This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier: 6g2C2R5ASwKAd3ED19XPB6WWWuTXFpXMYo9qyPFjORw=
Subject key identifier: 94:43:0A:B8:41:7A:2B:17:64:8C:B9:60:EE:E9:8A:61:A7:C4:54:B1
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial: 0A47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number: 0A40
Signing time: Sat 20 Dec 2025 19:11:15 +0000
Manifest this update: Sat 20 Dec 2025 19:11:15 +0000
Manifest next update: Sat 27 Dec 2025 19:11:15 +0000
Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: E7Zuj8oTIBMLQd5KUq0ZyWD6oU8TgKS4VhguUHvtKoo=)
2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Validity
Not Before: Dec 20 19:11:15 2025 GMT
Not After : Dec 27 19:11:15 2025 GMT
Subject: CN=6946f4d3-c401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:44:05:01:11:b9:28:fe:92:96:26:3d:6e:
a5:96:1e:33:c1:ed:fe:24:a3:48:ca:88:e2:90:ec:
ab:bb:0f:f5:55:46:84:d5:3a:0b:36:e2:1a:c4:ef:
73:3b:9b:d8:10:e8:e0:37:c4:68:2f:d0:f9:33:15:
ee:4e:6d:90:87:34:c6:eb:91:01:59:0c:a1:82:ef:
18:a2:fa:6f:97:b2:e6:68:b8:7a:5a:dd:21:b7:59:
81:a7:3b:b2:b8:07:0d:36:c9:7c:8a:f1:38:4f:7d:
e7:d6:e9:57:46:e4:f2:9b:2a:53:50:f9:96:b8:f5:
67:f4:70:a5:ef:2d:e9:8f:c2:e2:1a:40:37:13:34:
0d:75:ce:44:ac:fa:4b:c6:db:76:bd:39:57:d2:a8:
6a:d3:e2:41:27:ce:02:83:22:ab:4a:b0:4e:03:84:
a0:01:c7:19:19:9a:6d:5c:e2:62:51:b0:c0:ef:55:
a7:1a:7a:e3:3b:61:e5:d5:22:2c:df:0a:c3:9d:da:
00:56:22:4f:92:66:65:f2:3c:06:86:4c:e7:ea:13:
c2:4b:89:5f:c8:4a:38:78:78:4e:7a:06:a5:32:1f:
b5:35:81:52:00:23:06:d7:58:aa:39:12:df:c0:46:
e5:a1:2f:94:f1:83:c2:79:f2:11:10:a2:a5:fa:01:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:0A:B8:41:7A:2B:17:64:8C:B9:60:EE:E9:8A:61:A7:C4:54:B1
X509v3 Authority Key Identifier:
keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:74:45:b5:ee:cb:24:78:fb:14:6e:9e:2b:bd:1a:ae:92:8d:
82:5b:43:11:1d:59:61:b7:9c:b3:2a:ce:36:12:09:a3:c4:7e:
0d:27:ac:7d:42:ab:92:5f:5d:18:56:03:c4:e3:12:f7:7f:4d:
60:b6:55:18:95:6a:6f:e3:01:0d:1e:b4:51:67:b4:aa:86:18:
10:97:0e:1d:49:96:c0:13:07:6a:c2:48:11:cd:de:c9:6c:fc:
4a:be:b7:ef:29:fb:74:1e:12:42:44:0e:13:e2:22:7c:b6:ed:
8f:00:48:b5:e5:4d:84:20:3f:d0:e3:c4:52:b5:6e:6a:63:e2:
19:b1:90:0c:3d:c1:ab:8e:6b:a5:bf:de:ca:aa:a4:56:b9:29:
0f:f6:06:1a:7f:3f:19:e0:45:b6:ea:df:68:f9:3b:2a:37:11:
80:11:9d:68:0c:ad:e5:06:f9:d6:56:d4:f1:46:9a:10:b8:b2:
a5:b4:10:74:06:29:64:6f:07:95:db:b0:4a:e9:f1:c4:dc:6b:
c7:bf:f7:5a:7b:a6:38:68:a4:12:5e:cd:c8:c2:f1:cd:f2:69:
a4:48:c3:94:40:cc:4d:5f:82:ca:3c:5d:de:4b:70:ef:a9:a5:
90:28:4a:72:51:6f:96:8c:0f:c6:91:f5:b2:88:db:91:48:e9:
20:95:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:48:34 2025 by rpki-client