This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: lCtQ6RbYloKENKgB7th3nVz9RxwvoIu0lmKDTXHLpcs= Subject key identifier: E9:BD:41:98:58:53:B4:EF:B7:5D:6C:F2:52:D0:93:12:32:8D:D1:61 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0AC4 Signing time: Sat 24 Jan 2026 18:58:47 +0000 Manifest this update: Sat 24 Jan 2026 18:58:47 +0000 Manifest next update: Sat 31 Jan 2026 18:58:47 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: rQiQNJsQFFbR05mTw0Tttej0/Fs1TV7FP+lN5uXy2BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Jan 24 18:58:47 2026 GMT Not After : Jan 31 18:58:47 2026 GMT Subject: CN=69751667-f8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:87:b3:fa:4e:10:2c:42:16:bb:2d:5c:82: a8:51:b2:6a:6e:ad:aa:41:59:fd:a4:ca:c6:6e:e2: 5b:68:63:6b:ee:1b:8f:56:b9:7a:5a:72:e2:b9:22: 21:23:df:e1:20:b4:5c:ae:71:b5:55:bb:a9:7f:30: 74:3c:03:ee:f2:63:cd:93:5c:43:a6:fe:59:c6:3d: ee:93:96:40:a8:03:da:3c:59:c2:79:52:8a:11:81: 12:9b:0b:53:4e:f5:a6:0b:c7:2c:94:55:5f:d4:08: fb:5f:86:26:24:6a:e3:8e:97:cd:bb:d0:f5:58:c2: 16:b4:1b:18:54:31:46:8f:f6:ee:28:c9:d4:b5:06: cf:c4:b7:dc:e0:fc:cc:f7:29:ba:80:8b:c7:c9:f1: d8:bf:52:4d:50:9a:2d:bd:86:05:5a:4e:28:08:0a: 4c:13:20:83:54:26:a2:8e:6b:60:d2:19:ec:9f:f2: 64:d2:8e:25:51:98:dc:6c:e4:cf:0c:6c:b2:fc:47: eb:59:7b:ae:36:67:6b:f1:46:ab:14:3f:01:fe:24: b1:5c:9e:2b:a6:2b:b8:13:f7:d6:7d:73:57:3d:7e: 4c:e6:af:6b:dc:76:47:4d:92:74:e3:a5:f0:63:ca: 40:96:f9:dd:dd:4a:b4:6f:08:4a:95:05:ae:7e:3d: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BD:41:98:58:53:B4:EF:B7:5D:6C:F2:52:D0:93:12:32:8D:D1:61 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8b:48:40:f0:99:2a:21:53:f4:ad:d0:b7:a0:a8:60:00:54: 71:0f:3c:7c:85:2a:29:7e:71:5b:5c:1e:36:da:ae:cc:da:f1: 3e:90:25:ce:53:14:9e:66:90:18:43:af:b4:3b:a3:e8:1a:39: 96:d7:cd:14:d9:05:dd:19:1f:a5:9b:ba:16:23:2f:ed:50:71: c6:93:8c:5b:d5:f3:41:29:fe:01:45:b7:60:50:1c:88:29:76: 92:aa:0a:4e:d7:ab:65:68:91:f5:c5:fd:db:f4:70:a3:6d:75: df:2d:c8:84:01:92:ff:c2:89:db:50:6c:1d:af:e9:02:7b:fb: c8:b5:24:00:74:ee:ab:f4:a2:0c:7f:4a:76:ca:97:e5:c6:03: 10:19:1e:28:24:7d:08:50:fb:ac:a8:9b:5b:d1:13:1f:87:d6: ba:e2:b4:dd:0e:39:d7:77:fc:ea:98:a0:0a:80:56:da:b3:37: f1:f1:df:6f:b3:1b:fa:1c:ca:6a:f8:f0:6a:df:70:90:e1:3a: 95:67:12:1c:53:62:41:3b:7c:27:8f:51:dd:25:dd:4e:5d:7f: 34:17:1f:b7:14:cd:91:dc:8b:f3:b6:48:fb:39:3f:a1:c9:63: 18:ca:40:e2:77:39:e1:41:05:02:ab:a4:3b:e1:14:1f:61:63: c2:2e:9a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjYwMTI0MTg1ODQ3WhcNMjYwMTMxMTg1ODQ3WjAYMRYwFAYD VQQDDA02OTc1MTY2Ny1mOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/uHs/pOECxCFrstXIKoUbJqbq2qQVn9pMrGbuJbaGNr7huPVrl6WnLiuSIh I9/hILRcrnG1VbupfzB0PAPu8mPNk1xDpv5Zxj3uk5ZAqAPaPFnCeVKKEYESmwtT TvWmC8cslFVf1Aj7X4YmJGrjjpfNu9D1WMIWtBsYVDFGj/buKMnUtQbPxLfc4PzM 9ym6gIvHyfHYv1JNUJotvYYFWk4oCApMEyCDVCaijmtg0hnsn/Jk0o4lUZjcbOTP DGyy/EfrWXuuNmdr8UarFD8B/iSxXJ4rpiu4E/fWfXNXPX5M5q9r3HZHTZJ046Xw Y8pAlvnd3Uq0bwhKlQWufj0J8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm9QZhY U7Tvt11s8lLQkxIyjdFhMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAi0hA8JkqIVP0rdC3oKhgAFRxDzx8hSopfnFbXB422q7M2vE+kCXO UxSeZpAYQ6+0O6PoGjmW180U2QXdGR+lm7oWIy/tUHHGk4xb1fNBKf4BRbdgUByI KXaSqgpO16tlaJH1xf3b9HCjbXXfLciEAZL/wonbUGwdr+kCe/vItSQAdO6r9KIM f0p2ypflxgMQGR4oJH0IUPusqJtb0RMfh9a64rTdDjnXd/zqmKAKgFbaszfx8d9v sxv6HMpq+PBq33CQ4TqVZxIcU2JBO3wnj1HdJd1OXX80Fx+3FM2R3Ivztkj7OT+h yWMYykDidznhQQUCq6Q74RQfYWPCLppM -----END CERTIFICATE-----Generated at Sun Jan 25 15:45:53 2026 by rpki-client