this update: Sun 25 Jan 2026 00:30:21 +0000
Manifest next update: Sun 01 Feb 2026 00:30:21 +0000
Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: 7O8+6QL7bPYbNb5/Wy6SCBiGVb1ASSplH1K6WWT6rPo=)
2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: ktBWqYwJGn+fOJr07wOaX0WHMtmcG2JSCJbdyakvZ/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Validity
Not Before: Jan 25 00:30:21 2026 GMT
Not After : Feb 1 00:30:21 2026 GMT
Subject: CN=6975641d-8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:60:cb:30:31:0f:88:f0:c7:77:4b:64:f7:
e7:1b:5f:c6:76:c4:e4:53:12:61:de:94:a1:61:24:
19:82:12:c5:0f:40:18:fd:63:94:dc:23:81:93:e0:
e3:d4:05:42:5d:d5:bf:62:f7:14:39:02:51:f9:1e:
aa:b9:8a:2a:af:33:32:0b:c0:8b:cf:90:a5:64:8a:
4e:98:b8:eb:9f:f8:b0:2f:43:02:1f:da:21:df:77:
86:f5:34:95:52:16:01:a6:90:31:6f:7c:44:5f:63:
f3:3c:ad:65:ee:3d:c9:d6:09:8d:30:af:9b:f1:e9:
d3:ee:14:af:86:26:ea:54:12:d9:67:e2:2b:2a:3a:
c2:55:50:44:ec:88:5a:20:ec:7f:bd:e0:e1:d2:73:
79:ed:83:06:74:52:d0:1e:8c:34:c0:4c:16:14:ca:
e5:95:3e:79:1a:74:fc:56:a3:e2:fb:ac:2d:0f:f5:
a3:7c:9e:e4:6c:4e:23:f6:18:f3:ab:12:fa:73:a9:
b7:22:cb:59:f3:fc:14:e1:9e:41:89:09:6f:09:1b:
29:06:fe:16:ea:79:d7:de:23:32:58:36:d0:68:07:
07:e7:24:4b:6d:a3:72:d7:a0:18:38:15:b9:7e:1e:
c5:8a:4e:1b:7b:2b:49:05:01:f3:bb:9a:9a:da:d5:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:2C:32:83:60:78:53:CE:CB:9C:12:4B:8B:4A:AF:E7:3C:7B:CC
X509v3 Authority Key Identifier:
keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:54:ec:24:f6:bf:82:10:7b:30:c1:f7:aa:ed:94:ec:91:e8:
f2:43:46:a8:9e:ab:59:ce:cf:b6:50:5d:a8:64:26:6b:16:a0:
51:ed:e2:25:af:07:9e:91:76:59:cb:ef:07:06:7d:dd:15:25:
8a:f2:dc:5c:5b:c0:8a:88:91:57:da:da:d5:dd:ac:d6:c8:19:
60:29:c9:db:71:92:82:ed:7f:54:1f:6d:ff:3b:2c:1b:ab:0b:
c9:bc:3e:a3:7d:12:6a:9a:eb:d9:29:7c:23:a7:0d:5e:e2:f8:
c5:49:2b:33:8c:49:19:d4:5d:b2:df:82:4a:a6:30:7d:68:95:
35:02:8a:8d:15:98:e1:01:36:ca:6c:29:bb:c4:bf:af:cb:eb:
c3:a9:c4:45:b1:63:57:d8:ef:d8:94:15:03:29:27:80:6f:1c:
34:0c:b9:8d:5c:fa:bd:a4:fd:93:74:15:9a:4b:7e:35:d5:b3:
31:71:7f:84:49:11:ac:e2:00:68:fe:cc:ca:c0:d5:0a:c5:5b:
b5:40:33:e7:b0:8a:a8:0c:35:86:e8:b4:6a:e5:7d:bb:41:1d:
8c:87:1a:00:3f:ab:b8:ac:67:e6:b0:e6:bd:94:0b:0d:c3:ad:
7b:17:a8:4b:17:79:4b:ec:cb:42:36:f5:25:29:5a:7f:77:39:
8c:e0:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:40:19 2026 by rpki-client