This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: AUhDwD4pC3cHstpOf8KQgIbLeGjP+gIS3yxZ6dbdZSs= Subject key identifier: 8A:EE:EC:E3:77:F3:7F:DF:F6:F7:9D:ED:AD:88:DC:E1:81:22:99:A1 Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 1852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 1852 Signing time: Sat 24 Jan 2026 16:16:30 +0000 Manifest this update: Sat 24 Jan 2026 16:16:29 +0000 Manifest next update: Sat 31 Jan 2026 16:16:29 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: EMQS5IKIOvbEsPuvRd8fFnHyqULtW7uoxu7z+2I4Bvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6226 (0x1852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: Jan 24 16:16:29 2026 GMT Not After : Jan 31 16:16:29 2026 GMT Subject: CN=6974f05e-961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:ac:d4:a7:0e:f2:53:cc:ef:e7:8f:d4:e6: 59:58:06:b8:90:99:a4:2e:4b:b9:60:db:b0:5c:20: ab:d0:5f:f8:1b:bc:40:b9:85:6f:d5:f8:b7:10:a5: 79:0f:17:b2:d3:57:d0:83:2d:de:27:ec:3d:05:03: a9:36:96:04:b1:c8:8a:78:ab:c6:3c:28:85:b7:27: ac:91:e7:7c:15:9a:c6:c4:79:70:62:32:bf:d7:d0: f4:d5:9d:fd:ef:eb:4b:91:55:75:3e:78:63:b3:62: 5f:1c:b5:f6:25:6d:84:f8:63:86:ae:48:a0:9c:e3: 57:eb:8e:de:e3:47:17:b8:5c:01:03:1f:71:20:29: c4:23:41:fd:d7:ec:0f:30:ac:72:d9:ac:1e:1d:e3: fa:8d:52:53:36:7e:ef:12:96:6f:7a:73:1f:ab:46: 42:38:44:b3:be:78:6d:a0:58:c2:eb:30:fb:86:4c: 64:c3:c2:02:ad:98:28:1a:8a:33:f9:f9:e0:dc:ea: d0:ed:c8:6f:a8:bd:c8:1d:fb:5e:9f:e2:2b:63:78: ee:39:b2:0b:4c:9e:c2:35:1d:69:df:61:cf:35:47: 12:b5:ba:0b:bb:11:21:97:8e:e3:0a:0c:fe:e4:73: c7:6a:05:14:37:08:8c:68:a5:4f:9e:61:c0:38:80: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:EC:E3:77:F3:7F:DF:F6:F7:9D:ED:AD:88:DC:E1:81:22:99:A1 X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7d:8c:b8:be:6d:50:e8:a4:3f:09:86:2f:bb:ae:d1:cb:98: cc:63:20:cf:c1:e9:7d:e4:02:47:2a:8e:43:5c:04:6d:cd:41: d2:08:a1:be:e1:19:51:e0:ae:a7:d7:9f:b1:63:fc:14:16:06: c7:a8:38:24:9c:3c:d9:99:9d:ec:47:c6:6c:69:4a:34:e2:51: 6b:bf:5c:6f:ce:3d:03:97:16:f5:32:94:02:f0:07:a8:45:c8: 6b:d2:27:0a:79:4a:59:d0:0f:f5:1f:38:90:10:26:23:21:85: 55:e5:d7:23:29:84:5d:a3:d5:7e:d1:e4:98:56:d2:8e:45:f8: 67:2a:76:8b:bb:35:e7:27:9a:32:e6:b5:ea:ef:d1:2a:93:28: 92:09:f2:22:98:b2:d9:84:9e:dd:e7:a9:69:4f:39:96:00:39: 1b:d7:37:c5:bf:db:18:97:58:71:77:44:20:4c:ab:bc:58:16: 04:7d:d4:34:fc:0b:3d:ae:65:cf:5e:86:09:80:60:5b:e6:ff: b1:ff:5f:a5:69:db:33:6d:c6:cb:69:85:70:a7:e3:1e:25:00: 02:c6:c8:ba:f5:45:73:f6:14:39:58:5c:06:24:c2:ba:c2:62: d0:29:61:97:3a:f4:e4:3a:63:ac:9a:23:ff:1d:b4:ef:65:30: 7e:d3:77:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjYwMTI0MTYxNjI5WhcNMjYwMTMxMTYxNjI5WjAYMRYwFAYD VQQDDA02OTc0ZjA1ZS05NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjQKs1KcO8lPM7+eP1OZZWAa4kJmkLku5YNuwXCCr0F/4G7xAuYVv1fi3EKV5 Dxey01fQgy3eJ+w9BQOpNpYEsciKeKvGPCiFtyesked8FZrGxHlwYjK/19D01Z39 7+tLkVV1Pnhjs2JfHLX2JW2E+GOGrkignONX647e40cXuFwBAx9xICnEI0H91+wP MKxy2aweHeP6jVJTNn7vEpZvenMfq0ZCOESzvnhtoFjC6zD7hkxkw8ICrZgoGooz +fng3OrQ7chvqL3IHften+IrY3juObILTJ7CNR1p32HPNUcStboLuxEhl47jCgz+ 5HPHagUUNwiMaKVPnmHAOIAqhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIru7ON3 83/f9ved7a2I3OGBIpmhMB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGfYy4vm1Q6KQ/CYYvu67Ry5jMYyDPwel95AJHKo5DXARtzUHSCKG+ 4RlR4K6n15+xY/wUFgbHqDgknDzZmZ3sR8ZsaUo04lFrv1xvzj0Dlxb1MpQC8Aeo Rchr0icKeUpZ0A/1HziQECYjIYVV5dcjKYRdo9V+0eSYVtKORfhnKnaLuzXnJ5oy 5rXq79EqkyiSCfIimLLZhJ7d56lpTzmWADkb1zfFv9sYl1hxd0QgTKu8WBYEfdQ0 /As9rmXPXoYJgGBb5v+x/1+ladszbcbLaYVwp+MeJQACxsi69UVz9hQ5WFwGJMK6 wmLQKWGXOvTkOmOsmiP/HbTvZTB+03eh -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:17 2026 by rpki-client