This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json) Hash identifier: sbY+dsSVtQdknow4aXDoXE97bARLVoyrxS+rU8HONnA= Subject key identifier: 9A:B7:23:AF:D6:5D:AE:7B:4B:6D:5E:CE:27:CF:CA:4D:3D:77:33:83 Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Certificate serial: 0EC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft Manifest number: 0EB2 Signing time: Sat 10 Jan 2026 17:21:48 +0000 Manifest this update: Sat 10 Jan 2026 17:21:48 +0000 Manifest next update: Sat 17 Jan 2026 17:21:48 +0000 Files and hashes: 1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: 1w9PrUwTOscxfnTRed622i3jpw5ejA1Valwe3pj9rBE=) 2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: MmZvnPTLEUK2uOO8LldttqheyhLmSNsa1D7UmikJt9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 17:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3776 (0xec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Validity Not Before: Jan 10 17:21:48 2026 GMT Not After : Jan 17 17:21:48 2026 GMT Subject: CN=69628aac-6a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:3f:08:d0:59:8b:ba:eb:af:c6:14:58:a1: 5f:5e:76:0f:84:82:c8:25:38:2b:91:f8:62:c8:34: 17:f9:45:7e:f8:c7:5a:16:1c:60:59:c1:9c:1c:60: c1:2a:96:40:8e:a3:0b:7c:18:be:4d:7e:e6:71:42: 39:a8:62:29:fc:ed:be:8b:2c:71:0a:95:11:a5:89: d9:4f:91:36:73:06:b8:de:40:ce:f9:96:f8:a1:d4: 9f:e6:b2:82:47:b4:9f:a5:09:95:d4:01:43:95:7e: f6:71:d6:e2:c7:e0:d8:ca:1d:10:a1:34:54:4b:05: 82:f5:b0:4d:50:08:9a:c7:d9:09:a0:db:84:0e:76: 43:4c:10:a7:0a:ec:70:54:66:63:5b:b9:09:98:75: b5:85:7b:f3:04:9c:aa:29:b4:b8:da:6e:09:cd:29: 3b:da:52:bc:d1:5f:28:09:53:f6:c8:c9:33:df:f9: 3f:f4:d3:35:27:6e:a1:c3:c4:67:8d:47:4f:47:47: 2d:fd:38:2f:d6:b7:38:88:fb:78:6b:b5:61:e4:0b: 4a:9d:e7:c7:55:49:5e:ae:cc:45:5c:8d:00:3d:b1: 5a:07:c9:29:88:5a:a9:fb:b7:b7:6d:f5:f8:25:20: 39:7c:1e:87:ef:35:07:e1:9d:22:ee:f7:ff:12:46: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:23:AF:D6:5D:AE:7B:4B:6D:5E:CE:27:CF:CA:4D:3D:77:33:83 X509v3 Authority Key Identifier: keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:45:9d:74:30:3a:27:c4:a5:c4:8e:d7:0b:d4:c0:45:1f:c0: 28:d8:24:be:69:58:40:6f:eb:31:98:57:e1:24:05:10:f7:79: 71:49:58:2b:fc:84:3e:6d:f7:1f:54:98:6a:6d:72:1e:55:c1: db:14:3a:a2:59:fa:75:27:8d:54:a0:54:8c:4f:6d:10:74:49: 8d:2e:8b:35:64:c4:d2:22:f2:05:03:d9:54:30:2d:e0:33:96: 3d:d7:ed:5a:92:cc:a4:a2:26:59:de:8e:c7:13:2a:f2:23:75: e0:e8:6b:c2:f7:32:34:f9:a9:fb:20:d6:22:e0:e3:78:bd:7c: 81:e0:7d:08:9a:be:04:62:46:ba:c8:ff:70:b4:16:d4:4f:86: d3:df:f4:44:bb:8b:96:6a:2e:00:8a:b6:ee:e4:5d:11:25:87: 57:b7:72:68:46:ef:ca:f8:fb:7d:38:af:1a:0e:c4:c1:e7:f1: 67:0a:3c:36:3f:b6:65:bc:92:02:9a:24:c0:65:59:e2:d5:cf: 11:f5:04:85:73:f4:2f:32:4f:91:57:e3:9c:8a:db:7b:a2:de: 66:4e:4c:6d:1f:0f:2e:75:1c:67:d1:87:14:04:f5:45:3f:7a: a7:98:c7:80:5f:56:5f:40:be:49:ad:be:a9:18:60:78:1f:87: b1:ae:3d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE QjM3N0IxMUQwHhcNMjYwMTEwMTcyMTQ4WhcNMjYwMTE3MTcyMTQ4WjAYMRYwFAYD VQQDDA02OTYyOGFhYy02YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9eQ/CNBZi7rrr8YUWKFfXnYPhILIJTgrkfhiyDQX+UV++MdaFhxgWcGcHGDB KpZAjqMLfBi+TX7mcUI5qGIp/O2+iyxxCpURpYnZT5E2cwa43kDO+Zb4odSf5rKC R7SfpQmV1AFDlX72cdbix+DYyh0QoTRUSwWC9bBNUAiax9kJoNuEDnZDTBCnCuxw VGZjW7kJmHW1hXvzBJyqKbS42m4JzSk72lK80V8oCVP2yMkz3/k/9NM1J26hw8Rn jUdPR0ct/Tgv1rc4iPt4a7Vh5AtKnefHVUlersxFXI0APbFaB8kpiFqp+7e3bfX4 JSA5fB6H7zUH4Z0i7vf/EkY1SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq3I6/W Xa57S21ezifPyk09dzODMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc0My9GOEFFMjg4MEEyMUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2Rf WEQ4S0pTYUM5eDNiTjNzUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJRZ10MDonxKXEjtcL1MBFH8Ao2CS+aVhAb+sxmFfhJAUQ93lxSVgr /IQ+bfcfVJhqbXIeVcHbFDqiWfp1J41UoFSMT20QdEmNLos1ZMTSIvIFA9lUMC3g M5Y91+1aksykoiZZ3o7HEyryI3Xg6GvC9zI0+an7INYi4ON4vXyB4H0Imr4EYka6 yP9wtBbUT4bT3/REu4uWai4Airbu5F0RJYdXt3JoRu/K+Pt9OK8aDsTB5/FnCjw2 P7ZlvJICmiTAZVni1c8R9QSFc/QvMk+RV+Ocitt7ot5mTkxtHw8udRxn0YcUBPVF P3qnmMeAX1ZfQL5Jrb6pGGB4H4exrj0/ -----END CERTIFICATE-----Generated at Sun Jan 11 18:11:54 2026 by rpki-client