This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier: LHdEdVOwydxPRxy4ScZCgcD6lLYMRBjXgr9f1jNxalY=
Subject key identifier: 8D:3D:8C:D2:58:C8:39:AD:7D:E0:38:41:57:7B:CC:3B:65:E0:FF:B1
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 14F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number: 14DE
Signing time: Sat 06 Dec 2025 16:25:35 +0000
Manifest this update: Sat 06 Dec 2025 16:25:34 +0000
Manifest next update: Sat 13 Dec 2025 16:25:34 +0000
Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: 7CDinnB1oDlD8bZGMCcMBRpTRNO6ki00vtEASRW2XtE=)
2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5366 (0x14f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: Dec 6 16:25:34 2025 GMT
Not After : Dec 13 16:25:34 2025 GMT
Subject: CN=693458ff-ed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:78:9d:a8:92:ba:36:69:68:af:ff:a1:a0:
b2:d7:a1:e5:76:e3:7d:7c:f2:06:1e:c8:cc:aa:c3:
8b:35:14:db:a0:23:37:27:22:22:a0:23:7d:b0:37:
cb:b3:9e:b0:df:fe:cd:c6:0c:64:7d:22:ab:66:6e:
02:ca:7b:a1:b5:b1:8f:14:75:32:85:8c:83:bd:73:
2d:18:75:3b:26:96:b4:dd:d2:94:15:91:40:be:46:
f8:60:15:91:98:32:3d:ba:76:54:76:dd:f1:eb:db:
5e:02:a6:fd:43:23:17:4a:3d:8f:17:e5:bf:df:65:
de:3f:10:67:ce:e5:8d:f3:d0:36:1d:02:64:91:32:
04:d0:e6:ec:cb:91:d0:87:19:12:37:6b:43:78:a6:
07:85:c2:a7:45:4c:1b:5f:5f:47:bd:b5:28:f8:c9:
bd:ee:27:d9:c6:a5:97:f7:99:5d:5d:55:c0:5f:8e:
fc:28:ee:4b:39:45:66:2b:64:f2:64:eb:d2:dd:09:
09:84:f2:b2:77:dd:c8:71:a6:87:fd:67:9d:59:1c:
97:a9:6c:11:f0:cf:c4:7e:d7:0e:8e:30:0e:de:da:
18:ce:96:ba:15:45:65:78:c3:4d:a4:e9:4f:ce:0f:
4e:83:d5:fc:ee:ad:22:4b:e0:bb:78:c4:71:ef:dd:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:8C:D2:58:C8:39:AD:7D:E0:38:41:57:7B:CC:3B:65:E0:FF:B1
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:46:57:f7:fa:24:09:49:bf:38:00:58:16:87:de:3b:3f:
6e:ca:ef:55:ce:20:d1:74:9a:87:ba:53:f6:9f:ba:e9:ca:ad:
84:a9:c1:ae:1c:1b:38:24:df:81:36:42:0d:3a:fc:e0:5d:4e:
97:cb:0a:37:53:7e:87:5d:6a:51:08:b1:57:72:59:8a:74:3d:
61:e5:19:e7:f4:c9:ff:db:dd:9c:f5:2c:1f:e6:d0:7d:29:77:
14:d9:67:5b:f9:f6:4d:f9:72:5a:eb:59:2c:09:4a:a2:cc:5c:
4e:93:2b:d7:74:27:c4:b1:d8:fd:08:ba:e7:03:70:22:84:0d:
7e:2e:a7:b8:b4:cc:a3:c5:4f:80:f7:45:6f:b3:2c:73:d7:bc:
d7:e9:01:f3:00:04:7f:95:af:83:e5:49:4a:a8:9b:1f:83:a9:
d4:0e:97:9d:0c:bc:bb:65:8d:9d:30:29:45:b1:c4:27:8e:52:
31:b9:bc:68:5f:b8:b4:7c:99:6e:b6:8c:80:b1:5f:7c:fa:af:
11:ce:21:92:31:9d:33:03:8e:20:38:33:58:e3:57:39:9f:37:
ae:b8:97:5e:2b:01:aa:f7:a1:cf:31:0c:d7:26:5c:23:ab:86:
62:11:7f:07:ca:ac:1b:6f:b9:1f:a2:35:cb:db:66:bf:3b:e9:
b7:8f:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:16 2025 by rpki-client