This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File: h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier: mSWXWg8tvXm4a+jXIbBpXW703c5OWpKUoC0Hcut/rrY=
Subject key identifier: E8:05:65:6A:A7:57:B6:E3:C8:82:C9:C7:D3:C4:DB:B0:B0:1F:7A:0B
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial: 1847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number: 182F
Signing time: Tue 16 Dec 2025 16:27:27 +0000
Manifest this update: Tue 16 Dec 2025 16:27:27 +0000
Manifest next update: Tue 23 Dec 2025 16:27:27 +0000
Files and hashes: 1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: xTGyzOATVNBfd2iGUlpJO+DoExzUn2TOk0b5Imz7yjk=)
2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: EjdNTbAyftBJxtIBKhAk8tku0Xw6VBdJSMgPHoN2SG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 16:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6215 (0x1847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Validity
Not Before: Dec 16 16:27:27 2025 GMT
Not After : Dec 23 16:27:27 2025 GMT
Subject: CN=6941886f-6a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:f2:78:4d:89:69:ed:85:ef:f0:6d:32:da:
f0:1c:01:ed:f8:e0:ac:eb:b5:88:a3:c6:04:bd:43:
ad:eb:9a:ad:02:05:43:29:aa:0f:16:ae:97:8e:6c:
d0:4d:8d:5e:5d:9d:ae:26:fa:80:fe:ae:29:5c:d8:
a8:0b:05:cf:6a:1c:8c:64:9f:74:9e:3f:9d:3d:5f:
68:6d:db:6b:84:7a:4a:fe:0f:b9:48:48:4a:c5:d3:
1b:26:db:74:14:c1:a1:04:be:f0:f5:54:ef:b7:93:
5e:23:31:1b:b1:ca:02:f8:d3:47:e4:fb:0c:db:45:
0c:2c:06:3e:8c:64:0a:9d:ed:2b:ae:2b:81:6b:b7:
7b:c3:53:79:8f:9e:01:27:7b:b6:8f:f0:63:c0:2b:
f8:57:33:8c:b9:b2:bd:e5:3a:42:fe:fa:fe:ce:d7:
d6:eb:b6:65:7a:2c:a4:1f:1a:90:22:fe:5d:d0:21:
35:fc:68:99:d8:e8:73:3b:29:fa:6d:66:36:e0:ab:
35:43:24:8a:7c:1c:21:67:27:01:cc:09:09:11:7f:
e1:29:03:6d:10:61:b1:1e:36:47:7b:31:59:2a:bf:
b1:33:e3:9c:27:eb:75:d9:7d:55:df:9c:4c:4b:a4:
df:5e:88:1c:43:9b:c2:b7:71:80:25:83:32:65:be:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:65:6A:A7:57:B6:E3:C8:82:C9:C7:D3:C4:DB:B0:B0:1F:7A:0B
X509v3 Authority Key Identifier:
keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:c2:68:4d:11:74:49:ae:46:23:4d:bf:2c:0b:d4:b3:ac:
cc:29:5c:1f:13:05:7c:23:89:f1:d3:79:be:4b:9e:a3:49:89:
c3:49:8f:b1:8c:4c:f9:c3:db:6c:28:06:3b:d9:fa:76:6e:37:
bd:63:01:c5:ab:27:6d:01:42:54:ee:fd:4b:a1:7c:39:e4:76:
9d:e8:78:cb:9a:58:5a:16:ea:47:7e:14:8f:1c:3c:d0:3c:9f:
a2:73:96:65:a1:36:20:88:b2:7e:29:3a:c1:f4:d9:f5:13:4d:
2c:d1:14:85:f9:f9:3b:94:d8:e0:95:43:9f:cc:84:77:44:bd:
e1:cf:ae:2a:0c:6c:1f:4c:a5:14:41:7c:77:9d:4b:9b:ab:a5:
8c:14:9d:2b:48:b4:30:6b:c4:87:a0:f2:1e:20:9d:6c:2b:7f:
8c:5f:97:c9:3f:2a:04:2f:26:97:95:e3:34:52:45:1e:b7:14:
b5:76:81:3d:93:39:82:89:e0:b4:c3:74:03:72:f6:dd:48:69:
7a:68:b1:97:2b:e0:5b:d5:f8:e0:77:58:84:b5:07:fe:09:e1:
13:aa:ac:35:cf:4d:1b:16:f9:e0:10:e8:d6:95:69:7a:d0:11:
1a:14:ba:b3:ca:72:de:07:40:4d:5d:3c:e6:50:5a:d1:76:0e:
37:29:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 16:13:53 2025 by rpki-client