This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier: gyG66Tnq4B43KbWGjVrvs973cE277ZCQXnNUwpZCMQ8=
Subject key identifier: 9B:8F:95:E4:B1:AE:F8:C9:D4:1F:74:96:DD:09:F3:2D:49:C5:CA:AD
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 10FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number: 10D2
Signing time: Thu 04 Dec 2025 16:56:47 +0000
Manifest this update: Thu 04 Dec 2025 16:56:47 +0000
Manifest next update: Thu 11 Dec 2025 16:56:47 +0000
Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 29KsefY8I3U1zYV1dGVC8cwKV5gZuPlUrGBkud29IB4=)
2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: spf63m8gNRJTwv/m/x8ucVicuse/s8q/g6w05x87Vv0=)
3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: VPFgi7xq83Y2zvMgy3bHxVN+PqEvQlUQRC0gSB0nAwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Dec 4 16:56:47 2025 GMT
Not After : Dec 11 16:56:47 2025 GMT
Subject: CN=6931bd4f-40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:2f:87:87:cd:c8:92:d5:42:09:fb:b4:41:
b3:74:24:73:48:07:c7:6e:a1:21:dc:0c:21:b3:64:
cc:52:9b:4a:26:eb:2b:10:bb:d3:c7:f4:d7:5c:bc:
f4:1f:a7:92:2a:16:fc:ec:8f:d4:bc:c3:86:19:fc:
83:c8:86:bd:8f:fd:a1:04:5d:38:cb:8a:e2:4f:ef:
e3:0f:b7:c1:63:17:9a:82:f1:1b:86:6b:5f:20:7d:
b9:b9:88:1b:50:f1:18:f2:34:18:2b:c8:80:11:d6:
8a:9a:84:6d:d2:13:de:01:78:73:24:af:b1:75:ea:
13:8f:8e:57:81:64:22:c2:a1:c3:0d:34:81:a3:d0:
7d:1f:a8:47:c5:00:4e:ee:d3:c6:b4:21:02:e4:1f:
f2:bf:da:23:87:b2:0d:17:5f:52:2e:1d:f8:3c:41:
89:17:b7:0d:38:2d:20:96:b1:62:f8:fc:41:fd:8d:
35:54:b7:34:c4:a1:e9:3c:31:f6:5c:5f:06:de:f7:
28:12:80:41:c5:26:89:1b:85:d9:c7:79:bd:72:a6:
49:db:29:db:8e:e9:d7:8a:f5:e6:38:ad:0d:f1:4a:
67:d9:b4:f7:fb:3c:f5:12:da:6e:0a:27:f7:37:e3:
72:7d:50:58:d1:be:2a:12:04:37:10:7a:8b:28:87:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:95:E4:B1:AE:F8:C9:D4:1F:74:96:DD:09:F3:2D:49:C5:CA:AD
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:49:96:64:f4:0a:58:d9:da:e9:24:af:52:08:79:9a:c7:9a:
b9:15:5a:2b:24:4b:67:82:a9:04:34:31:bd:3e:b4:f0:82:77:
7e:24:19:28:2f:60:82:4f:68:c1:82:60:2a:fe:91:f6:b3:4b:
55:21:3e:f2:e6:bc:1e:4f:87:99:90:19:b2:50:0b:7b:1c:30:
65:27:eb:80:d9:21:c3:0f:bd:78:48:92:f5:44:7a:44:64:61:
1a:bd:6f:9c:f0:ee:87:18:fb:f9:03:e3:1d:c7:ff:93:44:d8:
59:ce:cc:d8:34:23:cf:a6:f3:01:68:66:0e:de:14:c3:f5:e7:
df:98:67:91:12:fa:38:46:a0:18:c5:b8:41:5a:1a:f6:6d:1b:
64:20:45:c5:fa:46:42:b2:de:a0:a9:9c:ab:43:6d:cf:99:8c:
57:ee:05:50:4f:c7:7b:6c:20:2d:60:f4:6f:8d:41:5e:7c:a9:
43:7a:59:38:47:57:33:21:7d:17:c4:22:a8:4d:3b:93:71:b3:
d8:dc:76:e7:de:14:dd:b6:90:6f:57:48:a2:02:e5:4d:a2:79:
c8:90:0b:4a:0b:d8:79:fc:e6:61:2c:2f:4f:d1:3a:fa:aa:a0:
19:d3:9b:fd:08:e4:db:9c:0e:69:0a:7c:f6:99:52:17:37:b4:
42:d8:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:39 2025 by rpki-client