This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier: 0dWrj5wqAhv6TavG7y5FTLNNonF1wT6uqai50B+pZn4=
Subject key identifier: F6:27:29:8E:F6:C0:9B:A2:B5:02:B9:14:CC:59:6C:D9:5A:88:05:12
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number: 023C
Signing time: Sun 25 Jan 2026 01:18:14 +0000
Manifest this update: Sun 25 Jan 2026 01:18:13 +0000
Manifest next update: Sun 01 Feb 2026 01:18:13 +0000
Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: LvRzT32rZjFlIy9HTrhha4/PaFVTXiRF2xuhAlFex38=)
2: 86312104899311F0ACB13D20C4F9AE02.roa (hash: IeMc/sZZnrV1a/m8gaYSwC2jZsyT84H1D6+PvUGsie8=)
3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: Jan 25 01:18:13 2026 GMT
Not After : Feb 1 01:18:13 2026 GMT
Subject: CN=69756f56-67a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b5:53:35:2a:0f:87:50:16:fe:bb:b5:b7:b4:
fa:63:aa:76:43:6e:04:e6:c6:75:a0:e6:32:26:5f:
06:26:ec:07:36:25:d8:ac:5c:96:45:e9:7d:46:04:
75:2f:0b:e4:65:e7:02:b2:f8:bd:54:64:37:07:f9:
1a:c9:a8:7a:5b:03:27:46:24:0f:ee:70:17:53:97:
16:c1:4a:a6:71:9d:4c:5b:ee:65:ce:7b:36:1b:8a:
87:51:a2:49:04:25:8d:39:2b:f8:34:74:b9:84:37:
14:67:d3:70:40:5c:c4:30:0c:1e:fe:a3:6b:1e:08:
ca:9c:55:88:16:26:e6:bf:70:95:a3:03:ac:e2:8d:
56:74:51:12:00:49:2b:11:f8:0b:1b:60:d2:95:5a:
27:1b:ee:e9:13:85:91:48:2c:98:0b:b8:88:a4:3b:
ad:12:e8:24:f2:9e:6d:4c:3a:5f:ba:d4:6e:12:34:
fb:d4:96:e6:14:95:a4:fa:d2:aa:1f:94:d0:66:91:
0a:a6:ec:56:d3:ea:8b:18:b7:d3:a9:f3:66:c2:bd:
0d:aa:d9:9a:0a:27:fa:03:04:bc:dc:58:37:42:d2:
a6:ab:74:dc:eb:03:2f:dc:dd:be:01:32:de:14:8c:
ca:bd:67:0d:85:4a:c4:98:a6:27:df:ce:48:a0:7f:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:27:29:8E:F6:C0:9B:A2:B5:02:B9:14:CC:59:6C:D9:5A:88:05:12
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:5b:0c:4e:0c:fe:67:f6:6b:21:dc:0a:b5:21:9c:fe:7a:27:
95:1b:fe:7d:b5:cc:cb:08:8e:36:b7:62:6d:16:35:fc:77:57:
06:12:54:d4:91:7b:37:0b:32:c6:12:3b:1f:6e:88:44:e0:fe:
55:76:6e:2a:5f:37:c3:70:71:3e:a3:54:0d:e7:30:d5:f3:6e:
58:6d:16:21:08:ad:e7:57:c2:2d:e8:5e:2d:d7:1b:d0:76:6e:
74:54:7a:cf:b3:13:ce:92:b4:f2:8c:73:25:4d:02:46:20:8f:
29:7b:2e:b3:9e:65:a8:23:b7:23:48:76:73:1a:79:02:0f:de:
73:7a:28:66:8f:2a:b6:e3:87:2e:65:39:21:7a:1a:4d:18:14:
bb:f6:02:27:ae:aa:d1:09:71:d9:cc:26:3f:8d:c0:47:6e:bb:
d1:61:7e:7b:97:50:23:28:be:79:48:a9:56:a3:88:01:48:a5:
64:97:a3:b9:b6:7e:5c:69:81:da:53:40:2f:52:bb:94:4b:36:
a6:7b:f3:35:2e:d8:35:77:ab:b5:08:95:c7:9f:8e:10:0c:5d:
d1:24:fe:ab:50:1b:19:0e:61:bf:8d:ef:2c:1f:af:51:3a:98:
c2:42:73:53:9b:fe:b4:15:fe:77:3a:12:48:38:07:0f:5a:87:
2d:80:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:49 2026 by rpki-client