This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: h2lDCcLvGhbqYmgSkoNZT73Sovu6Plrxjv1GhzzxYDg= Subject key identifier: 14:66:C6:D2:8C:43:BC:2E:FC:44:8A:F7:04:15:98:1B:61:6B:90:E2 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 017F Signing time: Fri 23 Jan 2026 03:11:24 +0000 Manifest this update: Fri 23 Jan 2026 03:11:24 +0000 Manifest next update: Fri 30 Jan 2026 03:11:24 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: ONLmOZRO9iZAb1VZGaCLhvyGYZevIOU5JzkBHYGoOFA=) 2: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: R8eJxtItRazPsCZ9nlDjiUaGQnio5Z28G0pGlAoxT8w=) 3: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (hash: 1d3zxtwJOm1psvgD3f8+WDO08RijTBs6522TZCUjLQQ=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) 5: 536D7D82E23311F080CB84306D6F56BC.roa (hash: vg0Z8ilDAT2QseKnWVc3mmXETnZQ5xBQza8L0XDSQlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jan 23 03:11:24 2026 GMT Not After : Jan 30 03:11:24 2026 GMT Subject: CN=6972e6dc-3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:41:81:cc:25:15:a9:a3:48:4a:b7:4c:f5: 80:e6:76:71:f5:0d:7c:6b:ae:05:85:ef:8e:a2:a3: 8b:38:8d:76:ca:22:73:26:31:98:b7:d1:dc:d2:c0: 4a:d7:fa:e7:bd:87:c5:97:2c:cb:7c:6d:57:6c:05: 00:f6:4b:96:b8:07:12:21:c2:34:f3:22:b2:ab:f3: a0:9d:8d:c3:b4:80:c3:10:80:59:84:0f:b1:99:7f: f8:86:27:b5:be:03:50:12:c6:b6:d6:fb:5f:d1:28: d4:36:4c:03:7e:18:ab:da:7d:cb:e7:b2:90:41:12: 4e:e9:1b:e2:2a:38:16:fb:a8:40:b5:35:09:44:b4: c8:e0:40:66:4c:87:7a:33:01:2b:1f:23:0a:d7:7b: 31:fe:c5:5a:fc:54:f3:c2:f1:98:ae:8f:9c:5b:f5: 35:7b:f4:f5:0e:48:9b:32:87:d7:18:fd:a9:15:30: 7e:12:d8:f6:ca:de:23:a7:6f:0c:21:bd:5d:e1:3b: dd:9d:03:39:ff:eb:e3:1c:5d:c5:82:c8:db:a0:30: ee:2f:72:a4:34:d5:a4:cf:7c:22:4c:d2:96:d6:63: b1:1c:64:31:bf:7f:ce:7e:2a:c9:de:05:66:ab:aa: 66:94:91:c8:70:d4:83:c4:97:f0:e1:96:a4:a0:18: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:66:C6:D2:8C:43:BC:2E:FC:44:8A:F7:04:15:98:1B:61:6B:90:E2 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:cb:4a:f1:0b:bf:61:2f:38:09:cd:95:f3:67:ef:82:84:d0: 3f:99:a4:97:e7:07:1a:63:72:5b:65:c0:f9:8a:56:1d:6d:d7: d2:b4:60:61:f9:9e:2e:79:91:fb:45:fc:b3:db:0f:6f:71:c6: e8:80:95:33:e3:30:cb:fc:92:7e:6c:b2:5f:f5:5a:e3:94:e8: e7:e1:4e:87:f2:c2:83:ad:24:fa:e0:1f:bf:5d:91:67:24:86: 1f:f7:d2:46:fd:1b:6c:c0:a7:19:81:3e:98:dc:78:03:84:4e: a6:e6:9b:c9:ec:a0:d9:e9:25:bd:d4:e3:d8:19:13:56:70:a3: 75:ad:30:ab:82:11:b4:98:4b:20:42:4c:06:d9:c1:cd:77:94: d5:10:de:6c:5a:66:6a:bb:76:a9:c1:b9:f8:1b:29:c4:19:28: 6e:ce:2e:15:05:c1:69:1a:32:60:c4:58:b9:5d:71:e7:e3:d8: 61:3d:67:98:bd:2a:f5:8f:fd:11:0e:23:92:0f:d8:ea:6c:2a: 5e:b2:09:e7:e4:ee:79:c9:b8:a1:d0:e5:a7:ee:e4:22:cc:81: c4:66:6c:67:64:98:da:6a:36:f8:88:65:65:f5:59:14:f4:b0: 0f:5c:d1:4d:07:c3:7a:e5:5f:d2:41:56:ab:ff:a3:9b:be:f9: d9:df:3b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwMTIzMDMxMTI0WhcNMjYwMTMwMDMxMTI0WjAYMRYwFAYD VQQDDA02OTcyZTZkYy0zYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJZBgcwlFamjSEq3TPWA5nZx9Q18a64Fhe+OoqOLOI12yiJzJjGYt9Hc0sBK 1/rnvYfFlyzLfG1XbAUA9kuWuAcSIcI08yKyq/OgnY3DtIDDEIBZhA+xmX/4hie1 vgNQEsa21vtf0SjUNkwDfhir2n3L57KQQRJO6RviKjgW+6hAtTUJRLTI4EBmTId6 MwErHyMK13sx/sVa/FTzwvGYro+cW/U1e/T1DkibMofXGP2pFTB+Etj2yt4jp28M Ib1d4TvdnQM5/+vjHF3FgsjboDDuL3KkNNWkz3wiTNKW1mOxHGQxv3/OfirJ3gVm q6pmlJHIcNSDxJfw4ZakoBij5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRmxtKM Q7wu/ESK9wQVmBtha5DiMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZy0rxC79hLzgJzZXzZ++ChNA/maSX5wcaY3JbZcD5ilYdbdfStGBh +Z4ueZH7Rfyz2w9vccbogJUz4zDL/JJ+bLJf9VrjlOjn4U6H8sKDrST64B+/XZFn JIYf99JG/RtswKcZgT6Y3HgDhE6m5pvJ7KDZ6SW91OPYGRNWcKN1rTCrghG0mEsg QkwG2cHNd5TVEN5sWmZqu3apwbn4GynEGShuzi4VBcFpGjJgxFi5XXHn49hhPWeY vSr1j/0RDiOSD9jqbCpesgnn5O55ybih0OWn7uQizIHEZmxnZJjaajb4iGVl9VkU 9LAPXNFNB8N65V/SQVar/6ObvvnZ3ztE -----END CERTIFICATE-----Generated at Sun Jan 25 02:56:28 2026 by rpki-client