This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: AaoVPrHo7eXlXa5YTyvQxTgXxbLiflMQvZeaB5gPlIA=
Subject key identifier: AC:39:C5:74:E8:73:8B:4C:22:00:46:9A:15:4A:27:C4:B8:5E:16:75
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: C9
Signing time: Fri 23 Jan 2026 04:57:32 +0000
Manifest this update: Fri 23 Jan 2026 04:57:32 +0000
Manifest next update: Fri 30 Jan 2026 04:57:32 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: GtJDr8BjfTvGlM/709NduH+2BuHDctMFjLAfnfc9rOQ=)
2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=)
3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=)
4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=)
5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jan 23 04:57:32 2026 GMT
Not After : Jan 30 04:57:32 2026 GMT
Subject: CN=6972ffbc-9ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:eb:b4:d1:dd:af:fc:69:ad:a3:a6:1e:ec:
70:90:7b:7a:a3:5a:30:3c:3f:4f:f8:22:56:37:37:
dd:35:35:98:ec:10:28:30:13:d0:63:07:2c:6b:a5:
b1:98:e5:49:af:fa:7c:e4:b7:94:b0:ff:3a:e0:7e:
ae:8a:b7:2c:ce:12:4f:99:e5:43:6b:93:f0:ff:72:
3e:26:b3:55:f8:13:9a:54:fe:24:36:2e:41:fb:b6:
1d:a0:59:49:f8:ec:06:fc:59:4b:30:de:d5:6f:e2:
45:6d:af:2e:de:cd:3c:f8:19:32:59:75:1d:ff:00:
df:50:a2:26:cd:f7:c5:72:78:dc:4f:7e:c1:ec:78:
bd:03:a7:20:2a:97:7f:36:50:c9:62:d6:71:e1:74:
cd:b9:69:27:b8:00:fc:ac:f8:f4:dd:41:de:34:c3:
b9:62:c7:a3:1d:7a:32:ae:6c:3a:2c:f3:9f:fe:47:
3f:6c:e5:97:7e:cc:21:66:b0:65:88:8e:3c:cf:2a:
13:96:72:f7:9d:d1:c5:f3:63:2b:f9:3b:c0:12:73:
c6:f2:2c:51:8a:7a:03:aa:2d:b0:28:39:aa:f1:6d:
1f:d0:b2:e5:7f:c1:c9:c9:98:7b:de:b0:07:d7:4f:
42:da:ab:2c:09:a4:5e:dd:16:58:f8:1c:36:0c:39:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:39:C5:74:E8:73:8B:4C:22:00:46:9A:15:4A:27:C4:B8:5E:16:75
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:9e:0a:0a:ea:21:a3:20:bd:ec:56:85:d2:0c:66:41:f4:
3f:56:dd:a8:ff:88:57:85:45:c4:77:de:8b:a5:0a:dc:67:d8:
d4:d2:63:d0:7d:c7:8b:12:f0:47:71:07:4a:ed:17:d4:f6:2f:
5a:98:0a:e6:b9:dc:d0:fd:4e:90:27:63:c8:0b:14:42:80:23:
d6:d5:e2:7b:e4:f2:24:a4:c9:f8:91:ea:9a:ae:36:d6:2c:df:
c2:bf:9c:f2:07:2b:6f:6f:b3:da:d2:80:a2:7d:f8:44:21:e6:
43:20:e2:3e:cd:3f:11:d0:64:fa:35:bf:87:61:d6:e9:af:86:
6b:5b:ad:93:68:b0:cd:44:fc:3d:74:a3:62:5e:31:ab:ef:83:
20:dd:a5:1b:1a:48:cc:51:39:e4:7b:ad:3a:28:89:e7:59:ed:
e1:f6:2e:4a:42:91:e6:71:98:72:35:32:a9:fe:23:e0:80:e4:
bc:58:34:d9:f3:65:f5:da:93:16:08:3d:f6:d3:df:28:47:24:
cb:04:52:91:d8:33:81:d7:21:46:b3:14:d9:08:65:33:49:4d:
d9:85:1d:9a:60:c9:ec:57:52:8c:4c:3e:d3:fb:8e:2e:66:50:
f0:92:71:04:1c:81:cc:0d:cc:98:23:45:d1:bb:79:dd:d8:a8:
93:12:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:21 2026 by rpki-client