This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: bJNOfUy75QXEaKNAxZCk8qrUqC1C93/gUITL+VQpplw=
Subject key identifier: 48:63:91:CA:2D:58:B6:AB:BF:AB:C0:EC:A8:B1:47:89:59:80:78:0D
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 0823
Signing time: Mon 22 Dec 2025 21:38:04 +0000
Manifest this update: Mon 22 Dec 2025 21:38:03 +0000
Manifest next update: Mon 29 Dec 2025 21:38:03 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: vkKRAUaHGL7c+phW9cL3e/7cDzwr44nhqef5qSEFfJg=)
2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Dec 22 21:38:03 2025 GMT
Not After : Dec 29 21:38:03 2025 GMT
Subject: CN=6949ba3b-8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:09:58:f0:ea:62:4f:60:da:82:78:43:09:
08:a2:6e:db:c0:15:e0:eb:22:dc:0b:86:76:ee:3f:
2d:a3:c8:6e:a3:3e:f2:a4:06:89:d3:b9:fc:74:d1:
60:8b:39:85:1b:d2:1c:fd:81:45:23:3a:11:2b:7e:
29:71:f4:e2:27:e3:ff:dd:02:e8:50:2a:bf:e0:b3:
45:12:09:06:a6:ae:37:47:b2:8d:f0:5f:34:5a:ed:
ea:16:72:bf:33:a6:6a:c5:9a:dd:53:2f:2a:dd:7c:
19:e0:c3:f9:81:35:9f:56:01:81:dd:5f:0b:a7:c4:
45:7f:51:3c:e9:09:64:38:09:04:5d:2f:5a:21:a3:
72:63:2b:3c:d9:3a:04:71:b0:07:05:da:00:11:a2:
b7:44:1f:1e:4f:c3:73:c2:9f:ad:f5:e6:17:f9:12:
c2:e8:21:b4:fd:6b:93:75:a9:8b:67:e7:64:75:f1:
47:f1:28:fc:b9:e1:02:08:93:bc:df:a6:fa:1b:09:
bc:cc:6a:88:07:de:fe:7d:c4:45:95:f7:5d:e7:57:
fa:4e:4d:e7:16:3a:bf:84:ac:2a:57:78:fd:11:51:
2f:86:a3:78:91:b2:3c:03:f0:ce:41:6b:60:fb:73:
03:99:df:68:d2:19:24:98:f1:bf:6e:0f:cc:8e:79:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:91:CA:2D:58:B6:AB:BF:AB:C0:EC:A8:B1:47:89:59:80:78:0D
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:fd:16:08:91:e2:9f:2b:76:89:e9:7c:4d:c2:e0:6d:b0:
70:61:49:27:ad:e9:3b:a8:eb:a6:b8:b0:9c:69:81:04:97:70:
2e:f5:c7:29:11:e5:a7:a9:d9:6a:2c:72:48:03:7d:b5:80:c6:
6d:e6:2e:bd:5b:8a:8e:c9:99:96:48:a3:b5:c0:5b:5b:50:2c:
90:36:b5:65:a2:1f:b6:ef:ab:18:f5:7b:fb:60:53:59:87:63:
69:4d:d9:af:86:e7:fd:53:e5:4a:6e:70:af:50:88:f7:0f:5d:
53:53:ef:92:e8:70:43:6f:70:b6:ae:af:2c:3c:ae:fa:e2:13:
3c:67:d5:9f:1d:e8:85:06:4e:90:eb:ae:48:06:23:71:26:cd:
c9:ae:5b:9c:46:5a:73:d7:7c:59:0f:26:62:79:01:81:d9:16:
4c:ec:fc:89:d7:a1:81:16:f6:6b:c0:cb:8e:eb:43:b4:c6:28:
20:b8:18:1c:5a:ab:6d:82:32:d7:3c:4b:c2:80:c0:6a:2a:0a:
84:48:9e:ad:00:10:82:fe:7e:6a:f3:42:b7:6e:3a:18:f4:4d:
c8:13:35:ce:89:aa:fc:39:0e:4d:9c:de:06:05:b3:59:1c:93:
31:df:86:7f:68:99:7f:a3:1c:49:15:ba:5b:b6:83:08:83:a7:
6c:b2:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:54 2025 by rpki-client