This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: 4sunBnCB2ADovW9vc1I5yyHEZiGMO5s/fWpoRTQ+Sgo=
Subject key identifier: ED:7F:89:54:71:35:6C:67:D2:95:79:34:CE:8F:6F:D9:64:21:44:95
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 061B
Signing time: Sat 06 Dec 2025 21:41:09 +0000
Manifest this update: Sat 06 Dec 2025 21:41:08 +0000
Manifest next update: Sat 13 Dec 2025 21:41:08 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: Jefl3YtUb+udqe0AsvG3iQBP50cvkTyImgW/KtBlx18=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: Vhi1JgNRZObirmNIX1fnf2q21PbGnP/JOntHIC3xnJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Dec 6 21:41:08 2025 GMT
Not After : Dec 13 21:41:08 2025 GMT
Subject: CN=6934a2f5-3c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:ac:12:59:ab:fd:64:07:f6:c8:7a:e1:fb:
8f:ab:1c:ed:a4:fd:33:6f:55:2e:9f:d6:9f:cb:2f:
40:aa:c2:83:00:a9:c1:80:c6:39:56:f1:c0:44:de:
8f:77:1a:99:e0:9a:11:f6:c5:46:19:99:ec:66:46:
e7:af:c6:ea:06:5a:9c:b0:0d:05:00:1a:40:a9:17:
e5:65:7f:68:4b:19:19:8f:3e:66:c3:07:94:f4:5a:
67:00:2e:76:37:84:df:0e:95:b9:e9:81:41:9c:db:
9c:dd:e3:65:0c:3a:e2:00:b8:7a:ba:9d:3f:23:48:
af:30:3c:e2:3e:6b:46:9f:61:87:0e:28:21:71:7f:
16:4d:d3:82:62:a4:1e:f7:60:08:45:28:c5:7a:54:
37:08:a5:e0:15:44:57:9e:72:a7:19:74:4c:bb:6d:
8a:ea:14:57:b3:4b:23:9c:99:e3:f8:b9:43:d2:a8:
76:d6:c4:2e:86:fe:f6:c4:3b:02:03:ed:98:89:c4:
c0:e9:43:6f:21:bc:c3:7a:fe:ee:85:bd:c5:94:09:
a6:72:bf:a3:56:c1:8b:4d:93:0e:65:2d:5c:6f:21:
ea:4b:7b:9f:07:fb:1e:d3:96:24:44:c4:5d:71:09:
4b:36:98:ce:f5:b3:62:11:e5:79:75:6b:e4:a3:2c:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:89:54:71:35:6C:67:D2:95:79:34:CE:8F:6F:D9:64:21:44:95
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:d2:2a:8c:ed:42:7a:c6:0e:8c:69:5b:2a:da:5b:ac:ad:
74:0f:bb:9c:85:a0:49:b1:bd:5a:d1:18:08:18:6d:a6:75:66:
5e:51:48:eb:b0:ad:a9:1e:30:99:1b:c8:7a:cc:60:68:c9:8d:
eb:47:0c:81:c1:bc:13:ac:b6:10:cf:55:9d:68:38:2e:22:eb:
87:a0:5d:22:ef:27:d9:60:49:61:47:96:2b:b2:d9:81:fb:13:
90:75:6c:13:7a:64:77:2e:a1:97:2f:86:d7:0b:53:d6:7c:9b:
89:a2:40:35:dc:80:86:35:fa:62:7d:a6:65:91:9d:9c:7e:ce:
46:a7:51:b2:07:93:55:20:8e:09:69:e6:a7:00:64:5d:09:dc:
57:81:06:60:c4:0b:1e:c0:80:c2:94:24:93:2c:d5:30:6c:89:
53:b6:6a:9f:29:11:c3:6b:0f:e0:54:ba:a4:1c:cc:cf:46:8a:
8c:46:26:62:98:aa:77:08:24:d7:d7:39:36:cf:93:a9:09:4b:
5e:aa:b7:aa:71:2e:da:4b:36:92:f7:c7:32:a3:9f:f1:ef:58:
5b:46:97:06:19:b1:11:9a:7d:3d:29:49:fe:e9:94:65:41:12:
c0:c0:32:5d:1f:4f:1d:86:ad:dd:58:f3:24:35:e4:f9:1a:16:
7b:90:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:33:49 2025 by rpki-client