This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: vaLS6KoXJZJ5PmhwLAF4Xk7XrAFVUSTY5cD+9W5ZQ8c=
Subject key identifier: B1:CC:D5:8E:F7:C4:4B:BD:B9:08:77:8A:00:65:EF:74:92:A8:71:19
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 0554
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 0541
Signing time: Thu 04 Dec 2025 22:05:54 +0000
Manifest this update: Thu 04 Dec 2025 22:05:53 +0000
Manifest next update: Thu 11 Dec 2025 22:05:53 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: Q7f/0c2sktH4EZqNsi2cO8leRDmU84Z2NFams54sfgI=)
2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: ia2pqx31V4MwmguUfrEguAwy/z3aXZqah5kSHzEHlrE=)
3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: 9W/HjzYGLuVHz3M6psfGPjI/8SrB5a0T/iVdc7KS6JA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: Dec 4 22:05:53 2025 GMT
Not After : Dec 11 22:05:53 2025 GMT
Subject: CN=693205c1-6a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:ae:ae:81:c1:a7:71:6c:38:ef:f6:43:09:
73:8e:a9:37:1c:8e:42:57:e5:ba:6d:9c:b1:e6:ca:
1a:47:26:ad:a6:5a:46:92:c5:c6:81:6f:99:7c:22:
a8:b3:be:8f:10:f7:07:da:f5:34:5e:d4:12:89:dd:
fa:67:9e:3e:7d:c5:0f:86:ce:50:87:a2:07:f9:44:
da:e6:57:da:b4:5c:4f:23:24:5e:54:d8:b3:72:f6:
b4:22:b5:d5:c6:67:db:3a:66:12:35:47:7f:53:5f:
c2:7b:88:0f:d8:d6:ed:56:4a:b7:9b:0a:db:cf:aa:
9e:43:93:83:3a:69:79:60:b9:4d:64:04:39:1f:b5:
f8:4b:ea:82:89:f4:f7:11:d1:c8:61:05:a0:f2:28:
42:20:c1:a1:c2:6e:82:2e:5e:d4:fa:92:df:51:98:
4b:0d:4a:b7:e8:77:cc:ee:dc:72:10:35:aa:87:c7:
88:55:c0:53:15:70:fd:c0:32:05:fc:47:0e:a5:1f:
75:cb:82:80:b4:90:0e:b9:82:3b:86:ed:c4:7c:af:
6d:66:f1:c7:2e:01:51:bf:03:62:c6:27:f8:72:ed:
d0:57:26:45:bd:53:5a:43:0d:67:82:3a:48:de:5c:
7a:16:a1:7a:94:b3:5d:a3:b2:04:10:ec:8e:a8:0c:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:D5:8E:F7:C4:4B:BD:B9:08:77:8A:00:65:EF:74:92:A8:71:19
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:b6:99:1e:f3:79:3a:79:57:07:1a:60:e3:9c:01:8f:ae:
e0:5a:3d:ad:7f:25:70:e9:54:28:33:6e:97:51:d3:25:38:25:
47:55:1a:1c:a9:45:ea:ab:ff:af:01:8c:2a:30:f2:58:da:e3:
b9:4f:b0:63:58:98:58:e8:38:20:76:24:6a:dc:53:04:8a:01:
6f:f3:f4:02:72:f0:4c:78:ca:61:1c:f5:71:94:15:0e:f2:69:
d1:52:cc:f4:bb:63:a1:70:82:c6:23:8f:de:e2:56:74:a2:27:
0a:f6:10:ea:b7:06:91:41:78:27:1f:56:92:79:b0:b7:81:9f:
20:84:60:8e:44:54:f6:bb:59:36:4d:f5:b8:ce:bf:3f:58:e3:
14:6f:d7:19:3b:f1:54:91:a6:9d:40:41:be:28:f7:23:07:80:
a1:7f:83:77:fe:c4:63:2f:a4:eb:34:ef:f6:c4:db:17:50:bd:
b0:e4:33:b6:17:71:e4:4b:d4:af:ef:96:42:ed:6b:e4:3c:55:
9d:86:c1:86:e3:1b:b4:3a:e5:e8:fa:da:e4:6f:f2:25:4a:35:
ea:3e:b5:a7:78:37:07:d4:c2:3f:e7:02:e2:24:ea:99:f3:5a:
df:b0:fc:61:4f:b4:5a:19:a1:34:55:bd:99:88:cc:4d:6f:e2:
a0:56:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:37 2025 by rpki-client