This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json)
Hash identifier: 1ntAcgpv+1VHKlmTayDcFlH/W5qd75CYKPZJZO5PLLg=
Subject key identifier: 10:68:84:6F:3B:06:5C:A5:4F:C7:A4:3C:FF:B8:73:59:F2:72:B0:89
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
Manifest number: 03AB
Signing time: Sat 06 Dec 2025 23:22:40 +0000
Manifest this update: Sat 06 Dec 2025 23:22:39 +0000
Manifest next update: Sat 13 Dec 2025 23:22:39 +0000
Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: j9xX2/FHEsOv7djzGS1Ni/DN7TYbCJznCLZOeTi9lh0=)
2: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: TGtBMLjAQZMZJ1khWN0b0rXwvGwxupeZB+kuz4CTJXg=)
3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: L2Pd8jB/i+ABeqpyLFwMSDyc47P9cj5jXqAEMCEAC1Q=)
4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: 7hic6UONO0B455KhpL0YJRnN6Tw5oyNjErH5A+IJRxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Validity
Not Before: Dec 6 23:22:39 2025 GMT
Not After : Dec 13 23:22:39 2025 GMT
Subject: CN=6934bac0-9751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:f7:db:bf:e8:03:62:06:41:f8:c6:06:a8:
54:c0:ec:51:b0:e9:f2:c1:99:7f:8c:71:96:42:db:
6f:a6:e8:60:bb:52:e2:d2:85:c5:71:e7:a5:a1:ef:
48:40:9e:8e:c3:4a:28:da:ab:02:1e:a9:3b:ab:bc:
39:82:b1:e6:7f:fc:d7:56:6e:74:22:85:28:56:ad:
69:ff:99:f6:e5:77:7c:b6:a6:2a:43:5e:8c:1b:96:
2a:b3:57:5f:22:6f:2d:fb:56:19:6a:fa:f0:d9:48:
7e:aa:f0:af:c0:4f:f8:4c:36:2a:d2:75:3d:ff:ca:
66:30:05:7a:58:a6:25:bf:c0:2a:d5:27:18:28:3d:
44:91:bd:e1:6c:0c:1a:80:bd:31:96:d8:2e:4d:fe:
a3:3d:f4:62:a5:3e:30:68:96:bd:b1:43:a6:98:b1:
65:7d:27:24:16:dc:c7:93:55:2c:47:fd:21:1e:83:
a7:3c:6a:9c:15:b9:d7:ec:6b:91:59:5f:c9:3a:c0:
19:5f:56:79:a9:1d:2c:6d:b1:67:3e:65:dc:a5:15:
2e:f7:64:3f:24:62:21:18:6a:0b:6f:c8:d0:63:1d:
86:6e:b1:6b:7d:da:c7:b1:ad:25:8d:0f:25:59:e4:
ad:cf:78:97:58:1d:52:d1:1d:27:f9:01:39:54:3b:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:84:6F:3B:06:5C:A5:4F:C7:A4:3C:FF:B8:73:59:F2:72:B0:89
X509v3 Authority Key Identifier:
keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:99:9d:d1:40:f5:86:04:40:1d:6a:13:e1:bd:55:a7:e0:
b2:4f:8a:f2:ba:f8:b6:f1:e2:81:de:d5:7f:03:c6:1c:cf:04:
10:9a:bd:12:1d:c2:49:2d:f3:3a:d4:3a:a5:ac:26:bf:21:f7:
99:72:3a:df:73:d2:1c:c6:9b:d1:6b:05:03:55:41:99:18:8b:
e4:cc:12:fc:2d:18:ad:c1:ed:43:93:a0:71:2d:0c:eb:50:35:
66:16:d5:26:d9:bf:05:31:f6:0b:30:cf:e1:4c:47:1e:69:bd:
fd:44:de:46:7c:4e:51:74:69:d7:03:e7:7d:a3:ea:1a:ad:5a:
58:4f:fe:76:63:cd:3d:f4:42:9b:bb:b5:21:c6:88:a9:02:dc:
68:88:e0:f9:d5:42:93:36:dc:e1:cc:cd:0e:d2:f6:5c:71:c6:
c8:69:3d:77:bb:be:03:81:63:49:12:a1:eb:1d:55:0f:ee:7d:
87:56:bb:b0:71:39:f2:cd:69:3b:41:77:dd:43:21:49:06:95:
87:3a:60:1f:67:aa:0e:dc:f4:e7:24:4b:ba:7a:fd:2f:8c:d2:
45:a1:88:f9:5d:24:c1:d2:c1:0b:97:94:ad:65:5b:4c:57:f1:
d6:98:e0:84:e0:a4:48:61:10:e0:48:5b:8a:b2:13:e9:9e:a9:
cc:29:99:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3
Q0I0M0Q5MEEwHhcNMjUxMjA2MjMyMjM5WhcNMjUxMjEzMjMyMjM5WjAYMRYwFAYD
VQQDEw02OTM0YmFjMC05NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLf327/oA2IGQfjGBqhUwOxRsOnywZl/jHGWQttvpuhgu1Li0oXFceeloe9I
QJ6Ow0oo2qsCHqk7q7w5grHmf/zXVm50IoUoVq1p/5n25Xd8tqYqQ16MG5Yqs1df
Im8t+1YZavrw2Uh+qvCvwE/4TDYq0nU9/8pmMAV6WKYlv8Aq1ScYKD1Ekb3hbAwa
gL0xltguTf6jPfRipT4waJa9sUOmmLFlfSckFtzHk1UsR/0hHoOnPGqcFbnX7GuR
WV/JOsAZX1Z5qR0sbbFnPmXcpRUu92Q/JGIhGGoLb8jQYx2GbrFrfdrHsa0ljQ8l
WeStz3iXWB1S0R0n+QE5VDt5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBohG87
BlylT8ekPP+4c1nycrCJMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0
N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND
clZJeVprcVZUU1o4dEQyUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCUZmd0UD1hgRAHWoT4b1Vp+CyT4ryuvi28eKB3tV/A8YczwQQmr0S
HcJJLfM61DqlrCa/IfeZcjrfc9IcxpvRawUDVUGZGIvkzBL8LRitwe1Dk6BxLQzr
UDVmFtUm2b8FMfYLMM/hTEceab39RN5GfE5RdGnXA+d9o+oarVpYT/52Y8099EKb
u7UhxoipAtxoiOD51UKTNtzhzM0O0vZcccbIaT13u74DgWNJEqHrHVUP7n2HVruw
cTnyzWk7QXfdQyFJBpWHOmAfZ6oO3PTnJEu6ev0vjNJFoYj5XSTB0sELl5StZVtM
V/HWmOCE4KRIYRDgSFuKshPpnqnMKZkW
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:56:20 2025 by rpki-client