This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json)
Hash identifier: wOyCEezNw/si3F9u4goqge1OzR1N6F55OSYRaHLR0dw=
Subject key identifier: B7:37:D6:F6:29:41:F2:FB:14:F8:F0:76:93:38:32:8B:E0:2E:A9:7E
Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
Manifest number: 0136
Signing time: Fri 05 Dec 2025 02:41:19 +0000
Manifest this update: Fri 05 Dec 2025 02:41:19 +0000
Manifest next update: Fri 12 Dec 2025 02:41:19 +0000
Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: DBcDnJ+L7laqHbk/I1WpE9eB0HmgbT5FtG/nouWvH/E=)
2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=)
3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: rMJAoxoS++kNzcCP2pW17iqc9CzolSJB2caGijczQIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299
Validity
Not Before: Dec 5 02:41:19 2025 GMT
Not After : Dec 12 02:41:19 2025 GMT
Subject: CN=6932464f-cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:45:cb:36:35:8a:b2:db:db:83:c4:8d:75:
f4:b6:48:90:98:d0:69:87:5f:dc:0b:d1:4c:5d:3b:
91:57:ff:cf:52:3e:06:b6:e2:f9:ba:8b:53:51:4b:
fb:36:aa:d2:64:45:47:42:6c:96:ed:d0:f9:63:8a:
f6:d2:68:f0:0e:73:ad:da:82:75:00:54:da:61:23:
c6:b4:23:5e:95:f7:99:64:d9:8b:fb:01:66:47:4b:
88:a3:d5:93:5a:b1:a5:9d:cb:3a:ed:49:95:21:25:
c9:3d:aa:90:86:2b:c1:10:90:bc:97:a5:2e:e7:7f:
5b:de:1b:91:fd:a9:2e:8e:9c:80:b1:87:f7:b1:65:
91:13:dc:28:85:34:e9:c9:4f:b2:d8:00:a1:38:d1:
6f:65:be:a1:60:8d:ef:b7:9a:a5:d7:2a:fc:34:d9:
ef:94:d1:a1:6f:9c:85:b7:90:5d:44:d3:f4:90:fb:
26:ba:b4:94:7f:8f:d2:4d:73:d1:41:ec:53:73:c2:
f8:d6:12:b7:ae:fc:d3:36:85:31:70:3d:20:8c:dd:
49:60:0e:5e:38:2d:58:1f:33:e8:b5:c9:08:20:58:
64:a7:20:e9:9c:9b:61:a2:fc:9a:ac:7a:a9:92:e0:
d1:7b:56:a7:9b:8b:62:96:11:c3:48:bc:f3:54:f1:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:D6:F6:29:41:F2:FB:14:F8:F0:76:93:38:32:8B:E0:2E:A9:7E
X509v3 Authority Key Identifier:
keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:0b:90:90:bb:6e:36:40:ea:9d:fd:e5:c0:5c:c9:a7:87:
fd:0d:13:67:a6:27:df:46:33:54:7f:bf:ef:17:2f:b4:a4:9a:
f7:cf:74:b4:80:76:7b:63:4e:26:b3:cf:e7:a6:84:eb:2c:0a:
4e:36:42:cd:7d:fd:14:f0:f7:1e:8b:e7:38:f3:e1:f8:22:54:
c1:ac:86:f9:05:ab:47:14:d0:31:06:4c:a1:6f:05:22:1e:21:
cb:5c:79:5c:41:09:bf:a6:61:aa:b1:2d:9f:9a:6d:fd:1a:f8:
60:84:c8:ab:ca:e6:71:40:19:78:89:e8:18:93:62:e4:54:42:
a3:15:9d:7e:36:b1:32:c0:e9:0f:12:16:0c:16:5b:f3:ea:1a:
1e:59:1d:5e:7f:15:0e:f1:45:25:f8:26:00:a1:30:92:4f:89:
ee:88:9f:ea:30:04:f5:fd:33:69:4d:13:b7:5c:fe:5f:c5:02:
6e:ef:f9:a4:16:8a:d8:c6:ea:d9:88:99:de:ca:59:b0:e1:0e:
57:61:fc:bd:ab:45:fd:71:9c:b8:22:83:88:46:50:1d:9c:2e:
cb:e6:43:0c:74:59:03:a2:a4:65:cf:cc:b3:5d:f4:df:d6:b9:
4e:7f:cd:74:81:c0:4b:8d:26:36:27:f6:71:69:83:5a:ca:bb:
6c:c2:96:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy
NDkyREQyOTkwHhcNMjUxMjA1MDI0MTE5WhcNMjUxMjEyMDI0MTE5WjAYMRYwFAYD
VQQDEw02OTMyNDY0Zi1jZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWtFyzY1irLb24PEjXX0tkiQmNBph1/cC9FMXTuRV//PUj4GtuL5uotTUUv7
NqrSZEVHQmyW7dD5Y4r20mjwDnOt2oJ1AFTaYSPGtCNelfeZZNmL+wFmR0uIo9WT
WrGlncs67UmVISXJPaqQhivBEJC8l6Uu539b3huR/akujpyAsYf3sWWRE9wohTTp
yU+y2AChONFvZb6hYI3vt5ql1yr8NNnvlNGhb5yFt5BdRNP0kPsmurSUf4/STXPR
QexTc8L41hK3rvzTNoUxcD0gjN1JYA5eOC1YHzPotckIIFhkpyDpnJthovyarHqp
kuDRe1anm4tilhHDSLzzVPHzdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc31vYp
QfL7FPjwdpM4MovgLql+MB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy
NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR
anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+FAuQkLtuNkDqnf3lwFzJp4f9DRNnpiffRjNUf7/vFy+0pJr3z3S0
gHZ7Y04ms8/npoTrLApONkLNff0U8Pcei+c48+H4IlTBrIb5BatHFNAxBkyhbwUi
HiHLXHlcQQm/pmGqsS2fmm39GvhghMiryuZxQBl4iegYk2LkVEKjFZ1+NrEywOkP
EhYMFlvz6hoeWR1efxUO8UUl+CYAoTCST4nuiJ/qMAT1/TNpTRO3XP5fxQJu7/mk
ForYxurZiJneylmw4Q5XYfy9q0X9cZy4IoOIRlAdnC7L5kMMdFkDoqRlz8yzXfTf
1rlOf810gcBLjSY2J/ZxaYNayrtswpY+
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:08 2025 by rpki-client