This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json)
Hash identifier: pdFzksW2A+tiMuwqzuvua7ozxGHZqwpR3rR/AI8yS44=
Subject key identifier: CB:C1:89:9C:38:92:B2:36:71:59:CE:DC:25:69:3A:F6:74:CA:F9:F9
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
Manifest number: 0183
Signing time: Fri 05 Dec 2025 01:53:32 +0000
Manifest this update: Fri 05 Dec 2025 01:53:32 +0000
Manifest next update: Fri 12 Dec 2025 01:53:32 +0000
Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: ZKon0feAVyNsKl2c/XeZWC99LfnTO4cBFH0rllC0t7g=)
2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: eDj76E11Nc1+IGlyzMBJDLm0PsvVUG2jJEzd62VT4NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Validity
Not Before: Dec 5 01:53:32 2025 GMT
Not After : Dec 12 01:53:32 2025 GMT
Subject: CN=69323b1c-d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:e6:ea:d4:28:24:ba:73:00:4d:6a:6c:10:
80:56:18:c9:eb:de:79:92:2e:20:58:b0:8a:ea:99:
15:65:36:68:8b:f2:4e:8e:3f:d1:1b:1b:ad:d4:a3:
14:65:f6:3b:20:dd:c7:ca:91:30:69:a7:4b:84:a2:
63:33:43:ed:90:52:c7:f0:b5:0b:06:fe:54:cb:95:
8b:8c:ff:76:a2:4a:7a:63:e7:78:68:49:4f:ce:28:
d5:60:4b:06:47:fb:71:c2:b5:92:10:cd:71:34:df:
84:1f:e0:d5:d6:d0:fb:8a:2c:cb:4d:2c:a8:0f:85:
b2:21:bf:2b:a5:18:2e:9e:a9:55:26:d7:85:0c:5b:
89:23:00:2a:66:26:eb:8d:6b:ca:80:5b:b1:a6:a5:
3a:07:6f:23:27:10:94:61:6d:99:3d:3b:e4:d6:90:
4a:aa:4a:a6:e4:b3:7b:2a:66:42:a6:6a:6f:3d:79:
f1:f6:81:ab:57:1e:13:c7:9b:1a:6a:31:da:ca:7e:
39:b2:d6:1c:af:12:66:56:4f:73:e8:ad:5f:8b:33:
b0:f7:2e:c5:8d:08:2a:42:d6:db:33:c8:79:a2:23:
e2:19:6c:92:0b:e5:06:aa:c7:9d:b1:3a:41:40:d6:
f3:18:5e:cb:e2:77:d2:b3:d2:ce:b4:a2:af:32:4d:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:89:9C:38:92:B2:36:71:59:CE:DC:25:69:3A:F6:74:CA:F9:F9
X509v3 Authority Key Identifier:
keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:f3:4b:aa:73:97:31:8b:5f:be:26:e6:e5:6d:fd:fb:a5:
35:54:ec:5b:42:12:90:2d:ac:b4:09:54:30:d4:7e:eb:36:5f:
65:b5:c0:8a:a6:a6:0b:55:d6:42:b8:88:c8:27:48:eb:5a:18:
55:a9:e9:50:21:77:98:3d:d9:68:53:14:13:98:43:ea:1c:05:
db:e5:94:74:ac:2a:7b:b8:45:9c:ed:c9:c7:49:10:81:8e:f1:
9e:24:d5:3c:1a:e3:23:f7:d1:e6:52:4b:2f:ca:7e:91:ac:c6:
40:9e:34:b0:fe:97:aa:4c:3a:51:77:63:95:2f:37:2e:31:4c:
18:c9:3b:f9:d1:bb:12:c6:80:56:05:e3:a8:79:fb:89:4b:5e:
a8:33:f8:83:05:d1:12:86:8a:ff:83:d0:28:96:5a:ba:55:e6:
f4:5e:b8:d3:81:cd:ee:39:20:44:d2:93:4e:b9:eb:4d:07:10:
42:20:69:26:24:8d:a4:c4:f7:bc:8a:23:a7:62:52:41:94:be:
33:78:1a:45:36:d6:fe:5b:f2:cf:bb:0f:1c:e6:2a:9d:ec:36:
95:6d:69:57:bb:95:b6:b4:00:fc:4b:15:31:fe:ca:88:bd:91:
98:13:90:68:f5:24:da:52:20:ce:6e:ee:4b:2a:53:af:15:ba:
5b:c7:c6:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw
QjYxMzgyMEQwHhcNMjUxMjA1MDE1MzMyWhcNMjUxMjEyMDE1MzMyWjAYMRYwFAYD
VQQDEw02OTMyM2IxYy1kOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwnm6tQoJLpzAE1qbBCAVhjJ6955ki4gWLCK6pkVZTZoi/JOjj/RGxut1KMU
ZfY7IN3HypEwaadLhKJjM0PtkFLH8LULBv5Uy5WLjP92okp6Y+d4aElPzijVYEsG
R/txwrWSEM1xNN+EH+DV1tD7iizLTSyoD4WyIb8rpRgunqlVJteFDFuJIwAqZibr
jWvKgFuxpqU6B28jJxCUYW2ZPTvk1pBKqkqm5LN7KmZCpmpvPXnx9oGrVx4Tx5sa
ajHayn45stYcrxJmVk9z6K1fizOw9y7FjQgqQtbbM8h5oiPiGWySC+UGqsedsTpB
QNbzGF7L4nfSs9LOtKKvMk1RaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvBiZw4
krI2cVnO3CVpOvZ0yvn5MB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4
NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z
Y0stRUJWZV9RVm9MWVRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAO5PNLqnOXMYtfvibm5W39+6U1VOxbQhKQLay0CVQw1H7rNl9ltcCK
pqYLVdZCuIjIJ0jrWhhVqelQIXeYPdloUxQTmEPqHAXb5ZR0rCp7uEWc7cnHSRCB
jvGeJNU8GuMj99HmUksvyn6RrMZAnjSw/peqTDpRd2OVLzcuMUwYyTv50bsSxoBW
BeOoefuJS16oM/iDBdEShor/g9Aollq6Veb0XrjTgc3uOSBE0pNOuetNBxBCIGkm
JI2kxPe8iiOnYlJBlL4zeBpFNtb+W/LPuw8c5iqd7DaVbWlXu5W2tAD8SxUx/sqI
vZGYE5Bo9STaUiDObu5LKlOvFbpbx8bb
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:34 2025 by rpki-client