This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json)
Hash identifier: 6BRnodEbi2St3/bK0zAujqRgwi28DQtc7Cj5MRk4ij8=
Subject key identifier: EE:7C:9F:56:8A:FB:44:D9:56:8B:5F:A3:6F:7D:46:84:74:7B:43:EF
Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
Manifest number: C4
Signing time: Fri 23 Jan 2026 04:58:12 +0000
Manifest this update: Fri 23 Jan 2026 04:58:12 +0000
Manifest next update: Fri 30 Jan 2026 04:58:12 +0000
Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: p7v1Q5K3dI6nQAj3UPvk9w2M83kUAVtoPO92WuX1Dhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4
Validity
Not Before: Jan 23 04:58:12 2026 GMT
Not After : Jan 30 04:58:12 2026 GMT
Subject: CN=6972ffe4-9593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:11:2c:3a:a3:fd:a6:a8:1c:46:39:4e:34:
de:77:18:b9:90:19:96:1a:83:f1:d2:ad:a4:18:82:
6e:a1:7d:fa:ee:da:1b:80:fa:d5:fb:ec:73:90:58:
54:58:79:a9:15:8f:0b:7f:57:70:b3:34:dd:94:df:
ab:34:ee:84:d4:05:63:6b:9f:92:a0:6a:47:a2:44:
2b:f8:13:19:5d:5a:3c:d5:4f:a2:e7:af:81:e4:89:
6b:02:e7:0a:48:07:7a:3a:3c:dc:3e:46:5b:00:a8:
fb:31:c8:84:d3:b2:6b:17:c4:e1:fd:3f:d2:4d:2d:
14:dd:ed:37:6f:e0:e4:3f:06:15:83:0d:9d:78:12:
98:31:70:d4:ea:2b:5a:f2:32:54:a1:f0:72:8f:b9:
14:68:43:52:3d:13:09:50:41:a8:86:e4:f2:c8:b9:
01:69:e4:9e:bf:1b:fd:56:07:0d:cd:37:70:33:47:
9a:8b:2b:0d:a5:e2:79:ff:a3:ca:e8:10:5f:a5:d1:
48:6b:21:72:03:9c:93:22:e1:b7:be:5b:db:fb:90:
ee:63:24:bb:b7:e5:ed:41:10:57:f4:72:f1:f7:9a:
a7:cb:96:1c:6f:b9:0b:bf:d7:1c:8c:db:d1:4e:7a:
2f:3b:11:44:1e:da:6e:c0:f1:8a:9d:0f:60:f4:7e:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:9F:56:8A:FB:44:D9:56:8B:5F:A3:6F:7D:46:84:74:7B:43:EF
X509v3 Authority Key Identifier:
keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:7c:af:43:43:07:01:67:91:d6:5c:a8:1b:bf:e6:a8:c4:
4f:51:3c:66:64:f5:c9:08:32:27:94:18:7b:67:3d:a6:21:47:
42:81:a2:a5:f2:8d:91:36:9a:e8:d0:37:f7:e0:12:f6:36:24:
51:38:b7:95:e7:e5:67:5b:5d:09:03:24:c6:14:da:06:02:40:
bb:81:2d:ce:e1:aa:75:2b:00:75:f4:4b:b7:53:e2:08:f1:2f:
09:67:20:c3:f5:9f:d2:e8:a6:96:f2:23:f2:ec:d1:a8:63:c4:
d5:b7:85:b3:39:1b:5f:62:1f:a1:59:4e:44:ff:0e:5e:1a:56:
48:36:f7:08:6e:a5:43:cb:1f:b6:10:8e:9f:3c:50:5e:9d:17:
07:be:1d:cf:09:ad:08:2b:ec:05:0d:68:c2:45:b0:db:4d:bc:
8d:18:ee:bc:e6:42:cb:d2:6e:16:e5:7f:c9:a8:ac:47:95:73:
59:85:a3:c6:0f:bd:81:27:c2:4d:ba:5b:67:99:32:16:e3:79:
11:47:cb:e4:bf:3f:56:70:c3:bc:13:4a:45:81:bd:62:59:61:
72:61:ec:75:b5:39:98:60:ba:f3:00:e7:b4:e5:17:3a:49:96:
71:18:8d:29:e3:a8:7e:3d:4f:53:22:59:3a:ef:ea:5a:e6:24:
8e:15:d8:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5
QjI1NkZERTQwHhcNMjYwMTIzMDQ1ODEyWhcNMjYwMTMwMDQ1ODEyWjAYMRYwFAYD
VQQDDA02OTcyZmZlNC05NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAol4RLDqj/aaoHEY5TjTedxi5kBmWGoPx0q2kGIJuoX367tobgPrV++xzkFhU
WHmpFY8Lf1dwszTdlN+rNO6E1AVja5+SoGpHokQr+BMZXVo81U+i56+B5IlrAucK
SAd6OjzcPkZbAKj7MciE07JrF8Th/T/STS0U3e03b+DkPwYVgw2deBKYMXDU6ita
8jJUofByj7kUaENSPRMJUEGohuTyyLkBaeSevxv9VgcNzTdwM0eaiysNpeJ5/6PK
6BBfpdFIayFyA5yTIuG3vlvb+5DuYyS7t+XtQRBX9HLx95qny5Ycb7kLv9ccjNvR
TnovOxFEHtpuwPGKnQ9g9H71PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO58n1aK
+0TZVotfo299RoR0e0PvMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC
MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl
SXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgHHyvQ0MHAWeR1lyoG7/mqMRPUTxmZPXJCDInlBh7Zz2mIUdCgaKl
8o2RNpro0Df34BL2NiRROLeV5+VnW10JAyTGFNoGAkC7gS3O4ap1KwB19Eu3U+II
8S8JZyDD9Z/S6KaW8iPy7NGoY8TVt4WzORtfYh+hWU5E/w5eGlZINvcIbqVDyx+2
EI6fPFBenRcHvh3PCa0IK+wFDWjCRbDbTbyNGO685kLL0m4W5X/JqKxHlXNZhaPG
D72BJ8JNultnmTIW43kRR8vkvz9WcMO8E0pFgb1iWWFyYex1tTmYYLrzAOe05Rc6
SZZxGI0p46h+PU9TIlk67+pa5iSOFdha
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:25 2026 by rpki-client