This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
File: hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json)
Hash identifier: j2iCJ3DSlcaMhPpLhZkGX2lkxDfBVdv6lQTSdFrQoko=
Subject key identifier: 07:91:40:31:B0:46:91:EE:BF:45:FA:EF:39:AF:08:6D:E5:0B:FD:68
Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Certificate serial: 0C12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
Manifest number: 0C0B
Signing time: Thu 04 Dec 2025 18:12:02 +0000
Manifest this update: Thu 04 Dec 2025 18:12:02 +0000
Manifest next update: Thu 11 Dec 2025 18:12:02 +0000
Files and hashes: 1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: nAaDN2i8RCYJhtyHgcZNZ679/nloM8llvUK2i86PxmI=)
2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: 6S9iC+lPGI+USP0kW2oo4gsRf8UiFa21s5yfHc7liEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Validity
Not Before: Dec 4 18:12:02 2025 GMT
Not After : Dec 11 18:12:02 2025 GMT
Subject: CN=6931cef2-b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:30:29:02:53:dc:0f:3c:c9:59:a5:16:00:
44:e8:a4:66:c3:68:c2:4f:02:aa:b0:fb:0c:e9:7f:
40:13:8f:8a:5d:46:42:1e:4a:09:9f:e8:69:6e:b2:
a2:32:c5:c2:e2:72:23:5f:47:8b:2e:1b:25:34:a7:
de:99:04:a5:6a:b9:30:9f:fa:81:d8:db:46:49:80:
28:bf:34:71:3b:46:93:29:ae:31:ae:e8:d1:09:9d:
4b:3d:46:64:0d:a3:c7:0c:80:e7:61:14:63:e5:b2:
27:5d:57:04:89:09:5a:b1:1b:e9:32:f3:af:33:58:
9d:a5:d6:6f:48:03:04:83:5e:a4:f6:04:4b:4b:5d:
16:be:9c:99:f2:81:9c:b0:00:9c:f7:14:00:2f:77:
98:1e:d7:c5:b0:46:1a:fd:02:63:4e:2f:f2:bb:29:
b3:ea:3d:8e:fb:70:9f:0b:6d:17:70:7f:dd:68:0c:
56:78:21:29:a3:61:27:9b:67:c0:26:70:f0:cb:bf:
91:a7:90:d1:5b:6c:e8:41:23:de:fd:79:d6:13:37:
39:fa:4f:f1:b3:ec:2b:a4:96:ea:80:c0:9a:43:fe:
12:b3:56:7f:a6:af:c2:61:a9:6a:ad:66:bd:de:bc:
f2:7b:a1:b0:af:83:ac:5f:48:22:cd:85:20:71:24:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:40:31:B0:46:91:EE:BF:45:FA:EF:39:AF:08:6D:E5:0B:FD:68
X509v3 Authority Key Identifier:
keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1b:43:21:c0:96:38:cd:0f:cd:91:b8:43:22:24:f5:68:d9:
06:d1:f0:e3:04:c9:eb:29:7c:35:7a:0a:a0:95:22:90:71:cc:
fb:1a:30:09:ca:35:e0:22:3f:87:1e:9b:ee:a1:75:0f:9e:0f:
78:1f:7f:4d:fb:d3:32:4e:e6:be:58:33:32:3c:a2:64:2e:38:
87:44:7a:20:e3:83:fa:c8:a4:65:28:42:72:80:3d:5b:86:01:
97:54:96:fc:65:ff:73:b7:e8:11:fe:b6:e4:c4:48:c3:4b:91:
af:47:5e:77:5c:13:34:4a:79:24:22:67:53:71:89:20:c9:18:
cf:43:75:97:14:a4:09:c3:c5:f8:87:d7:f2:fb:1a:2d:9e:56:
fc:69:7f:61:08:26:d1:58:4f:cf:d2:cd:40:e8:6f:f2:94:5a:
4d:6b:1e:83:db:44:0c:3f:7b:03:9b:24:75:42:be:6f:93:ba:
ef:e0:4e:bf:9e:c6:5b:de:24:e0:52:d4:b4:32:4f:aa:e8:1f:
fe:70:6f:e7:1f:0a:4e:00:50:d3:7f:9e:e7:ed:a9:10:fc:9d:
21:63:21:c2:8b:96:62:27:be:30:f1:f9:09:bb:2b:b1:e8:e1:
a8:0d:9e:0d:e8:a5:b8:51:50:79:46:3b:08:f0:8a:54:31:7f:
52:66:5f:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx
MUEyRDlBRTkwHhcNMjUxMjA0MTgxMjAyWhcNMjUxMjExMTgxMjAyWjAYMRYwFAYD
VQQDEw02OTMxY2VmMi1iNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1owKQJT3A88yVmlFgBE6KRmw2jCTwKqsPsM6X9AE4+KXUZCHkoJn+hpbrKi
MsXC4nIjX0eLLhslNKfemQSlarkwn/qB2NtGSYAovzRxO0aTKa4xrujRCZ1LPUZk
DaPHDIDnYRRj5bInXVcEiQlasRvpMvOvM1idpdZvSAMEg16k9gRLS10WvpyZ8oGc
sACc9xQAL3eYHtfFsEYa/QJjTi/yuymz6j2O+3CfC20XcH/daAxWeCEpo2Enm2fA
JnDwy7+Rp5DRW2zoQSPe/XnWEzc5+k/xs+wrpJbqgMCaQ/4Ss1Z/pq/CYalqrWa9
3rzye6Gwr4OsX0gizYUgcSRGkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeRQDGw
RpHuv0X67zmvCG3lC/1oMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy
MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt
dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUU3Qy9GMzQwN0U1NDIyMjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1G
UUEyLWNwY0NNdFFSb3RtdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFG0MhwJY4zQ/NkbhDIiT1aNkG0fDjBMnrKXw1egqglSKQccz7GjAJ
yjXgIj+HHpvuoXUPng94H39N+9MyTua+WDMyPKJkLjiHRHog44P6yKRlKEJygD1b
hgGXVJb8Zf9zt+gR/rbkxEjDS5GvR153XBM0SnkkImdTcYkgyRjPQ3WXFKQJw8X4
h9fy+xotnlb8aX9hCCbRWE/P0s1A6G/ylFpNax6D20QMP3sDmyR1Qr5vk7rv4E6/
nsZb3iTgUtS0Mk+q6B/+cG/nHwpOAFDTf57n7akQ/J0hYyHCi5ZiJ74w8fkJuyux
6OGoDZ4N6KW4UVB5RjsI8IpUMX9SZl96
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:14 2025 by rpki-client