This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: 96ZIQnU8R2o9yeluKxGizh6k3gpXXr7Dzx/x80PXaJI=
Subject key identifier: A8:08:2E:CC:50:ED:CD:C5:53:FF:10:2E:CB:9C:97:1A:E1:27:67:88
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 0739
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 0725
Signing time: Thu 04 Dec 2025 20:45:26 +0000
Manifest this update: Thu 04 Dec 2025 20:45:25 +0000
Manifest next update: Thu 11 Dec 2025 20:45:25 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: xE7YEzVlQM7bTVnY4mKWpCgkySGdaH2m16juI6HjDnk=)
2: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: Hd39KMCP5bAeu+noj7ulmTIBQfRBGl83787l/+OHLDU=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 5nVofohvG6M+3k2sujdcV8yvkToMkKYigEUYnGzho5Y=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
5: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: KCCPcPWsDKv1DRkqBbiUhd//6nA7nvgYDQUksRP6Wns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Dec 4 20:45:25 2025 GMT
Not After : Dec 11 20:45:25 2025 GMT
Subject: CN=6931f2e6-89a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:6b:59:3d:49:eb:d4:c2:ca:3a:f9:8d:d1:
f8:5a:23:26:dc:7b:35:8f:85:15:e6:85:4f:5a:87:
b9:59:a9:73:3c:9d:d7:bd:4b:f7:55:b0:3b:68:de:
cb:59:56:d3:ea:0a:ca:a2:a3:b8:84:a0:96:cc:fc:
28:78:35:58:47:ff:59:63:4a:93:b8:2e:7e:99:44:
b7:ad:47:2b:a9:0c:75:30:cc:39:30:05:22:0e:9b:
ce:d7:4e:7f:ef:62:ce:e1:63:a8:cb:a2:9b:20:67:
c9:c7:e6:7b:57:f0:9e:88:8e:f6:50:31:80:89:80:
e1:a7:8b:45:f5:6a:34:8d:6f:ca:dd:7a:a6:bb:5d:
4c:68:10:2f:a4:e9:82:84:bd:dc:9b:9d:65:b7:2b:
0a:f2:fb:fd:5b:83:fb:9e:16:d8:48:94:ba:d6:ca:
8b:a8:67:11:32:1c:4d:1b:a3:6a:5c:6c:06:5d:5c:
26:1b:0a:80:85:80:f5:ba:05:35:d3:93:62:d8:74:
2f:85:84:7d:61:d6:f8:f4:ce:77:c0:50:08:64:ca:
ba:dc:48:10:53:88:76:db:e8:83:5b:ff:ec:0a:f0:
7b:cf:f3:08:47:dc:72:5c:6f:51:c4:8c:e1:44:dd:
d1:52:e4:94:3f:9f:74:42:a1:fc:3f:df:47:0e:d6:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:2E:CC:50:ED:CD:C5:53:FF:10:2E:CB:9C:97:1A:E1:27:67:88
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:38:e6:73:7d:e7:60:0d:78:dc:b4:5e:5d:e6:61:b2:2f:a1:
76:c6:52:9b:88:2a:af:e4:41:e9:7b:ea:18:df:22:1c:df:53:
32:e3:0b:42:6d:0f:c4:e1:26:76:ad:af:85:f2:35:c6:be:05:
4f:b3:fc:69:a5:2f:c5:65:67:34:ff:0e:11:3c:35:16:d9:68:
dd:e6:de:ce:a4:79:58:21:63:fe:98:be:09:2e:cb:86:b4:0a:
cc:dc:cd:03:8a:a7:9e:57:cd:11:da:3d:83:48:78:c9:a8:ca:
07:42:1d:b2:41:9e:be:bc:99:7f:64:ba:94:71:92:a5:e3:b3:
a4:00:c9:a8:cf:f8:f8:b9:07:46:88:ee:5a:4c:06:04:07:3b:
bf:c1:96:28:6b:c8:c6:f3:8d:f0:c1:8a:59:24:c7:42:ba:9c:
d2:b5:2b:12:91:1f:69:e1:8f:aa:d7:a1:0c:1a:e9:84:c8:8f:
9d:2e:07:91:b1:27:e1:9a:c3:65:32:2b:d6:1b:a2:ab:52:69:
5a:a5:7e:6a:53:b8:cf:76:28:ad:64:1d:ff:90:b9:18:41:24:
11:41:81:58:a0:44:68:92:95:f0:3f:e6:7e:7f:97:a6:8e:2a:
84:07:15:b0:61:95:4c:b3:a9:70:03:bf:e0:68:92:a2:1a:70:
0c:ae:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:58:45 2025 by rpki-client