This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier: FD69m6jUDmF1lN0g+GIbWYD37BVhcZ7CXR9/hLtqWoA=
Subject key identifier: CB:B1:5D:63:39:FE:37:03:FA:15:2A:1A:52:6D:41:80:46:AE:A4:95
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number: 0101
Signing time: Wed 17 Dec 2025 04:38:38 +0000
Manifest this update: Wed 17 Dec 2025 04:38:38 +0000
Manifest next update: Wed 24 Dec 2025 04:38:38 +0000
Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 2r1aYHd62mO2kf5+AFe0VwkwibfcrSFwKAGZKd7wNsc=)
2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 04:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Validity
Not Before: Dec 17 04:38:38 2025 GMT
Not After : Dec 24 04:38:38 2025 GMT
Subject: CN=694233ce-86aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:25:ae:28:35:0e:6f:27:a6:fb:4f:02:54:
e2:0e:96:de:8c:9b:8f:c7:d8:46:d4:8b:be:01:06:
00:c3:ff:db:fc:33:eb:28:34:6d:3d:ef:65:11:13:
43:3b:4d:2f:4a:de:5b:19:8e:e4:11:eb:28:c2:6f:
ed:3c:53:e3:83:a8:a1:9e:81:9e:61:3c:8c:58:91:
09:bd:21:73:0c:c3:e2:57:20:ba:07:9b:b0:2f:7c:
84:fe:c1:2a:f0:4d:8c:21:9a:40:1e:43:e4:8b:0d:
0f:4a:84:57:92:74:f8:cd:af:2c:33:92:24:15:f9:
25:b1:c8:01:96:f7:36:8c:23:05:1f:11:bf:f2:bb:
5f:92:f4:47:d0:61:7a:f5:79:a5:c4:08:8f:f9:21:
fd:e2:ed:72:0c:ea:01:6b:c3:6f:7f:60:a9:ba:59:
f7:34:2e:d1:7c:04:4a:7a:2e:55:54:52:b8:5a:78:
4d:0d:50:1f:4d:80:cc:0b:6e:b8:a1:ec:67:fd:5b:
eb:3a:51:46:e9:57:e6:b6:31:5d:bb:6e:b1:ba:cd:
24:77:7f:65:8a:80:af:8e:34:93:89:a7:7d:44:30:
a4:98:77:ce:64:76:fd:e5:af:3d:5a:76:b6:b2:d4:
7f:98:9b:aa:c6:a9:9a:11:6c:a7:d9:41:38:7a:8c:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:5D:63:39:FE:37:03:FA:15:2A:1A:52:6D:41:80:46:AE:A4:95
X509v3 Authority Key Identifier:
keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:41:ce:d3:3a:e4:41:3d:74:c6:48:04:59:7e:59:2f:81:d2:
fc:32:f6:b8:7f:eb:1f:ce:d5:f3:09:f4:26:37:2b:1a:c3:93:
45:e7:1f:22:46:72:a0:2b:cd:bd:64:d6:fb:ef:3e:e3:39:4e:
45:d7:91:d8:de:db:0b:06:35:a8:63:bf:4b:f1:f9:7a:6c:75:
b0:5d:7d:07:bb:86:b0:69:22:c2:1d:a2:c8:6d:30:55:e3:c3:
e6:c7:6a:d4:87:82:06:25:6b:21:5a:17:13:39:1a:a2:4a:f2:
54:ba:56:35:33:ee:9d:e6:0d:8f:dd:2a:5e:87:3c:20:b7:65:
a1:dd:a6:7c:03:2e:1d:83:aa:73:0e:a4:10:90:ee:80:98:aa:
51:62:f0:0d:3c:4f:ca:de:e8:f9:4b:e8:59:17:16:f2:45:9b:
cc:e7:20:e2:73:68:bf:16:26:89:fd:cc:b1:bf:13:d2:c7:7d:
89:e1:da:eb:90:01:e9:98:e0:0c:57:f6:9a:f7:7a:c5:ca:68:
63:c0:4d:bc:3d:1b:55:aa:b9:60:9b:14:46:b5:0c:2b:e1:73:
80:fd:ac:c8:60:6c:52:45:48:d6:e9:90:18:1a:f8:62:63:b9:
cf:9e:c9:16:47:ad:53:d4:4a:77:2b:14:7f:34:3a:71:83:11:
ca:4b:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:53:18 2025 by rpki-client