This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier: RcKkobE/2YFkmyAM9UUuQKh1hbrS9ZunmTvP17RAbR8=
Subject key identifier: 2E:53:5E:1C:B4:26:FB:FC:FF:CD:38:7E:B5:80:EB:96:31:20:ED:DF
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer: /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number: 0B
Signing time: Fri 09 Jan 2026 07:18:05 +0000
Manifest this update: Fri 09 Jan 2026 07:18:04 +0000
Manifest next update: Fri 16 Jan 2026 07:18:04 +0000
Files and hashes: 1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: 9wLIP3LmH1e3t1HeOmUfRnRwMzREEOhmb0m0VM4OTdM=)
2: C6369A92E29211F086FBD344456F56BC.roa (hash: nyEcuTcB1W9eLOw6h0n3PToILOqU+yTintKY2jwXphI=)
3: 99984580E35011F0B21921EF756F56BC.roa (hash: YHZW6R8wRTpCBx5P+6Uu4tcD0+0y3+xXGo6vH5s8t+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 07:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Validity
Not Before: Jan 9 07:18:04 2026 GMT
Not After : Jan 16 07:18:04 2026 GMT
Subject: CN=6960abac-68d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:20:4b:15:18:10:08:ae:d4:32:1c:61:d4:
60:20:e2:c3:ff:1a:93:26:2b:e5:85:26:e5:98:0d:
f9:6d:b6:04:7a:9c:34:b4:41:2d:34:f1:66:28:a0:
48:2c:96:c9:36:94:f3:f8:25:d2:25:75:9a:a6:83:
29:2f:c8:f2:da:72:1b:91:fe:58:d5:e8:a1:8b:6a:
91:4a:a5:c3:1c:c7:dd:a4:e7:d9:55:ff:88:52:c0:
87:c0:af:a8:7a:c4:39:88:64:64:47:ee:a8:65:f2:
7f:f7:e4:ac:25:7d:65:25:a1:c8:a8:8c:5f:1d:9e:
b3:2c:fe:f5:e5:69:7d:94:a8:a0:7e:ca:24:4a:98:
8f:00:39:9f:42:2a:5c:e4:57:81:12:ad:1e:70:e0:
32:b6:f2:36:3c:ba:55:52:23:c2:43:c3:7f:fc:fd:
0b:a7:12:d4:71:6f:35:43:3e:6f:bd:49:49:cb:5d:
05:ba:10:e2:92:16:eb:c6:af:a3:0a:3d:ed:ef:2d:
0e:61:db:59:5a:a0:e2:f1:1f:c1:94:40:89:bd:b8:
8a:68:b9:b6:9e:03:7f:e4:ab:db:00:1a:5a:bc:bd:
f0:37:28:d9:21:6d:72:af:66:56:77:b9:d3:96:fb:
a1:02:b3:ae:59:02:0e:a9:ae:40:92:f4:e7:70:45:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:53:5E:1C:B4:26:FB:FC:FF:CD:38:7E:B5:80:EB:96:31:20:ED:DF
X509v3 Authority Key Identifier:
keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:92:62:3c:a0:e1:83:4b:d6:e5:2f:5b:2f:f8:65:1b:32:
9f:eb:44:68:2e:6d:b4:cc:b5:80:bd:ab:25:40:63:f6:3d:34:
51:3e:7e:c9:b8:02:eb:89:b0:ac:5d:ca:2b:af:6b:0a:84:f7:
eb:6f:37:66:5a:c7:34:31:98:20:64:5e:31:b3:85:50:75:35:
05:e4:7b:7f:f7:17:f9:75:58:41:17:05:0f:3d:92:bf:54:ae:
1f:28:36:47:65:a2:bb:d1:e9:e5:9a:79:b0:3c:a8:d2:32:ea:
ea:b1:38:e8:53:5f:46:0f:f3:dd:3e:f6:8d:f9:b3:c8:e7:3e:
d2:2b:49:ac:9d:f5:eb:f9:e8:a4:47:4a:91:73:06:d4:84:10:
ea:8b:d4:c7:6d:96:64:c8:aa:9b:e2:f7:e4:0b:54:49:4a:f8:
01:09:9b:26:03:76:79:01:de:1c:69:63:48:cb:d7:6f:42:fe:
5a:a4:36:86:bf:ce:e9:c3:2a:cd:03:c8:47:24:b4:c0:19:0b:
c4:2f:b6:9d:62:39:76:9d:2e:56:a8:57:79:ad:da:e9:41:d7:
14:c7:37:3f:ac:b3:ba:10:7b:cb:08:65:b3:65:f1:c5:c1:cf:
65:ce:d0:55:1f:d3:a3:15:65:62:61:91:83:70:d4:18:31:1b:
34:02:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 08:21:39 2026 by rpki-client