This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File: hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier: wvsQGN/rYL0QhriflQJQxmoaroLD/YgOqcD/JHZj+0w=
Subject key identifier: 1D:80:B1:D6:D7:93:33:10:99:E3:A7:52:DE:EC:49:B2:D7:95:1E:AC
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer: /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number: 07
Signing time: Wed 21 Jan 2026 07:10:51 +0000
Manifest this update: Wed 21 Jan 2026 07:10:51 +0000
Manifest next update: Wed 28 Jan 2026 07:10:51 +0000
Files and hashes: 1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: BuVs+C/bRvtaq1tfBCvltWe+I4ZU2mqzm/SeAGrmvFY=)
2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: ljAj7wTLxbbfYWdIEjjCoSCbzwYEXVcu5xylhBoKUaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Validity
Not Before: Jan 21 07:10:51 2026 GMT
Not After : Jan 28 07:10:51 2026 GMT
Subject: CN=69707bfb-d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:8a:01:6c:6c:5d:40:cd:2f:83:3c:1a:86:
ef:17:09:67:ed:12:83:e9:86:0a:52:2d:f8:d5:29:
6b:11:e6:7c:a3:d4:84:ec:2f:df:fd:36:4f:1b:54:
49:75:fb:d9:f2:df:68:34:d4:00:72:d5:0c:88:8a:
20:65:ec:9b:87:7e:8f:81:3c:b6:fd:a2:48:4a:e4:
df:34:9b:3f:1b:60:61:35:df:10:dd:3e:a5:d6:47:
e7:d3:c7:32:a5:a7:19:6a:f5:9a:7f:43:b5:92:9f:
f2:bf:8c:6c:4d:e7:58:4e:bf:e2:2b:48:67:f2:ec:
a0:7d:41:ff:8c:98:7e:62:3c:55:2f:77:e5:c8:ea:
c4:77:0b:de:22:16:33:b5:75:c0:d3:14:e9:cb:94:
76:02:8b:16:2b:b7:94:ed:96:76:cd:d5:42:35:b5:
19:92:27:a0:36:c7:58:7f:0b:a2:43:d1:6c:b9:37:
5f:43:49:9a:39:70:e2:7d:d5:ca:94:29:01:a7:e1:
ba:86:9d:02:e0:9b:4d:7a:23:fd:35:24:f7:40:0a:
68:7b:c5:d2:88:ff:27:ec:4e:c7:46:d8:1f:04:be:
f6:26:8c:20:86:ca:5e:2d:61:c1:f5:5b:bd:01:e4:
02:cd:96:b6:98:c7:9e:a2:05:a6:01:36:27:2c:7d:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:B1:D6:D7:93:33:10:99:E3:A7:52:DE:EC:49:B2:D7:95:1E:AC
X509v3 Authority Key Identifier:
keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:73:80:d7:ca:15:79:ba:34:b6:1c:df:bf:81:94:51:8c:e3:
e3:a9:30:c9:09:00:0e:fa:f4:df:c4:83:48:af:0f:c7:5d:6a:
52:f3:42:72:94:70:b7:80:c9:84:2e:61:b0:51:e3:10:86:94:
8a:e5:3d:73:b0:ac:8c:1d:ad:b4:0c:35:1a:aa:5d:86:fe:54:
78:3d:ca:4d:8f:d8:69:5d:f2:8e:fd:cb:01:47:b6:5c:ad:82:
15:e1:40:45:84:7c:93:c2:1a:15:fb:27:d6:30:02:4e:c9:62:
e1:2d:35:13:1a:3a:92:18:17:05:11:f1:63:e2:45:b1:3a:8d:
97:c3:1b:73:48:dc:63:83:b8:b2:ba:9d:08:0f:e2:e5:7a:d3:
05:87:07:3c:06:3d:9d:7a:8b:5c:73:0b:cd:ae:3c:e3:34:ce:
a0:21:48:a1:ef:39:e3:64:65:15:d1:54:be:fe:15:a0:a5:ae:
a9:f4:73:91:42:d5:2a:4e:b9:16:55:77:59:83:d6:7b:67:bf:
3e:ee:84:e0:2a:8d:35:a6:8b:2b:c3:bc:24:38:9f:a1:29:c0:
4d:04:0b:76:14:7c:7c:51:30:06:3e:67:d6:f0:2c:3d:86:04:
df:84:7b:e4:97:58:cc:cc:28:3e:2f:9d:c3:f5:94:93:73:2a:
80:49:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:31:51 2026 by rpki-client