This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File: HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier: t0us0dMnX/dt0RywyfxmwQM/EWTO03WM5shrzeqK/cs=
Subject key identifier: D4:E1:42:BA:C0:79:63:44:D3:C9:4E:02:0A:B1:F6:23:C2:B3:22:CB
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer: /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial: 15F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number: 15A0
Signing time: Sat 24 Jan 2026 16:35:30 +0000
Manifest this update: Sat 24 Jan 2026 16:35:29 +0000
Manifest next update: Sat 31 Jan 2026 16:35:29 +0000
Files and hashes: 1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: yokTe7YCmEC/W0qHIxtncf6XCZ12R15RshIzm3o5mRs=)
2: C8C8D4F2F04611F087BCEF76546F56BC.roa (hash: aDZzOnL6bB5Pw8lIIbt5jQWRrI0yAlcGG4yB2u9uTSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5625 (0x15f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Validity
Not Before: Jan 24 16:35:29 2026 GMT
Not After : Jan 31 16:35:29 2026 GMT
Subject: CN=6974f4d1-0706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:c6:6c:eb:74:0d:a0:ff:6d:5d:2d:75:bf:
25:2d:e7:a8:f8:65:c6:58:73:ca:52:be:c2:2b:67:
f2:46:34:2b:e0:9f:dd:26:20:fa:e6:d4:db:86:3b:
c8:69:b7:13:63:f0:69:00:2d:30:c3:a9:90:0d:ef:
a5:e7:80:d3:19:73:26:ba:a4:52:1a:35:47:19:f4:
54:b8:e8:7d:c0:29:64:51:7f:fc:54:8d:9e:b6:7a:
0e:1a:b0:22:5c:42:c8:ef:1a:ea:00:78:2a:72:11:
57:38:64:44:17:3e:7f:00:16:e8:6f:36:12:38:19:
03:ab:bd:75:a9:1a:17:53:36:06:9b:17:15:70:82:
5e:0b:5e:01:92:9f:d6:f2:cb:45:6d:09:07:11:fe:
29:1d:96:a6:12:76:92:b4:96:18:8d:0b:ed:80:b6:
36:6a:3d:91:f6:02:6e:74:44:18:fb:2f:b8:9e:41:
d6:10:00:b8:75:56:cf:78:ce:82:cf:2f:4e:95:26:
cb:91:bf:78:61:4d:dd:1c:bb:c9:39:08:07:fc:82:
1d:14:c9:be:09:e5:97:45:48:62:39:9a:94:9f:3a:
ea:57:17:d2:7c:8b:6a:9c:e4:68:e1:46:4a:0a:2b:
4e:68:c1:1c:e0:9c:16:58:0d:bb:5e:f9:7d:cd:ca:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:42:BA:C0:79:63:44:D3:C9:4E:02:0A:B1:F6:23:C2:B3:22:CB
X509v3 Authority Key Identifier:
keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ec:b0:80:ea:77:04:69:e2:b3:07:bc:21:34:56:fa:d5:15:
4c:ff:8a:c4:46:4e:b9:da:d6:7f:9b:f1:e7:5e:2f:bc:89:a8:
b4:15:69:48:00:aa:3a:60:a5:f2:2d:3d:33:8a:ae:20:67:db:
58:9b:86:be:47:53:05:61:fc:4d:2c:d1:1c:b0:e1:5f:22:c0:
ae:7e:29:9b:02:79:dc:0b:20:6d:28:e5:11:80:a5:a5:b9:96:
1b:b9:84:8a:23:8f:27:a6:b2:42:78:77:0b:b0:40:b3:7c:70:
fa:07:23:08:f0:cd:27:03:0f:b4:db:aa:09:90:9e:63:02:88:
39:53:6c:47:c6:47:f9:11:e4:38:f9:66:63:b9:87:f7:70:3a:
00:60:e2:1d:1e:d6:2c:ee:29:15:69:6c:7e:2b:61:bd:43:57:
64:af:d3:18:15:13:df:64:f1:b5:1b:85:70:18:97:c2:da:db:
db:f3:ee:fb:85:37:7e:c0:d1:f6:71:43:47:ee:38:47:81:6c:
72:a3:ad:cd:12:b2:5f:6a:4d:9a:cb:05:ca:62:b9:30:0d:9a:
b1:87:e3:42:71:b8:b5:10:10:1a:c1:29:6e:c6:16:00:19:33:
f8:8c:14:cd:54:a7:ce:83:ac:a1:7c:6d:83:b8:76:4d:9e:8e:
73:3d:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:17 2026 by rpki-client