This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier: YGctZPnzXjfMQgmZkYTXIEGFEjoiHNT5ZiZ60xyqNio=
Subject key identifier: AD:E9:A5:6F:06:DE:68:82:28:A7:44:63:DB:E1:E4:0F:CB:64:88:7A
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number: FB
Signing time: Fri 05 Dec 2025 03:13:55 +0000
Manifest this update: Fri 05 Dec 2025 03:13:55 +0000
Manifest next update: Fri 12 Dec 2025 03:13:55 +0000
Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: JXVu+VLHazf74vtg1Av6ms5MgT7iGu8mvkU6ta0gnJU=)
2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Validity
Not Before: Dec 5 03:13:55 2025 GMT
Not After : Dec 12 03:13:55 2025 GMT
Subject: CN=69324df3-6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:80:ab:8b:51:59:de:98:dd:f2:eb:bc:f0:
df:43:b9:82:05:2b:06:34:23:64:e7:7e:53:87:34:
4c:d4:b7:2f:f5:73:f1:30:99:bd:86:1f:c1:4c:88:
ef:19:17:f5:01:e4:01:05:fc:48:ec:ea:87:5c:f5:
e7:58:2d:0f:d7:75:44:58:a7:8f:cc:6a:a0:f0:3c:
80:22:14:d4:3d:0a:40:a5:1e:67:ed:d8:0f:5c:cd:
5e:e6:02:eb:a1:7e:ba:25:67:f8:5a:da:e6:b4:76:
13:7c:6d:5d:b6:9f:4e:83:78:24:07:33:6f:85:f2:
6a:10:f5:18:7d:98:21:8b:ac:32:4d:11:3a:83:17:
2c:ec:9a:f5:4a:bc:09:c9:c8:53:f9:eb:d8:ff:0d:
bf:d7:a1:33:0b:eb:71:56:66:cd:3e:3f:89:5c:9a:
a0:f1:7c:98:4b:ff:07:d3:33:4a:49:0f:b2:2a:bb:
6f:96:74:71:84:48:6c:0d:17:d5:f7:9b:ee:cf:a9:
04:82:9d:ce:23:ee:cf:6b:fb:c3:7d:d1:9f:05:ee:
c3:f1:22:12:76:78:55:ec:d3:d1:85:78:bb:67:35:
da:9c:45:69:af:64:3c:37:02:8c:39:f0:42:ee:f0:
d7:2c:1d:4a:3d:f9:a2:09:38:70:8d:f0:f7:a8:29:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:A5:6F:06:DE:68:82:28:A7:44:63:DB:E1:E4:0F:CB:64:88:7A
X509v3 Authority Key Identifier:
keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:8d:1b:77:1c:20:c8:02:65:4e:e0:d9:b4:85:a6:3b:4a:
eb:17:fe:50:63:6b:cd:65:61:0a:62:4a:f5:6b:bf:fd:6b:dc:
7d:7a:e0:65:ed:a6:7e:1f:6b:c6:cc:d7:30:36:20:94:1d:d7:
69:ae:ba:ef:69:31:76:49:d2:03:de:4e:30:e2:8c:98:d6:59:
0d:4d:1a:2c:d3:d8:c2:4b:7c:c9:53:0c:7f:7b:30:ea:4e:62:
6c:30:6d:f7:f7:81:e2:78:0d:e2:83:0c:4c:bf:e2:1b:ef:38:
fa:9c:6b:86:83:4d:53:f5:10:bc:df:da:89:06:49:3a:38:db:
3f:ba:80:72:44:cc:78:23:3b:77:15:94:34:d8:83:03:f9:ad:
24:ee:b7:4e:fb:c1:40:36:40:16:56:55:cd:33:41:16:02:b1:
cd:86:88:18:d4:74:66:16:d8:6b:8f:08:5a:b4:c4:f5:06:5e:
13:08:3e:b4:3d:22:a3:a3:b6:d6:86:5f:02:cd:68:31:23:4e:
19:07:0e:32:31:57:2a:9c:67:8e:63:38:f6:dc:d7:54:98:51:
0c:66:fe:cb:99:9d:25:58:8f:12:10:b6:d3:1e:75:f0:2b:ce:
70:47:e3:37:20:a9:02:1b:e7:0c:6d:c7:6f:f4:a7:12:6b:5b:
04:2e:93:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx
Mzg5NUUyOUEwHhcNMjUxMjA1MDMxMzU1WhcNMjUxMjEyMDMxMzU1WjAYMRYwFAYD
VQQDEw02OTMyNGRmMy02YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmqAq4tRWd6Y3fLrvPDfQ7mCBSsGNCNk535ThzRM1Lcv9XPxMJm9hh/BTIjv
GRf1AeQBBfxI7OqHXPXnWC0P13VEWKePzGqg8DyAIhTUPQpApR5n7dgPXM1e5gLr
oX66JWf4WtrmtHYTfG1dtp9Og3gkBzNvhfJqEPUYfZghi6wyTRE6gxcs7Jr1SrwJ
ychT+evY/w2/16EzC+txVmbNPj+JXJqg8XyYS/8H0zNKSQ+yKrtvlnRxhEhsDRfV
95vuz6kEgp3OI+7Pa/vDfdGfBe7D8SISdnhV7NPRhXi7ZzXanEVpr2Q8NwKMOfBC
7vDXLB1KPfmiCThwjfD3qCl3CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3ppW8G
3miCKKdEY9vh5A/LZIh6MB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB
REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r
bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2/o0bdxwgyAJlTuDZtIWmO0rrF/5QY2vNZWEKYkr1a7/9a9x9euBl
7aZ+H2vGzNcwNiCUHddprrrvaTF2SdID3k4w4oyY1lkNTRos09jCS3zJUwx/ezDq
TmJsMG3394HieA3igwxMv+Ib7zj6nGuGg01T9RC839qJBkk6ONs/uoByRMx4Izt3
FZQ02IMD+a0k7rdO+8FANkAWVlXNM0EWArHNhogY1HRmFthrjwhatMT1Bl4TCD60
PSKjo7bWhl8CzWgxI04ZBw4yMVcqnGeOYzj23NdUmFEMZv7LmZ0lWI8SELbTHnXw
K85wR+M3IKkCG+cMbcdv9KcSa1sELpMk
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:23 2025 by rpki-client