This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json)
Hash identifier: tovZzjJJj91hF+KSFdu/6Az0iCmaEwDs7//TswBjV2k=
Subject key identifier: D9:2A:0E:DB:FC:5C:B8:5E:23:59:6F:B9:70:32:6A:80:05:7C:3B:18
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0B6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
Manifest number: 0B64
Signing time: Thu 04 Dec 2025 18:30:09 +0000
Manifest this update: Thu 04 Dec 2025 18:30:08 +0000
Manifest next update: Thu 11 Dec 2025 18:30:08 +0000
Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: RQW81zmhSivgagE1JABdcETWjgZLnWuUEb0GbtWr37g=)
2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: 0AMWGP+6uBhgSLnnmyVJPmvq5N7a9ynJhnv9JCsPnVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Dec 4 18:30:08 2025 GMT
Not After : Dec 11 18:30:08 2025 GMT
Subject: CN=6931d331-6345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:6e:8f:cc:22:6a:ff:33:56:ad:b2:0e:11:
ee:e8:f2:60:ab:7f:48:06:5f:09:f6:d1:e9:d0:6d:
fe:8f:2c:3d:5e:cb:f9:4b:14:c4:a5:b2:7c:dc:de:
d3:b7:d7:c3:a7:e3:61:bc:19:94:d7:34:b9:e8:8d:
48:70:a9:cc:cb:92:30:74:15:2b:53:73:08:b1:e9:
de:2a:b4:1b:a3:6f:49:ff:f0:63:58:8f:cc:50:8d:
1e:00:1c:6d:ce:da:72:ad:78:29:a7:20:6c:2c:65:
f5:51:34:bc:67:36:14:06:b7:b6:ca:71:52:87:2b:
6f:9c:cf:45:87:a2:12:b6:81:5a:3f:27:8f:35:4a:
4c:d5:ae:13:f1:f6:83:23:fa:7a:68:b5:90:33:ab:
48:3b:67:1c:19:05:d1:c6:8a:72:93:86:a2:eb:50:
87:37:e8:0f:de:9e:3b:b2:89:7d:33:06:40:51:e0:
00:2a:7f:ff:49:dd:7a:3d:2c:67:b1:d4:56:c9:a7:
9e:d5:f2:d9:21:f2:d1:14:04:ca:74:2c:9d:f5:35:
ff:5b:1e:cd:41:b3:55:ba:bc:57:f8:a0:ff:20:38:
ad:89:f0:0d:39:69:80:b6:c4:02:4a:95:a1:f3:d6:
28:0a:b9:b2:95:b3:d5:08:5f:b4:4d:fe:a9:c8:20:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:0E:DB:FC:5C:B8:5E:23:59:6F:B9:70:32:6A:80:05:7C:3B:18
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:08:14:da:69:81:89:3e:83:f9:a5:e6:b5:bd:50:ca:1a:
38:5c:da:a4:21:2e:21:10:32:2e:66:c7:d3:e5:47:d8:b3:c4:
d6:de:85:66:e3:5d:2b:b4:f3:9f:f7:35:df:a5:4d:e7:c5:52:
e8:8d:08:ef:cc:f0:dc:2e:0b:b9:da:bf:e4:fb:e7:95:a4:82:
4c:21:28:76:50:f6:82:d7:a0:67:6a:ef:e4:94:a9:b9:17:9e:
17:13:7d:ad:6c:8c:f1:3b:ec:ed:06:8e:a8:3b:91:5c:be:73:
96:e6:d0:06:e0:20:b4:58:a3:4f:e5:eb:5d:b4:28:7b:4a:99:
44:b3:ef:b6:69:a4:0e:35:46:c4:91:25:d2:dd:e0:d4:ac:d9:
17:41:5a:2c:10:67:1b:4b:c5:3b:63:58:83:2e:74:ea:b2:48:
67:70:11:82:13:ca:97:61:7d:f5:29:23:ef:71:09:b8:2d:a5:
56:a8:20:29:d0:9e:d1:c6:c3:a2:89:6e:a2:25:75:05:22:d7:
9e:c1:97:53:33:a2:4b:c7:fe:d3:1b:e2:07:ce:ac:c9:39:fc:
d8:23:69:36:f1:9e:43:be:41:64:67:33:0b:7f:5f:1d:e3:37:
43:94:01:10:19:6c:14:5a:38:f0:bc:28:63:9f:87:fb:02:f4:
3a:89:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:47 2025 by rpki-client