This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File: USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier: 6J1yLudu1mD2kn/ivJXoHIEZ/a2ZuoEwEGd+Md6O1zo=
Subject key identifier: 2F:10:59:DC:24:D9:82:6E:33:39:89:9F:74:44:CA:6B:39:F9:F7:AA
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer: /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial: 0C91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number: 0C85
Signing time: Sat 06 Dec 2025 17:51:47 +0000
Manifest this update: Sat 06 Dec 2025 17:51:46 +0000
Manifest next update: Sat 13 Dec 2025 17:51:46 +0000
Files and hashes: 1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: 8b5m1Y9oAm6xj435NMqBlFTI6gVZpwb6lXq4blMDi00=)
2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: sMJ9ABTkBjJpmsGpVTgN6KS8wLvV90Yar62yGx5iotI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3217 (0xc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Validity
Not Before: Dec 6 17:51:46 2025 GMT
Not After : Dec 13 17:51:46 2025 GMT
Subject: CN=69346d32-a1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:db:36:6c:6f:29:55:30:17:df:ce:98:05:
1e:01:51:dc:d7:d2:e2:9b:0f:7a:ac:75:62:fe:f4:
6b:9f:9a:07:ad:04:4f:94:d7:86:2a:33:a7:2f:cf:
3f:3d:e9:b2:e7:c4:57:e2:47:b1:69:e8:d0:79:b7:
76:15:d2:a5:71:fb:95:bf:3d:ce:22:eb:f8:6c:b1:
51:57:f5:1b:00:cf:2d:d7:86:3e:2e:9b:92:97:8a:
f1:af:b1:f4:2b:f5:63:bd:28:82:d9:82:13:67:b2:
a9:6a:34:fe:8f:75:da:c6:40:74:c3:f3:e0:66:85:
e4:14:b5:99:53:8f:0f:9f:52:73:36:6a:02:e2:d5:
d0:85:c7:76:d7:dd:0d:94:ce:28:92:08:e1:77:8e:
39:f0:41:00:4f:1a:6a:88:9c:66:dd:35:65:85:ee:
6f:d1:29:55:a4:e6:6c:a2:f9:06:5a:c1:5e:fe:94:
66:f0:97:07:16:ad:54:47:19:79:67:b1:7f:a6:07:
6d:d9:5f:2d:d7:be:e0:66:30:c3:24:fa:ed:62:ff:
4b:e5:7c:ba:e2:d3:11:84:9d:50:de:f3:96:80:81:
1d:b2:6b:64:44:45:70:69:2e:58:99:59:77:e8:72:
38:78:be:b9:42:aa:2a:90:9e:7b:af:ad:cc:c5:05:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:59:DC:24:D9:82:6E:33:39:89:9F:74:44:CA:6B:39:F9:F7:AA
X509v3 Authority Key Identifier:
keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:13:8b:33:74:1f:02:0f:06:c4:8d:55:6a:a2:00:77:61:3f:
95:b2:fb:f5:19:c0:b1:d8:4e:b3:96:c8:9a:94:cd:d6:f5:a3:
a6:59:af:8f:43:48:42:ec:86:a8:f9:0c:33:47:3c:5d:b0:c7:
e9:03:a3:ad:b8:21:8f:d5:eb:38:a8:38:5d:6f:98:6c:be:95:
43:5f:a1:2c:28:c5:17:fb:83:98:d4:1e:0b:2d:96:65:6b:9c:
4a:64:46:09:95:c9:eb:ef:62:f1:20:ee:7c:49:8f:77:06:61:
43:b4:93:18:d9:6f:e8:ae:60:b3:60:6d:4c:1d:3e:da:3c:ba:
0a:59:3e:e2:7c:01:49:6b:e4:fd:43:09:34:a1:02:72:a3:02:
a2:f6:d8:6c:21:f6:52:0d:b7:3c:0c:d4:e5:d3:76:08:25:32:
be:fc:4c:13:fb:67:15:81:85:9b:e1:7f:8b:14:ce:ea:77:7c:
8a:3e:a5:34:27:68:6a:7b:99:be:7d:b3:55:23:49:50:c8:e2:
ba:07:d5:20:09:cf:d6:16:38:2f:ae:c2:d8:e1:3a:a1:4b:fe:
6b:1f:0b:59:4b:66:c4:c9:42:ac:02:0c:73:61:83:97:52:23:
c1:67:01:8b:02:c2:20:35:e7:0a:6e:5a:69:78:29:dd:fe:63:
5a:56:33:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgxNTExMTAvBgNVBAUTKDUxMjRBMDRFMjNBQUREQTQ0RDk0QUIwRDRBQjJDMEI3
QjIwQkZDNzUwHhcNMjUxMjA2MTc1MTQ2WhcNMjUxMjEzMTc1MTQ2WjAYMRYwFAYD
VQQDEw02OTM0NmQzMi1hMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcnbNmxvKVUwF9/OmAUeAVHc19Limw96rHVi/vRrn5oHrQRPlNeGKjOnL88/
Pemy58RX4kexaejQebd2FdKlcfuVvz3OIuv4bLFRV/UbAM8t14Y+LpuSl4rxr7H0
K/VjvSiC2YITZ7KpajT+j3XaxkB0w/PgZoXkFLWZU48Pn1JzNmoC4tXQhcd2190N
lM4okgjhd4458EEATxpqiJxm3TVlhe5v0SlVpOZsovkGWsFe/pRm8JcHFq1URxl5
Z7F/pgdt2V8t177gZjDDJPrtYv9L5Xy64tMRhJ1Q3vOWgIEdsmtkREVwaS5YmVl3
6HI4eL65QqoqkJ57r63MxQXA8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8QWdwk
2YJuMzmJn3REyms5+feqMB8GA1UdIwQYMBaAFFEkoE4jqt2kTZSrDUqywLeyC/x1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODE1MS83MDExNERBQTBD
NTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNhUk5sS3NOU3JMQXQ3SUxf
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTU2dUaU9xM2FSTmxLc05TckxBdDdJTF9IVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODE1MS83MDExNERBQTBDNTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNh
Uk5sS3NOU3JMQXQ3SUxfSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvE4szdB8CDwbEjVVqogB3YT+Vsvv1GcCx2E6zlsialM3W9aOmWa+P
Q0hC7Iao+QwzRzxdsMfpA6OtuCGP1es4qDhdb5hsvpVDX6EsKMUX+4OY1B4LLZZl
a5xKZEYJlcnr72LxIO58SY93BmFDtJMY2W/ormCzYG1MHT7aPLoKWT7ifAFJa+T9
Qwk0oQJyowKi9thsIfZSDbc8DNTl03YIJTK+/EwT+2cVgYWb4X+LFM7qd3yKPqU0
J2hqe5m+fbNVI0lQyOK6B9UgCc/WFjgvrsLY4TqhS/5rHwtZS2bEyUKsAgxzYYOX
UiPBZwGLAsIgNecKblppeCnd/mNaVjMa
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:46:02 2025 by rpki-client