This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: 9/ObSvtFITCZrAmuzv/MWjgx65HRv+Sc1l2Iy2Dn8Q0=
Subject key identifier: 2D:17:E7:7E:5B:C8:E1:8F:5B:C9:B1:2C:45:8F:A7:9E:3D:F4:9E:98
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 038C
Signing time: Tue 27 Jan 2026 00:04:49 +0000
Manifest this update: Tue 27 Jan 2026 00:04:49 +0000
Manifest next update: Tue 03 Feb 2026 00:04:49 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: WvdUHOzVY6KH9/NgU4W0LewFWcbYamzu+13MqFIP398=)
2: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: CZLbLDcndy2xxG5xhFEstQ1CfMNrOMxWn16hiuaCB3A=)
3: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=)
4: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: DtxFYEOtGQIY53GPRL1dPzv4/8AYv0bkRXV3Pqe74uw=)
5: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: 1GqQuY6ipOukNjcNmFCRz4aP/qgsCVml/uDhWXv7ZZA=)
6: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: VMFfG28SR9K0gvV1WJc79wKMQ3bg4zxW5arPOP7vJGw=)
7: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: 2OyyCanvq13/lef3XlgSuSBG44PottDi4GJaK+x96f4=)
8: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: /NnlQrY/nq8rIKszOQKAgkEH+3DZidftTKYbVxGk7FQ=)
9: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: a6e59gPtF+oIYCL1FfTClIwM64Rzhh/gE9NV+k4hGio=)
10: EA792108690E11EF9396CC48C4F9AE02.roa (hash: 6kpxPOxsj0Raf3qdIHWPGMM1EX7pSguYPkBcI1ejIWI=)
11: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: eDZoNBLuQcw3Wn1rO/220lw34J3dfQJ4no+D+vY9xGU=)
12: 218211CA68F911EF986C8281C4F9AE02.roa (hash: mHnULwgJoiFgX9ai3WggRtZIFI0XOoqJW+z2W78zhrY=)
13: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: z5Obs62Z4LeG64hnhJujzAwct4kvn0rbMC23ZtCEssE=)
14: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: q8+3jxkLjtGgAWTpN6kPoNOdBfmaZjeJ2k/PYDuVa+o=)
15: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: KVYDjb3LOCylq5/WVla/qjjDgT6zCAlDqXpLKrRgpFk=)
16: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 0Wbd0TloILo4D7y7bRvBLRW10Y2AoSQoJYvEUNn6cbg=)
17: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ugtcgz+OwF9hfe6CeTebPqLvH2EQn6e6HzRfBkIfJHo=)
18: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: 10NBPSybJ1d+q+ni3VVF3MNFnJGqTgzoq8TVIRJgedI=)
19: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: zw3Bw3tYxrZQpKxOUK57pZSMryzQb0S86CCh4Nq5BP4=)
20: BE4B3228691411EFB573C120C4F9AE02.roa (hash: 5H32B3wtPXDSZssXMxHc0JZTPyABfL6/i25/U22sL/A=)
21: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 2TbZWTz5MrS4pUvVlInd+ICIzajVNRsMUaqG9OLqDBQ=)
22: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: aOIDROQi6GkPOjEwda+oZgehrmBXac6uf9Rdo2Bd6r4=)
23: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: D5I1AGWIgCpGbK2ioEBWE7LhyF6lwZBdzrjdsvoMJHo=)
24: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: 9K/dPzFWeJ3662AXxOwpQnYP5rZeIOBTrzjoLeu+KQo=)
25: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: Yx63u4z9hDR8keVLNdP1xC6pEQSE/UG9aZLw+X4LwRo=)
26: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: 2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=)
27: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: xRZTvOkzIPzpcRY24c/2u0KIcsyrTX9YYHCujB9nKyM=)
28: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=)
29: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6WmIg/lOdQnkEvIsKV1OREBoFlxfYt6gLUjZAiHr4+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 00:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Jan 27 00:04:49 2026 GMT
Not After : Feb 3 00:04:49 2026 GMT
Subject: CN=69780121-fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:29:b0:7a:b8:1f:25:d6:1b:c3:b4:3e:9a:
de:7a:60:d5:57:71:ef:c9:ec:3d:04:1d:8b:68:93:
3d:b1:3b:a5:02:4a:1c:a1:6c:50:a5:ea:ef:cf:2d:
fa:38:ba:db:f9:28:56:af:cf:a5:68:f2:2d:9b:fc:
8b:ef:3a:9c:8d:a3:d4:02:46:92:51:03:3b:43:e1:
a2:ed:2e:23:0a:4f:66:01:6b:f7:32:40:43:2d:38:
04:b5:33:e9:17:4b:f6:91:35:04:d8:f4:77:56:6f:
55:ce:4e:d5:e8:dd:e3:c0:f9:3f:5f:c5:6d:2a:dd:
e4:e3:8c:6d:6f:e9:c6:cc:55:35:65:cf:16:cc:21:
2b:62:a8:48:a8:3b:f9:19:8d:d3:c7:7a:a9:63:52:
98:11:a0:9c:bd:32:66:08:b5:3f:6d:7c:7d:93:04:
b4:74:4f:ad:b0:e5:68:e1:9d:9f:b8:f7:cb:7c:4b:
da:bb:ad:57:8e:7b:be:fb:06:91:09:47:88:d5:41:
ce:9b:76:eb:10:bb:0e:2d:88:3a:07:ae:71:48:e6:
e3:a4:14:d6:e1:77:cc:51:b4:1a:c1:04:f3:bc:86:
59:8a:1b:45:e2:a0:6c:b8:70:38:cb:2a:44:a7:7b:
d5:de:90:a1:95:ee:a7:ca:fe:ff:05:a7:ac:1c:27:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:E7:7E:5B:C8:E1:8F:5B:C9:B1:2C:45:8F:A7:9E:3D:F4:9E:98
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bd:24:c1:a2:3a:9d:5c:21:39:b9:97:fa:40:09:81:1c:33:
2a:af:d6:2e:3d:da:ee:90:d1:84:02:78:7c:51:19:f6:b7:c6:
d8:0e:6c:2f:23:50:39:7b:cc:b8:5f:84:f4:68:16:d6:bf:a7:
85:1f:a1:09:9e:1c:70:6d:5c:31:2d:2d:b2:1b:9b:75:ba:80:
79:25:3a:1f:c0:17:9c:3d:72:22:4d:27:5e:f1:0d:0a:28:88:
e3:8d:ea:53:c0:45:7f:61:ae:91:f4:65:8b:1d:d9:b5:8c:29:
1c:f8:18:c4:b3:d9:7a:d6:a4:fa:4f:61:6f:e0:ce:0e:54:70:
00:f8:30:fd:3d:f6:08:30:18:97:d8:01:8e:af:37:c1:39:18:
aa:2f:63:47:41:24:f8:93:f7:09:90:44:1d:57:eb:60:f6:7d:
27:64:bf:b9:2b:b5:33:f5:83:ee:bf:73:31:a0:4f:7a:30:b4:
40:ac:58:87:ee:a7:45:08:09:d4:4e:32:d7:65:1e:8e:5d:22:
f6:1c:a2:2a:95:5f:8b:39:bb:65:57:b1:f6:da:7a:f4:38:78:
7d:ac:1e:b3:68:7d:c1:d1:89:89:30:ac:cb:e1:8e:df:f6:9a:
1d:5f:11:33:41:05:c3:7f:af:88:57:6a:00:4b:bd:81:4c:6f:
91:fb:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 07:59:45 2026 by rpki-client