This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json)
Hash identifier: I3isWwqk1uSuuJl8eTNu/XLPBBOwS20+K1Ul9EggtEo=
Subject key identifier: D2:D9:F5:68:A6:57:D1:7F:1C:12:C5:1A:75:B4:5F:1D:93:22:CF:53
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
Manifest number: F3
Signing time: Fri 05 Dec 2025 03:18:35 +0000
Manifest this update: Fri 05 Dec 2025 03:18:35 +0000
Manifest next update: Fri 12 Dec 2025 03:18:35 +0000
Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: oZ2WqL0IiTU0SJmJ1P3NYdnApSiAqUcMXv6va3XjiDI=)
2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: PY7lM6CHVV+AnVQlApq2F15tXj0v5hwGoyhPHySPg1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Validity
Not Before: Dec 5 03:18:35 2025 GMT
Not After : Dec 12 03:18:35 2025 GMT
Subject: CN=69324f0b-5176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:9b:77:3d:51:f6:68:a4:61:df:2f:4d:11:
fa:08:94:db:9f:34:65:71:03:05:36:79:64:ca:58:
dd:90:c1:37:6b:b9:f1:08:14:13:2d:f4:9a:7f:7d:
0e:f2:3c:fc:25:70:21:8f:91:e5:2d:a7:91:cf:7c:
8c:f1:32:e1:e7:9a:ca:ef:17:dc:38:25:75:23:ad:
27:7e:c7:c3:d4:b2:9d:f6:f7:ef:54:ce:6c:9f:15:
f3:05:2c:27:79:df:1b:79:3b:bb:d5:b7:b3:39:88:
0c:e0:35:22:4d:b6:62:78:46:1c:ff:f1:c8:2d:f4:
f8:49:61:b7:f1:d6:ae:3b:4d:1b:d2:57:f0:0c:d4:
9d:b4:1e:bd:bd:81:d1:ed:59:ae:2c:8e:37:31:f4:
1c:1b:85:20:7d:01:67:fd:43:55:3d:b5:e2:fc:fb:
b4:90:f6:58:31:b1:69:d9:57:3d:43:87:16:60:8e:
02:1e:b4:21:d4:99:03:b7:7f:d3:1c:c7:1a:09:3c:
20:ba:73:bc:c6:29:03:4f:84:6d:90:dc:f3:4e:48:
f8:18:22:9a:b2:70:2a:4c:e0:01:ee:f6:12:2d:ed:
50:7b:84:56:6d:8c:9b:ae:9c:9f:c6:b6:1f:7b:0b:
6e:0a:f7:bf:38:b6:db:6b:b8:59:f1:cc:24:2a:69:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:F5:68:A6:57:D1:7F:1C:12:C5:1A:75:B4:5F:1D:93:22:CF:53
X509v3 Authority Key Identifier:
keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:c3:82:be:2c:96:b0:50:93:ae:ba:f0:2d:ce:5b:ba:66:
95:32:3c:64:f6:49:bd:4e:81:ab:58:71:ab:4f:06:6e:a0:03:
3f:a9:c2:4b:38:84:4f:cb:ea:27:30:19:6f:06:70:0a:b2:a5:
a0:41:30:55:2f:f3:6f:66:02:59:fb:87:81:f6:6e:ca:61:5b:
28:83:77:82:e0:b3:8d:e2:34:c4:fb:27:68:87:c1:c9:8f:9c:
96:c7:d5:c8:44:31:a1:a8:10:2b:79:f2:38:f8:31:c1:1d:21:
5c:3b:64:3c:77:3b:aa:54:e3:c9:5e:d6:99:a0:e4:c6:f1:a8:
7a:49:12:1b:55:78:57:16:d0:ca:c3:8e:86:a2:fb:db:2e:0a:
12:cf:d3:11:48:ec:1f:33:c8:9e:90:30:a4:e8:f4:37:dd:0b:
6f:a2:68:0d:0c:e4:62:9f:bd:76:43:3c:8e:42:85:35:80:23:
84:c4:01:31:b0:6b:2f:2d:33:3e:34:d9:dd:8e:9d:0f:ba:02:
c4:51:cd:0b:89:ab:22:f5:2c:8c:45:9c:0d:44:fd:c7:8b:c1:
a6:aa:b5:30:ad:37:ff:9a:53:d2:65:bb:34:2f:d6:03:56:1e:
8f:53:fe:32:77:c1:36:e0:39:d6:f0:0b:fa:bf:fb:55:14:83:
33:c6:83:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:15 2025 by rpki-client