This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json)
Hash identifier: aWiW1b+9YpE6xd4QROlV5cQdWMXQxQLO6bygNVZQfo0=
Subject key identifier: 13:CF:AF:D1:AA:8A:EB:DC:3C:C6:B8:BB:F1:DF:B6:62:EF:BD:C2:43
Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Certificate serial: 071D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
Manifest number: 071C
Signing time: Thu 04 Dec 2025 20:43:16 +0000
Manifest this update: Thu 04 Dec 2025 20:43:15 +0000
Manifest next update: Thu 11 Dec 2025 20:43:15 +0000
Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: lN3N7GDEmCSeJsym4hNIBjFFDsp1ulcsPYOP56e7y7c=)
2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Validity
Not Before: Dec 4 20:43:15 2025 GMT
Not After : Dec 11 20:43:15 2025 GMT
Subject: CN=6931f264-8f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:3f:db:98:c8:df:3b:91:ad:76:6f:3b:68:
2f:90:3c:42:20:f8:b8:fd:80:da:cd:30:ba:29:f4:
8b:57:31:5c:a2:88:ea:9a:e4:60:71:67:97:32:ae:
d2:48:36:ff:d9:21:a5:32:b9:39:03:ca:0b:e1:db:
5e:18:5f:63:24:47:6e:88:f4:d9:88:db:10:4a:4a:
1b:84:84:31:0f:8b:67:bd:a0:fe:73:05:56:11:8f:
69:8c:29:23:8a:ba:2e:ad:7b:f9:59:b3:73:32:09:
1b:e7:fa:4f:fd:84:35:c5:c2:c8:45:25:f3:c6:09:
3c:0f:01:58:84:d6:39:a9:85:e7:65:f1:31:59:e7:
f7:9c:43:73:8e:f8:4c:81:f9:72:b7:06:e5:7a:33:
f5:a9:d0:fc:af:6e:a5:4b:7c:dd:89:63:cb:cd:3f:
8a:04:53:a9:03:89:d4:58:d2:cb:27:e8:c0:29:d0:
e1:5e:c9:55:f9:18:39:fa:61:26:74:9b:5f:fe:93:
69:dc:c2:e9:bc:27:e3:d7:6e:bd:a3:ab:38:83:71:
25:10:e4:04:21:03:48:ff:a6:4f:13:e7:87:4a:b3:
6a:08:92:a4:8f:09:9c:d4:0b:4f:ef:be:d5:61:25:
ae:58:4c:b7:d6:90:6c:6d:b3:50:d3:14:4d:9c:83:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:AF:D1:AA:8A:EB:DC:3C:C6:B8:BB:F1:DF:B6:62:EF:BD:C2:43
X509v3 Authority Key Identifier:
keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:3f:66:4e:60:57:ad:6e:d0:60:b8:0f:93:27:b0:3d:0a:
ea:d8:87:17:ca:af:89:84:2b:84:21:ab:ba:8d:7f:08:3f:33:
ed:33:4d:54:e8:87:7b:fe:e9:fa:68:40:6e:94:08:9b:2a:42:
e8:78:76:2f:f6:c1:5f:3a:c9:8c:0d:79:4e:3a:c3:55:49:a2:
c1:b4:4d:1f:3a:80:c8:83:34:1b:cc:ce:7d:3a:65:8e:de:28:
b1:94:22:85:46:fc:83:23:93:d6:7c:58:b5:af:1b:16:9c:51:
6f:c7:f2:b3:cf:ce:b5:76:02:50:e0:43:ea:88:f0:d3:00:bc:
8e:ca:78:e0:3e:f2:9b:e6:d8:61:de:30:dd:4d:2a:3b:9e:e6:
e4:d5:05:63:be:f8:37:f6:f7:a1:b5:55:e1:4b:28:1d:b0:58:
7b:f0:f4:df:cc:11:2d:cf:cf:8f:09:fc:fd:0b:6d:e3:25:c6:
cf:79:39:ed:f6:31:7a:86:1d:5d:89:b0:50:ec:e1:9d:04:ca:
0d:4f:13:60:c4:26:77:98:3d:ba:b6:e3:b5:84:ea:a3:96:be:
6e:0c:42:5e:42:7a:9e:8c:88:44:a8:f5:90:df:b4:e1:d0:e7:
a9:b0:cf:b4:7e:d6:65:9f:07:14:3a:1e:41:a4:4f:2e:85:bc:
d2:99:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:51 2025 by rpki-client