This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: /pydeyjfmR38gw+OmO9NvEIrjcI9IR17HTUiQFwi02w=
Subject key identifier: 73:A4:56:47:03:F0:78:04:FB:45:56:91:3F:9B:E0:91:49:9F:DF:98
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 010F
Signing time: Fri 05 Dec 2025 03:02:58 +0000
Manifest this update: Fri 05 Dec 2025 03:02:58 +0000
Manifest next update: Fri 12 Dec 2025 03:02:58 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: G55TmEhxL7YVSlcU1YDbeuDY0EMYKDJfsNIJxRp4i1M=)
2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: ZyyI/ZozrG5/nhJLIBxR0Bcz7+GF6Q+AWpBF1mK4I18=)
3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: NjBAV+BZBuGQVA2KV6NfHJRJuvgRL/XOA20W9Q3lchw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Dec 5 03:02:58 2025 GMT
Not After : Dec 12 03:02:58 2025 GMT
Subject: CN=69324b62-d9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:18:af:18:6a:e1:ca:11:d6:a2:3c:1d:9c:
c3:5b:03:92:48:eb:b3:90:da:7b:51:9a:91:02:8f:
54:d9:22:88:4e:e6:b8:3e:a4:97:5e:4e:59:de:07:
76:10:d5:f8:c3:18:f4:9a:86:70:70:42:07:5b:60:
9f:06:e0:f5:7d:21:ab:90:9f:68:20:22:aa:88:1d:
05:8c:62:d2:d0:9e:83:45:20:71:68:fe:49:33:ac:
05:52:00:9e:b5:7c:c5:3b:6b:6e:4a:00:36:dd:75:
9d:d5:ea:c8:d1:3b:70:a1:82:d7:ac:da:da:f5:19:
33:98:a6:4e:c9:5c:a0:db:2a:b3:60:30:d3:fc:fe:
4f:7e:d8:71:9d:59:ce:05:80:b0:27:11:86:75:7d:
b1:21:2c:fa:2d:d9:96:e3:a8:71:33:c5:7b:11:33:
d9:97:74:dd:33:52:70:3a:9e:31:5d:9e:0c:ff:59:
e7:7c:4a:d8:53:2e:d6:9c:71:2e:7e:5b:7c:37:6c:
7d:64:84:cd:46:ce:44:6b:65:86:05:0f:c4:b8:d8:
b0:c6:e5:c3:8d:80:61:da:13:24:60:be:4d:43:49:
ff:00:36:fc:01:bd:fc:be:f5:4a:c1:90:68:51:5c:
74:8a:6e:d2:4f:d1:0b:f5:c7:97:9f:29:57:4c:b1:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:56:47:03:F0:78:04:FB:45:56:91:3F:9B:E0:91:49:9F:DF:98
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:a5:e5:62:74:0b:8a:68:72:12:2e:61:21:dc:8b:29:53:
af:76:8e:6c:3a:5f:bc:f1:dd:a2:22:81:7e:27:a2:0e:3a:ab:
7f:e3:a6:20:0f:b1:75:6d:1f:fc:b3:9e:bc:01:da:69:3c:cb:
61:b0:39:bf:2e:09:01:1d:0d:6d:21:37:f4:b3:d8:f0:dd:cd:
74:c7:4a:d7:19:26:bb:73:24:a1:2c:25:f2:fe:6e:33:a8:f2:
07:04:5d:b9:46:c0:33:a0:10:81:c8:bc:78:1e:b9:f7:9e:89:
40:1e:2b:98:0f:90:54:32:18:38:b8:3b:f9:d7:e4:cf:87:56:
78:6a:7d:f1:32:1b:b1:e4:da:1b:2d:6a:19:5f:f8:e6:3d:a5:
61:12:12:ac:3b:4f:11:97:eb:0a:74:45:e0:57:11:56:00:8b:
a9:c5:3b:06:51:53:63:18:1e:bb:96:3c:90:34:dc:14:ee:50:
d2:0c:c9:71:33:d1:d0:29:03:1d:5b:17:53:6a:c7:a5:27:8a:
2b:71:11:c5:9c:a2:b1:df:68:51:64:86:7c:53:a4:11:4f:db:
26:32:ff:9c:81:fd:24:cb:e8:3c:ba:8a:c5:eb:14:4d:70:8d:
ed:d0:61:86:ef:19:7c:21:4f:b9:ae:30:44:ba:15:5d:43:75:
57:d0:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:40 2025 by rpki-client