This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json)
Hash identifier: 9DbMKboH+lyCdZwAD4ZYA5Wi+AKwUdUnDTw1efIsUkA=
Subject key identifier: D9:A1:0B:A3:CA:C5:80:05:03:0B:24:90:2F:B9:05:A2:CB:9F:6B:88
Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Certificate serial: 090F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
Manifest number: 0905
Signing time: Thu 04 Dec 2025 19:30:02 +0000
Manifest this update: Thu 04 Dec 2025 19:30:01 +0000
Manifest next update: Thu 11 Dec 2025 19:30:01 +0000
Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: wLw3QYunczFDqSl5L/NTGYCdMDR7WgowW0DGgWmAK1U=)
2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319 (0x90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Validity
Not Before: Dec 4 19:30:01 2025 GMT
Not After : Dec 11 19:30:01 2025 GMT
Subject: CN=6931e13a-a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:89:2a:f9:4d:91:da:12:1e:6a:5b:ff:8e:
b3:4c:2a:21:b1:74:82:d5:a1:9f:da:2f:c5:a9:e2:
ff:db:af:a9:5d:4d:9f:ec:dd:c1:b8:24:10:03:a3:
70:8b:15:08:16:c4:33:9c:cf:9c:08:b6:d8:0f:f7:
60:08:17:74:5d:ed:dd:d5:d7:c0:1b:5b:74:be:16:
e4:d4:d4:36:80:26:68:2f:b5:b5:62:6d:44:bb:42:
dc:45:59:70:c6:e6:8d:9f:a3:0e:5f:47:9c:32:ed:
70:7a:7e:cf:51:57:da:7e:b1:43:a2:07:0c:7f:1a:
f5:33:cd:54:8a:b9:f8:c2:ef:de:5c:7b:33:dc:fe:
4e:c0:7b:ed:6b:2a:9b:b4:f7:e5:cb:e2:57:48:ae:
26:46:50:a7:f5:80:ed:70:86:64:ab:d3:ae:d7:14:
69:2f:17:a2:8c:74:62:19:dc:34:08:90:1a:7e:29:
a8:62:4d:98:2c:15:cb:a3:3d:c1:fe:2c:16:46:9c:
1d:28:91:ef:06:33:fa:85:43:76:58:48:77:74:00:
ac:35:96:2c:18:5e:86:c5:ad:a8:14:83:5b:2d:f4:
b4:6e:51:d0:0c:aa:44:0f:9a:bb:17:0a:13:da:f9:
1e:30:c3:ef:d3:75:5c:a8:0b:ba:c4:26:b0:54:f3:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:0B:A3:CA:C5:80:05:03:0B:24:90:2F:B9:05:A2:CB:9F:6B:88
X509v3 Authority Key Identifier:
keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:2c:39:2e:e8:86:ad:2e:e3:f7:01:62:69:48:73:58:1d:
3f:9c:0b:46:bc:26:f9:a0:92:3d:ad:a7:d3:99:fb:4d:42:da:
93:28:f9:d5:7f:50:2c:a1:b6:d8:9c:b4:05:d1:28:4a:5a:bf:
79:84:72:0d:ca:04:c1:5f:50:d0:09:2a:46:3f:79:71:74:15:
10:0c:95:cc:be:90:a8:d6:e9:34:db:0f:65:6d:ba:bd:73:e6:
85:20:e6:20:1f:f0:d0:4c:ec:40:42:5c:f5:d5:ee:67:f2:9d:
31:31:e8:82:3b:1c:ed:97:c8:75:d9:6f:d6:ae:ea:65:d5:ca:
bb:a2:73:aa:c2:87:ff:c5:0f:5c:7e:aa:2b:62:89:19:f0:96:
0e:88:50:47:4c:76:3c:76:6d:c2:78:8a:5a:85:51:04:60:5d:
2c:66:c0:4e:51:5c:a0:4c:09:7c:e1:70:b1:64:88:29:b8:06:
16:6c:cc:84:c4:9e:64:10:b0:b8:89:e9:99:8e:95:d6:4e:fe:
aa:69:06:3b:34:d2:3d:3d:40:e7:41:21:d0:00:4d:25:2b:f4:
a4:a6:55:b3:fe:6c:87:89:67:15:22:cd:3e:62:95:9b:b7:8d:
b7:eb:e3:8a:e2:6d:47:0d:be:6a:89:ad:38:dc:75:a6:16:b3:
72:9f:50:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5
RUFCNUY3RjYwHhcNMjUxMjA0MTkzMDAxWhcNMjUxMjExMTkzMDAxWjAYMRYwFAYD
VQQDEw02OTMxZTEzYS1hM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmKJKvlNkdoSHmpb/46zTCohsXSC1aGf2i/FqeL/26+pXU2f7N3BuCQQA6Nw
ixUIFsQznM+cCLbYD/dgCBd0Xe3d1dfAG1t0vhbk1NQ2gCZoL7W1Ym1Eu0LcRVlw
xuaNn6MOX0ecMu1wen7PUVfafrFDogcMfxr1M81Uirn4wu/eXHsz3P5OwHvtayqb
tPfly+JXSK4mRlCn9YDtcIZkq9Ou1xRpLxeijHRiGdw0CJAafimoYk2YLBXLoz3B
/iwWRpwdKJHvBjP6hUN2WEh3dACsNZYsGF6Gxa2oFINbLfS0blHQDKpED5q7FwoT
2vkeMMPv03VcqAu6xCawVPOV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmhC6PK
xYAFAwskkC+5BaLLn2uIMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB
OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj
NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZayw5LuiGrS7j9wFiaUhzWB0/nAtGvCb5oJI9rafTmftNQtqTKPnV
f1AsobbYnLQF0ShKWr95hHINygTBX1DQCSpGP3lxdBUQDJXMvpCo1uk02w9lbbq9
c+aFIOYgH/DQTOxAQlz11e5n8p0xMeiCOxztl8h12W/Wrupl1cq7onOqwof/xQ9c
fqorYokZ8JYOiFBHTHY8dm3CeIpahVEEYF0sZsBOUVygTAl84XCxZIgpuAYWbMyE
xJ5kELC4iemZjpXWTv6qaQY7NNI9PUDnQSHQAE0lK/SkplWz/myHiWcVIs0+YpWb
t4236+OK4m1HDb5qia043HWmFrNyn1Cu
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:37 2025 by rpki-client