This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: IRTeE6O5YpmX83bpYkD/ov+DmecQ3g/ylrWWrqnUGg0=
Subject key identifier: 66:72:91:7B:B5:90:27:BF:AC:6B:2C:C0:82:AF:30:48:97:B0:82:97
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 0623
Signing time: Mon 22 Dec 2025 21:58:04 +0000
Manifest this update: Mon 22 Dec 2025 21:58:03 +0000
Manifest next update: Mon 29 Dec 2025 21:58:03 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: cPDHxYtxq0TaXO1FrRlhvqiu/KkVdZr1g4e0D7/Qay0=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: Vhi1JgNRZObirmNIX1fnf2q21PbGnP/JOntHIC3xnJI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Dec 22 21:58:03 2025 GMT
Not After : Dec 29 21:58:03 2025 GMT
Subject: CN=6949beeb-b1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:ca:94:0e:0f:d8:86:d1:8e:3d:be:fd:3c:
de:ef:5e:02:21:cf:d5:41:a3:a6:8f:b2:74:65:b4:
30:02:f7:ea:50:77:40:35:51:f0:ba:bf:83:f7:d7:
68:26:ef:45:e4:7d:de:88:15:e3:3d:85:8c:84:b8:
6b:39:a7:73:b7:a5:20:7f:1c:b5:65:2c:45:6b:50:
ab:a9:59:da:69:94:b4:ce:f9:7d:70:2c:b2:45:6a:
59:8f:bc:21:76:11:9b:f1:3a:66:39:a1:43:00:36:
6e:a6:bd:6b:a2:82:37:71:41:67:ab:8a:f7:be:2d:
26:a0:21:c3:8e:56:12:44:97:61:be:cd:7e:79:0d:
2a:25:1b:7f:41:ff:8b:54:d4:90:22:d6:69:9c:16:
a0:fb:52:13:e3:df:62:5d:21:66:fe:30:7f:15:b5:
b7:68:1b:72:7c:e5:d6:43:a5:c4:e1:fb:05:5e:7d:
0e:69:5a:a8:af:b3:91:f5:ad:ec:de:70:99:2f:90:
71:34:25:bd:97:8a:3b:52:9b:ec:31:10:cd:18:53:
4a:94:40:7f:f0:3b:a0:7f:c5:57:ab:57:3b:80:00:
3d:20:b0:b3:86:21:b5:ad:2a:73:b0:a5:bd:f4:5e:
8a:b2:b9:29:a8:ff:7e:19:2c:d0:35:28:c7:77:a5:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:91:7B:B5:90:27:BF:AC:6B:2C:C0:82:AF:30:48:97:B0:82:97
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a2:02:f1:4c:4c:8a:1d:d0:20:c2:d6:e9:df:f1:ee:0f:4b:
93:73:ec:c0:83:48:73:e3:28:5c:a8:82:64:de:91:3a:9f:de:
e2:e7:3b:18:61:d2:4c:9f:ef:01:d5:30:c9:9f:ca:56:d2:a0:
a0:bc:23:21:f1:ad:6c:a6:a6:90:38:26:43:da:52:4b:16:57:
5b:b8:de:99:98:a3:1c:45:2d:d1:be:2b:5c:14:c1:6c:8f:2b:
23:e3:20:f5:e7:6f:76:96:63:d7:59:d6:36:6d:25:eb:e2:4e:
d5:e1:64:70:59:b6:3a:76:b5:5f:5f:f0:fa:cb:be:a0:ff:1c:
bf:14:a5:c1:ed:a2:1e:dd:79:35:5e:f8:89:d5:5b:82:ab:cc:
a4:a0:ba:e5:da:40:06:6b:44:c9:66:d3:8d:ec:c1:b8:8d:8a:
96:a1:25:db:b4:35:59:e3:05:7c:a3:8d:50:b3:24:22:c1:6b:
74:04:ca:d0:cc:b4:af:f8:b6:8a:77:78:98:33:41:05:eb:2d:
c9:a3:1e:c2:63:d4:6f:4b:a8:9f:0d:07:ea:37:37:2d:9e:ed:
1a:46:05:a4:c4:20:8f:b1:b7:75:21:6e:86:6e:62:6e:56:6a:
33:31:68:ef:c1:50:33:a5:84:b9:ac:4d:4a:1a:7a:32:66:72:
e8:af:25:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5
MDk1QzVGRkIwHhcNMjUxMjIyMjE1ODAzWhcNMjUxMjI5MjE1ODAzWjAYMRYwFAYD
VQQDDA02OTQ5YmVlYi1iMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6bKlA4P2IbRjj2+/Tze714CIc/VQaOmj7J0ZbQwAvfqUHdANVHwur+D99do
Ju9F5H3eiBXjPYWMhLhrOadzt6Ugfxy1ZSxFa1CrqVnaaZS0zvl9cCyyRWpZj7wh
dhGb8TpmOaFDADZupr1rooI3cUFnq4r3vi0moCHDjlYSRJdhvs1+eQ0qJRt/Qf+L
VNSQItZpnBag+1IT499iXSFm/jB/FbW3aBtyfOXWQ6XE4fsFXn0OaVqor7OR9a3s
3nCZL5BxNCW9l4o7UpvsMRDNGFNKlEB/8Dugf8VXq1c7gAA9ILCzhiG1rSpzsKW9
9F6KsrkpqP9+GSzQNSjHd6W49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZykXu1
kCe/rGsswIKvMEiXsIKXMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1
NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I
Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFogLxTEyKHdAgwtbp3/HuD0uTc+zAg0hz4yhcqIJk3pE6n97i5zsY
YdJMn+8B1TDJn8pW0qCgvCMh8a1spqaQOCZD2lJLFldbuN6ZmKMcRS3RvitcFMFs
jysj4yD15292lmPXWdY2bSXr4k7V4WRwWbY6drVfX/D6y76g/xy/FKXB7aIe3Xk1
XviJ1VuCq8ykoLrl2kAGa0TJZtON7MG4jYqWoSXbtDVZ4wV8o41QsyQiwWt0BMrQ
zLSv+LaKd3iYM0EF6y3Jox7CY9RvS6ifDQfqNzctnu0aRgWkxCCPsbd1IW6GbmJu
VmozMWjvwVAzpYS5rE1KGnoyZnLoryXm
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:48:15 2025 by rpki-client