This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: FObBVg/PkRiV32v7TwJMNyp7bwId2RstNfDORmsiIYQ=
Subject key identifier: 3A:04:FE:1A:17:15:73:72:A6:34:DC:61:D1:C1:EF:B9:FF:2A:87:D6
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 02D4
Signing time: Sun 25 Jan 2026 00:33:11 +0000
Manifest this update: Sun 25 Jan 2026 00:33:11 +0000
Manifest next update: Sun 01 Feb 2026 00:33:11 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: N4hF3kEqB7GfZ/peMj1i+9Wcn++WN9wiSFgWpyTO1bI=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: AYJESnvrL0xf2cFi0STIbVetOH/3woitG40ANaAhl6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Validity
Not Before: Jan 25 00:33:11 2026 GMT
Not After : Feb 1 00:33:11 2026 GMT
Subject: CN=697564c7-b6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:da:4c:74:6c:e4:a7:b9:26:ff:7e:29:94:
98:32:a6:1c:bc:22:70:5c:6f:f7:96:8f:ca:c2:ab:
86:31:d9:56:3e:49:7b:a2:42:17:50:ed:f8:d2:ba:
f9:50:1e:bd:14:77:cb:63:2e:6e:e7:2e:d5:5b:8f:
57:23:3d:e6:fc:89:4f:29:fa:43:a0:bb:22:b8:c6:
a4:42:7e:ab:b9:68:8b:b8:6f:00:d3:31:86:6e:59:
2f:53:2e:c1:27:95:09:12:41:84:20:69:27:2d:3d:
10:4d:64:2f:7c:b6:b7:81:48:dc:59:25:9e:c4:25:
ec:98:95:9c:b0:52:28:6c:29:06:ae:bf:f6:42:2e:
e2:db:e6:fc:65:f9:73:22:3e:9a:d7:a3:7f:49:61:
2a:62:ca:3b:d9:9f:c7:27:f9:1a:af:ff:cb:63:ba:
f7:02:6b:b9:66:47:6b:87:bc:50:e4:48:c6:1b:7c:
63:17:59:99:8f:33:8e:ef:9c:ad:c0:b6:e2:94:7d:
76:93:2b:e0:96:b9:1b:af:7b:98:e7:26:c6:49:f0:
9a:a9:d5:fa:1a:4a:20:b7:b1:59:fa:eb:68:ff:5b:
ef:26:5b:cf:8f:c9:b1:93:d0:69:68:40:2b:fb:07:
8f:0c:e4:d9:fd:54:79:ea:d0:21:06:39:4c:9c:2d:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:FE:1A:17:15:73:72:A6:34:DC:61:D1:C1:EF:B9:FF:2A:87:D6
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:58:5f:a3:24:14:08:2e:16:48:97:2a:85:50:69:eb:06:
41:32:e8:3f:aa:4d:81:62:89:ee:e2:5e:9a:bb:02:44:b6:3d:
6c:0d:9d:a1:2a:41:a5:cc:a7:2d:4b:a0:1a:59:b4:79:2f:22:
d4:03:15:10:c6:1f:6d:4f:dd:91:8b:5a:5f:59:4f:d8:d8:c9:
71:93:15:09:13:a8:20:b8:23:e3:12:2b:c2:e3:68:e5:34:3c:
68:9d:59:97:6d:4a:5c:40:64:28:36:67:38:0d:20:1c:ee:01:
b1:c2:68:ae:2c:1e:6f:80:61:92:c1:81:49:e5:01:75:10:2e:
b3:5b:50:31:81:f6:2d:43:37:ba:4b:a7:b1:5c:b4:85:44:49:
7b:61:75:dc:73:2c:a7:aa:f6:69:f9:18:bb:3a:ee:57:3d:a5:
1e:ae:0f:a5:96:2f:fb:77:0c:4d:8b:70:a6:16:e6:b8:28:9e:
3b:bc:d2:ea:88:1f:de:2d:19:44:aa:48:49:da:16:26:bb:f4:
8f:a6:dd:ca:4c:86:b7:7d:ae:f0:8a:5c:54:24:c8:20:2a:e7:
59:2e:f4:a6:19:ba:38:a6:65:e2:39:06:f1:5f:a5:b0:93:1a:
34:05:56:0f:85:61:51:f8:5d:bd:ce:50:90:fe:31:6c:71:ed:
99:52:6d:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCMzAxMTAvBgNVBAUTKDFEMkE1NTE1QThBOTlCMzBCMjFEMTg3MUJDRkFGRDI3
RUIxQTEzMkEwHhcNMjYwMTI1MDAzMzExWhcNMjYwMjAxMDAzMzExWjAYMRYwFAYD
VQQDDA02OTc1NjRjNy1iNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7OzaTHRs5Ke5Jv9+KZSYMqYcvCJwXG/3lo/KwquGMdlWPkl7okIXUO340rr5
UB69FHfLYy5u5y7VW49XIz3m/IlPKfpDoLsiuMakQn6ruWiLuG8A0zGGblkvUy7B
J5UJEkGEIGknLT0QTWQvfLa3gUjcWSWexCXsmJWcsFIobCkGrr/2Qi7i2+b8Zflz
Ij6a16N/SWEqYso72Z/HJ/kar//LY7r3Amu5Zkdrh7xQ5EjGG3xjF1mZjzOO75yt
wLbilH12kyvglrkbr3uY5ybGSfCaqdX6Gkogt7FZ+uto/1vvJlvPj8mxk9BpaEAr
+wePDOTZ/VR56tAhBjlMnC35kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoE/hoX
FXNypjTcYdHB77n/KofWMB8GA1UdIwQYMBaAFB0qVRWoqZswsh0Ycbz6/SfrGhMq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIzMC84OTc3QzY3NDE5
MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16Q3lIUmh4dlByOUotc2FF
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hTcFZGYWlwbXpDeUhSaHh2UHI5Si1zYUV5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUIzMC84OTc3QzY3NDE5MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16
Q3lIUmh4dlByOUotc2FFeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBM+VhfoyQUCC4WSJcqhVBp6wZBMug/qk2BYonu4l6auwJEtj1sDZ2h
KkGlzKctS6AaWbR5LyLUAxUQxh9tT92Ri1pfWU/Y2MlxkxUJE6gguCPjEivC42jl
NDxonVmXbUpcQGQoNmc4DSAc7gGxwmiuLB5vgGGSwYFJ5QF1EC6zW1AxgfYtQze6
S6exXLSFREl7YXXccyynqvZp+Ri7Ou5XPaUerg+lli/7dwxNi3CmFua4KJ47vNLq
iB/eLRlEqkhJ2hYmu/SPpt3KTIa3fa7wilxUJMggKudZLvSmGbo4pmXiOQbxX6Ww
kxo0BVYPhWFR+F29zlCQ/jFsce2ZUm3W
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:10 2026 by rpki-client