This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: Ar4kDCzo03RTE/f1pOn3ec5drX4qiGwAVL6hvqqVGKs=
Subject key identifier: 5F:E4:0B:F6:B9:B5:46:B0:67:CB:9C:FB:02:38:91:02:C1:33:CD:76
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0C97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0C86
Signing time: Sat 06 Dec 2025 17:50:37 +0000
Manifest this update: Sat 06 Dec 2025 17:50:36 +0000
Manifest next update: Sat 13 Dec 2025 17:50:36 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: bjA+VfNPhzRn0MWCWvutnebaKCMp2GDHjHA4++0mCHE=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Dec 6 17:50:36 2025 GMT
Not After : Dec 13 17:50:36 2025 GMT
Subject: CN=69346ced-a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:59:67:79:61:bd:d7:ce:0e:3f:53:ba:87:
c1:27:e6:5f:49:85:e1:90:db:51:88:d4:cd:8b:c2:
68:9a:c0:74:8c:7c:94:92:da:b7:90:57:12:e7:ae:
40:f5:b5:03:a6:e6:fb:c8:6d:cd:5e:78:73:85:f1:
69:80:67:c1:8c:28:7a:6a:46:1d:3f:66:7d:3f:e9:
b8:aa:3d:f6:fe:37:da:4b:96:d7:26:c4:33:9d:16:
50:ac:a3:83:0c:25:6d:15:af:28:74:30:a4:e9:a6:
8e:db:ad:05:10:14:83:4e:c3:ab:21:3f:11:61:47:
56:b5:1f:da:da:08:5b:8d:30:f7:a5:d1:97:f0:70:
68:f3:b6:22:5b:b0:9a:67:de:87:54:22:b2:5e:63:
99:5f:e3:d5:fc:c5:ed:5b:48:7d:57:87:a3:29:c9:
c0:d0:11:07:11:7a:27:70:4e:78:7b:7a:bc:25:69:
c1:52:ad:eb:cb:60:1e:f7:31:34:f7:45:a8:58:81:
0f:59:9a:a2:cb:58:ad:cb:35:84:f8:36:e9:6b:c0:
e0:f4:5e:d6:81:5b:86:33:f8:0c:0f:c9:80:e6:ce:
8d:88:c2:34:e3:d0:92:f6:3d:77:3b:59:c5:27:d7:
df:d4:ef:48:63:09:1d:2f:0e:34:cd:d7:cc:f8:2f:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:0B:F6:B9:B5:46:B0:67:CB:9C:FB:02:38:91:02:C1:33:CD:76
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:69:9f:54:3a:e7:0a:d6:5e:e3:96:99:e6:bf:e3:91:ab:
3f:58:34:a7:ce:86:bb:f6:6b:60:73:f4:35:66:29:c3:5c:83:
9f:11:3e:be:96:7a:8d:fc:12:7c:4e:b6:d8:b0:78:c2:bd:55:
b8:2c:23:58:f5:78:34:48:35:84:9a:0c:f3:d1:c8:fd:ab:61:
b5:04:19:44:7c:4a:97:fb:d0:b4:3b:b5:7b:1c:75:ae:92:6e:
a0:24:af:81:4b:ec:42:a3:6e:88:d2:5e:98:5e:5c:e8:47:17:
08:4c:c7:be:7d:ec:3b:92:62:b8:6a:e4:a6:9f:6a:10:f2:2d:
81:1f:35:f8:ba:91:92:97:e4:c6:35:3d:47:2c:73:51:4f:93:
83:68:8b:3d:23:ac:4d:43:89:00:19:b1:1a:6f:1f:97:8d:d2:
61:b4:c1:98:91:67:16:62:32:4a:2a:95:51:f0:71:32:04:f0:
fb:34:7d:32:a2:01:48:aa:9b:cb:94:5b:4b:88:4a:00:87:0c:
b1:3c:b9:dd:da:d0:78:fc:0f:17:17:3a:2b:6a:67:82:c9:de:
8b:02:19:76:38:9f:ac:0c:d7:fc:53:5f:68:43:dd:9a:90:84:
fe:89:73:2e:20:e0:35:fc:bf:5d:4c:46:3a:1e:21:5b:b4:b9:
b9:9f:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:44 2025 by rpki-client