This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File: rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier: 00cqjRy95NIp9ZJzr+pcgT8JMAyIoD928ULvm3Mkj4k=
Subject key identifier: 39:0B:26:F6:09:64:87:77:87:79:5E:97:14:AB:B2:98:C0:FF:97:BD
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer: /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial: 0CB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number: 0CAA
Signing time: Sat 24 Jan 2026 18:02:33 +0000
Manifest this update: Sat 24 Jan 2026 18:02:32 +0000
Manifest next update: Sat 31 Jan 2026 18:02:32 +0000
Files and hashes: 1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: 1j9Vqi68rNvAUXcsm+N+p6JNY7U0p/WdDVNDHIGS7Oc=)
2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: OzJN0re3xgLzOjNQ/4EO/Q5rjMxHo1x+d+hZ2rjf3vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Validity
Not Before: Jan 24 18:02:32 2026 GMT
Not After : Jan 31 18:02:32 2026 GMT
Subject: CN=69750938-57d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:b3:8a:fa:41:73:bc:cc:10:e8:88:f8:19:
2f:0c:f2:5c:17:8f:4c:45:ad:91:c8:05:1b:11:19:
6c:54:79:ab:55:8f:5f:f7:dc:c3:3b:16:4d:14:9b:
7b:e9:db:ad:dd:ef:5f:28:75:9e:7e:bd:a2:19:e0:
b2:eb:54:59:a1:b3:f9:9a:8b:59:2a:66:44:2d:07:
62:97:6f:eb:63:22:63:67:d5:ea:5c:80:1c:ee:d8:
46:6c:70:74:11:22:5f:94:ad:53:3b:34:77:8c:9f:
ed:93:69:14:82:34:af:34:c0:0a:be:62:1a:5f:3c:
97:62:f2:7b:8e:47:86:00:e7:54:99:7f:a6:20:27:
2b:37:b5:f2:5e:14:9a:1a:28:fd:69:98:83:e7:5b:
26:88:63:24:e8:87:5e:80:35:3e:04:5c:e3:b4:5d:
82:2d:5b:38:5b:51:c2:ae:95:6a:cd:fb:40:96:a8:
0d:55:7d:c2:63:fe:cc:fc:bb:00:9f:83:62:0b:cf:
15:29:43:df:39:f9:df:78:c5:a3:43:35:5f:21:bb:
64:12:c7:e0:56:a0:4b:a5:01:9d:57:06:e5:20:de:
26:5b:5b:33:45:4c:f5:38:f8:a9:3a:44:dd:2d:f5:
3c:5e:8f:09:d5:04:99:d1:f2:b5:53:ad:b0:7d:64:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:26:F6:09:64:87:77:87:79:5E:97:14:AB:B2:98:C0:FF:97:BD
X509v3 Authority Key Identifier:
keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:06:71:49:ec:88:33:d6:9e:cc:df:01:f8:01:f2:83:7c:
3b:8a:fe:33:1b:d3:90:bb:0d:d9:a1:70:52:62:51:f6:38:76:
37:10:5d:5f:31:e1:49:8f:ac:aa:4a:85:d5:37:67:22:17:5a:
04:e4:d6:32:31:89:57:ab:66:f4:ea:b1:94:c4:0c:74:8a:13:
a1:fc:ab:7f:8c:bf:59:c8:4b:de:5a:bc:60:88:f4:ff:a2:75:
88:c2:af:4e:45:79:62:68:ac:4d:e4:94:15:d9:e6:ae:34:be:
73:85:77:89:e0:0e:6a:2c:05:3c:10:a5:20:b5:09:51:55:d4:
30:61:bf:c6:7a:34:c9:cd:da:27:cd:94:02:11:9c:2a:1d:1e:
26:37:69:a6:f3:6b:07:f6:15:c5:64:b7:20:9a:65:a1:fe:62:
dc:b6:e6:3e:b3:ee:c9:d0:9b:97:be:08:3b:6c:67:82:5f:7b:
b7:6e:97:20:12:0c:4d:11:7b:b6:11:f3:47:e8:69:da:df:5e:
a6:1d:a0:25:8d:0b:43:84:6a:08:b2:ab:31:c7:4c:d4:eb:0c:
dd:09:a3:d7:7c:b6:37:18:4d:27:b0:6c:b6:94:4f:e6:cc:e0:
85:b7:58:d0:ed:31:1a:8f:ae:24:e0:4d:ff:15:0a:8b:0a:bd:
b0:52:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:49 2026 by rpki-client