This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: IeBtZ0QpvYxn1IPxYMQ7Vu6ROQzoNzY5VOGJP9T8me4=
Subject key identifier: 41:7F:59:7A:13:23:66:AC:D3:AE:D0:7C:46:02:96:D5:F9:FB:FF:62
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0C19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0C12
Signing time: Sat 24 Jan 2026 18:22:22 +0000
Manifest this update: Sat 24 Jan 2026 18:22:22 +0000
Manifest next update: Sat 31 Jan 2026 18:22:22 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: YNKJU8Qfc2BIKJviXRwHp033YS1ipW9k6IQKviNXOFo=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: dTqPYAZ0fYSqCYvtzmzk6vV87y7uZ4+mAQSsb1JNqeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3097 (0xc19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Jan 24 18:22:22 2026 GMT
Not After : Jan 31 18:22:22 2026 GMT
Subject: CN=69750dde-528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:75:fd:d3:8f:eb:f3:32:9b:b5:00:13:2a:
df:48:06:34:c8:44:5e:b3:90:b9:6b:cf:f6:cc:12:
de:dd:14:9e:68:33:63:38:1c:02:13:98:e9:b7:8c:
9a:32:98:ad:e7:cf:8f:0b:92:df:59:38:3d:48:ab:
03:ab:2d:88:38:e0:19:4e:3b:98:94:1a:1f:ed:52:
15:20:23:88:7b:16:7c:2e:df:2b:aa:92:4f:05:70:
32:44:88:c1:2a:84:46:94:3a:66:cc:9c:1f:03:bd:
32:75:00:65:3e:46:1c:74:35:db:be:59:b3:e0:9a:
4c:f7:8b:d0:9b:6c:4c:1d:c3:44:57:22:f4:a1:8e:
77:40:2e:04:61:74:32:66:6c:d1:e1:93:4c:7c:79:
b3:2c:cf:02:89:61:b4:a6:b5:5f:b5:ea:6a:8b:74:
ca:82:da:43:33:e1:21:51:35:0e:5d:37:3f:ad:f8:
6e:fc:1e:15:68:9c:2d:7c:ef:52:8b:c9:25:28:78:
57:0e:d4:ba:a0:cc:ca:e4:a6:2e:b4:8b:21:17:9f:
b9:a9:a9:9c:e1:c8:18:df:7b:b4:72:49:1a:ad:c3:
aa:8c:e1:f8:22:5f:a5:60:8b:8f:40:9b:f3:24:72:
d6:53:18:0b:ae:90:8f:f2:88:a4:86:53:84:68:5f:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:59:7A:13:23:66:AC:D3:AE:D0:7C:46:02:96:D5:F9:FB:FF:62
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:0a:54:5c:7e:31:8f:0e:8b:08:cf:5e:0a:66:e6:53:25:
a3:da:89:49:a7:ce:e9:e9:b8:c9:4c:b9:b6:4a:93:3b:57:ba:
dc:63:37:27:ab:53:bf:9a:b7:31:08:a5:b6:3d:a3:3a:3a:47:
b7:ee:99:58:a7:43:0b:e8:68:a5:c5:a4:af:29:7b:7c:f2:c7:
38:09:ae:84:96:f1:8b:c6:89:79:80:21:6c:20:c8:10:37:c9:
3d:5c:67:a1:51:9d:81:b8:8f:5e:8a:03:ca:7a:01:6a:e5:43:
ec:4e:44:98:0e:58:e2:b3:4e:e6:a1:7e:35:92:ed:39:25:2b:
e7:e0:fb:46:38:50:2d:6e:b1:cb:43:2c:c2:59:81:2d:ac:88:
ab:80:63:25:06:9d:9a:69:47:51:f7:96:3c:57:25:89:19:0d:
a2:62:a7:a9:b1:71:e2:00:a1:fa:56:b0:ce:9a:69:31:c4:5c:
bb:09:45:d3:6d:e4:60:e8:4e:e1:9c:41:78:b3:92:50:07:3e:
c8:49:59:70:69:2d:40:e4:4c:ce:9a:bd:aa:04:e6:f6:02:21:
27:24:0a:9d:4d:b4:a3:83:13:30:9e:74:29:39:99:09:15:b7:
ff:4a:db:4a:c3:d7:c4:a3:fc:5e:0d:0e:b4:a4:41:61:a5:8e:
94:b1:25:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw
OUM0QjlGNEIwHhcNMjYwMTI0MTgyMjIyWhcNMjYwMTMxMTgyMjIyWjAYMRYwFAYD
VQQDDA02OTc1MGRkZS01MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Sl1/dOP6/Mym7UAEyrfSAY0yERes5C5a8/2zBLe3RSeaDNjOBwCE5jpt4ya
Mpit58+PC5LfWTg9SKsDqy2IOOAZTjuYlBof7VIVICOIexZ8Lt8rqpJPBXAyRIjB
KoRGlDpmzJwfA70ydQBlPkYcdDXbvlmz4JpM94vQm2xMHcNEVyL0oY53QC4EYXQy
ZmzR4ZNMfHmzLM8CiWG0prVftepqi3TKgtpDM+EhUTUOXTc/rfhu/B4VaJwtfO9S
i8klKHhXDtS6oMzK5KYutIshF5+5qamc4cgY33u0ckkarcOqjOH4Il+lYIuPQJvz
JHLWUxgLrpCP8oikhlOEaF/5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF/WXoT
I2as067QfEYCltX5+/9iMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2
MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj
bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ/gpUXH4xjw6LCM9eCmbmUyWj2olJp87p6bjJTLm2SpM7V7rcYzcn
q1O/mrcxCKW2PaM6Oke37plYp0ML6GilxaSvKXt88sc4Ca6ElvGLxol5gCFsIMgQ
N8k9XGehUZ2BuI9eigPKegFq5UPsTkSYDljis07moX41ku05JSvn4PtGOFAtbrHL
QyzCWYEtrIirgGMlBp2aaUdR95Y8VyWJGQ2iYqepsXHiAKH6VrDOmmkxxFy7CUXT
beRg6E7hnEF4s5JQBz7ISVlwaS1A5EzOmr2qBOb2AiEnJAqdTbSjgxMwnnQpOZkJ
Fbf/SttKw9fEo/xeDQ60pEFhpY6UsSWL
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:19 2026 by rpki-client