This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier: SrkE7H+1KJ4tsktDv3A/ZpP/OkeJynxFDXtaYWDVmaI=
Subject key identifier: FA:B3:BF:E2:19:92:46:65:03:08:9D:9F:BB:1D:BE:06:B4:C7:C6:36
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number: 0238
Signing time: Tue 23 Dec 2025 00:58:12 +0000
Manifest this update: Tue 23 Dec 2025 00:58:12 +0000
Manifest next update: Tue 30 Dec 2025 00:58:12 +0000
Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: TDf3vyC8GCeFKthTGFuPAkhi05lRNTd6kt/EUtst/6M=)
2: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=)
3: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Validity
Not Before: Dec 23 00:58:12 2025 GMT
Not After : Dec 30 00:58:12 2025 GMT
Subject: CN=6949e924-1991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:5b:c5:6d:4f:e7:d5:d0:9c:95:9e:91:3b:
94:4a:f1:75:25:27:8e:71:d6:ac:9f:7b:db:8b:f3:
1a:8a:61:2c:08:ab:26:19:e0:2c:6d:07:80:a8:41:
19:ef:10:be:0e:a6:f7:cf:03:8a:0b:0c:a4:7d:68:
73:45:7b:bf:35:c0:ec:79:53:55:d7:12:66:46:6f:
db:d8:70:5e:78:2b:b5:8b:48:5c:5b:d4:54:27:b8:
3b:41:2e:2b:27:ac:e9:2a:0b:c8:21:a1:64:45:5a:
44:1a:f7:79:1b:08:ee:0e:34:af:b6:dc:e8:2d:11:
c7:49:3a:4e:12:17:84:34:27:7e:5f:86:0d:55:f0:
11:ca:78:89:b8:11:2d:30:f5:cd:c9:73:69:f7:94:
d1:76:01:8b:6c:17:7b:bf:a7:e6:40:67:5f:b6:d7:
c6:28:e8:0a:b2:ec:a7:32:82:9c:b9:8e:fa:51:ca:
36:d6:9b:ed:c1:15:8a:b3:c6:b7:b9:fa:27:4b:18:
38:ed:e3:45:7c:1e:0c:43:a3:35:db:fc:a7:c4:31:
d4:0a:77:f5:bf:66:63:6a:7b:a3:05:5b:14:e5:10:
95:ab:2a:50:7d:47:92:a0:37:af:dd:7e:d3:d3:4b:
08:51:36:64:4b:5d:b6:4f:2f:0b:c1:c5:c2:f4:a8:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:BF:E2:19:92:46:65:03:08:9D:9F:BB:1D:BE:06:B4:C7:C6:36
X509v3 Authority Key Identifier:
keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:90:17:5f:2f:0d:71:87:a3:b5:8b:c6:be:89:8c:bc:3f:c4:
5f:4b:78:cc:65:f9:eb:42:1e:fd:07:55:7b:f2:93:ac:80:6a:
43:92:0d:bf:7a:3d:c3:cf:5b:c0:80:3e:0c:45:39:ed:43:dc:
0f:56:76:bd:67:85:fb:0b:91:61:30:22:5b:85:59:f3:ed:bd:
32:42:2a:ae:99:62:bf:c7:b8:dc:81:1e:54:19:62:94:24:1b:
60:de:d8:08:48:bd:7e:b8:b0:da:b4:7d:9a:d1:e1:e0:fb:4c:
9c:61:7c:27:33:d7:bd:74:e6:6b:eb:b6:0c:d2:45:cc:06:ff:
a3:3d:b2:b3:79:2d:c8:68:18:be:70:af:72:42:c7:be:a2:79:
c8:60:d4:17:c0:a5:b1:28:d5:99:83:66:66:0b:3c:62:33:5a:
b7:70:f5:06:8e:b0:93:1e:36:92:67:01:bc:89:01:a0:38:c1:
59:0f:ca:af:c1:a2:e8:ea:9d:ef:ac:c2:f1:3a:26:37:d2:e1:
1c:34:d8:8e:07:6c:4b:32:8f:d4:b3:c4:ab:cd:c7:87:d9:33:
ac:ae:9a:f3:cd:30:d2:81:b7:2d:dc:ef:09:bd:1c:ab:22:b9:
c9:0b:24:65:27:45:11:76:52:51:83:ff:a9:62:f1:9f:82:85:
e8:79:80:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1
OUE3QzU3NUEwHhcNMjUxMjIzMDA1ODEyWhcNMjUxMjMwMDA1ODEyWjAYMRYwFAYD
VQQDDA02OTQ5ZTkyNC0xOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbxbxW1P59XQnJWekTuUSvF1JSeOcdasn3vbi/MaimEsCKsmGeAsbQeAqEEZ
7xC+Dqb3zwOKCwykfWhzRXu/NcDseVNV1xJmRm/b2HBeeCu1i0hcW9RUJ7g7QS4r
J6zpKgvIIaFkRVpEGvd5GwjuDjSvttzoLRHHSTpOEheENCd+X4YNVfARyniJuBEt
MPXNyXNp95TRdgGLbBd7v6fmQGdfttfGKOgKsuynMoKcuY76Uco21pvtwRWKs8a3
ufonSxg47eNFfB4MQ6M12/ynxDHUCnf1v2ZjanujBVsU5RCVqypQfUeSoDev3X7T
00sIUTZkS122Ty8LwcXC9KieGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqzv+IZ
kkZlAwidn7sdvga0x8Y2MB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4
NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR
OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBckBdfLw1xh6O1i8a+iYy8P8RfS3jMZfnrQh79B1V78pOsgGpDkg2/
ej3Dz1vAgD4MRTntQ9wPVna9Z4X7C5FhMCJbhVnz7b0yQiqumWK/x7jcgR5UGWKU
JBtg3tgISL1+uLDatH2a0eHg+0ycYXwnM9e9dOZr67YM0kXMBv+jPbKzeS3IaBi+
cK9yQse+onnIYNQXwKWxKNWZg2ZmCzxiM1q3cPUGjrCTHjaSZwG8iQGgOMFZD8qv
waLo6p3vrMLxOiY30uEcNNiOB2xLMo/Us8SrzceH2TOsrprzzTDSgbct3O8JvRyr
IrnJCyRlJ0URdlJRg/+pYvGfgoXoeYCz
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:41:32 2025 by rpki-client