This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: pTkIUfbbs1SvR9JCXMilLMOtJSwiQyYxeJeLAngW1E8= Subject key identifier: B3:19:C9:D7:46:68:C1:DB:25:F5:8B:99:21:52:07:57:38:FE:63:57 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 017D Signing time: Mon 19 Jan 2026 03:08:46 +0000 Manifest this update: Mon 19 Jan 2026 03:08:45 +0000 Manifest next update: Mon 26 Jan 2026 03:08:45 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 2Fbnv4nWmIoUn77U2i3G0of1Van/84hF74gw2z2rpNg=) 2: 3AB77B58E23311F0B92C3AF56C6F56BC.roa (hash: 1d3zxtwJOm1psvgD3f8+WDO08RijTBs6522TZCUjLQQ=) 3: 536D7D82E23311F080CB84306D6F56BC.roa (hash: vg0Z8ilDAT2QseKnWVc3mmXETnZQ5xBQza8L0XDSQlg=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) 5: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: R8eJxtItRazPsCZ9nlDjiUaGQnio5Z28G0pGlAoxT8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 03:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jan 19 03:08:45 2026 GMT Not After : Jan 26 03:08:45 2026 GMT Subject: CN=696da03e-e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:83:6d:af:63:1a:7b:f9:38:c4:9f:52:b2: d5:8b:9b:8c:54:f6:ea:6d:54:15:6d:63:91:d3:98: 1b:e1:93:67:41:b9:7b:3c:b9:68:49:80:92:b9:1d: 17:2e:d1:8e:90:b5:05:3b:65:b8:30:f5:64:22:98: 9c:c7:78:80:48:93:4f:68:3b:06:d4:f4:31:e4:7c: 86:ce:9b:63:8b:20:b2:52:0c:b2:24:af:a3:9a:9a: d1:88:5e:f3:5b:ef:51:96:7c:a2:86:6e:12:63:38: ec:83:82:cb:1e:2f:b1:f3:68:fd:68:56:92:cc:ee: 65:69:4f:2e:f2:8f:be:e9:49:bb:28:7f:86:80:b6: 30:92:b6:d6:ff:4f:e3:2b:a6:d5:ad:f9:5b:2a:84: cd:f8:00:82:8a:23:78:a1:31:b8:f5:3b:45:7e:13: 9a:9f:28:ea:8c:8f:c7:fe:65:ef:ef:f6:17:71:69: ca:f7:42:53:0e:24:18:7e:e3:5d:be:06:1f:21:59: d3:4e:d2:bc:31:89:a5:84:46:24:d3:14:f2:d2:df: b3:1f:84:f6:c3:2b:2d:c2:a9:71:29:aa:aa:0a:96: 8f:98:7f:24:bf:63:b9:f4:b8:7b:e1:01:13:3e:c3: 73:12:35:f2:01:d7:21:54:81:5d:cc:c6:bf:7b:93: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:C9:D7:46:68:C1:DB:25:F5:8B:99:21:52:07:57:38:FE:63:57 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8a:37:a9:e8:9e:89:ca:26:84:4e:76:f3:b7:2a:8c:b8:53: 38:d2:40:fa:4a:3e:14:fd:9a:fc:95:9f:fa:62:c5:d2:1e:7d: 21:91:38:ed:74:53:ce:a3:bd:a2:9b:dc:50:4d:32:f1:9a:aa: d8:54:53:57:ef:29:59:77:74:8a:54:21:90:2d:04:a7:23:eb: 72:d1:a3:ad:5e:2e:50:02:32:a4:64:30:49:b9:d8:ef:1c:82: d9:4b:73:36:3d:d6:64:cb:e7:82:7c:53:49:26:12:24:58:fe: 78:6c:a8:82:d6:20:c8:88:93:96:c1:44:10:ae:72:50:00:21: 88:5c:d5:67:23:74:7d:42:7e:4d:22:c9:c8:0f:94:d6:31:a8: 30:71:cf:a7:a3:d1:cf:56:26:9e:aa:0a:d4:00:6c:4b:98:f6: d2:b1:9e:7a:43:7e:4d:42:e7:8f:73:fb:d3:5c:90:55:cd:68: c2:81:9a:b5:6f:8c:96:e5:01:88:dc:0d:e0:e9:d6:51:15:b4: e3:f5:3f:09:b2:b4:51:1e:d4:60:0a:87:dc:a7:7b:e0:d2:06: d9:3a:78:df:85:36:8c:39:f2:53:de:03:de:56:e0:11:68:a2: 52:b4:46:48:32:2d:69:ff:e2:ac:c7:18:60:e9:c9:cc:3f:1d: 7a:da:fa:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwMTE5MDMwODQ1WhcNMjYwMTI2MDMwODQ1WjAYMRYwFAYD VQQDDA02OTZkYTAzZS1lMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA742Dba9jGnv5OMSfUrLVi5uMVPbqbVQVbWOR05gb4ZNnQbl7PLloSYCSuR0X LtGOkLUFO2W4MPVkIpicx3iASJNPaDsG1PQx5HyGzptjiyCyUgyyJK+jmprRiF7z W+9Rlnyihm4SYzjsg4LLHi+x82j9aFaSzO5laU8u8o++6Um7KH+GgLYwkrbW/0/j K6bVrflbKoTN+ACCiiN4oTG49TtFfhOanyjqjI/H/mXv7/YXcWnK90JTDiQYfuNd vgYfIVnTTtK8MYmlhEYk0xTy0t+zH4T2wystwqlxKaqqCpaPmH8kv2O59Lh74QET PsNzEjXyAdchVIFdzMa/e5OTzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMZyddG aMHbJfWLmSFSB1c4/mNXMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNijep6J6JyiaETnbztyqMuFM40kD6Sj4U/Zr8lZ/6YsXSHn0hkTjt dFPOo72im9xQTTLxmqrYVFNX7ylZd3SKVCGQLQSnI+ty0aOtXi5QAjKkZDBJudjv HILZS3M2PdZky+eCfFNJJhIkWP54bKiC1iDIiJOWwUQQrnJQACGIXNVnI3R9Qn5N IsnID5TWMagwcc+no9HPViaeqgrUAGxLmPbSsZ56Q35NQuePc/vTXJBVzWjCgZq1 b4yW5QGI3A3g6dZRFbTj9T8JsrRRHtRgCofcp3vg0gbZOnjfhTaMOfJT3gPeVuAR aKJStEZIMi1p/+Ksxxhg6cnMPx162vpx -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:55 2026 by rpki-client