This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: BJ0FtyVbSNPToSmvim6+ghgarzR9m41zAb8V52QZDsw=
Subject key identifier: 34:DF:CF:93:5A:8A:18:B5:45:0D:BA:D8:8C:D1:65:10:E5:94:4E:61
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 01B5
Signing time: Tue 09 Dec 2025 01:26:55 +0000
Manifest this update: Tue 09 Dec 2025 01:26:55 +0000
Manifest next update: Tue 16 Dec 2025 01:26:55 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: JSSGtqa4qrSk4RyxpGTEPp5qmR3Yccbl29w/tRTFbDA=)
2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: l+Q4St8uGoebFhbj3cnIjNMVXPuxOtW1fo31woffMhU=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: r6PCoelIVct+lAj2WsrBX0BoFYo/9ibJamB/UU4N0xE=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: Iz380y9VTkSUeTgeze9iiFXSZYgaWspRNj6C26VUn2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Dec 9 01:26:55 2025 GMT
Not After : Dec 16 01:26:55 2025 GMT
Subject: CN=69377adf-9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:fc:be:04:9d:15:bd:b8:c4:5a:3c:af:38:
be:eb:62:5e:79:b4:0e:e6:cc:36:fa:6b:df:c7:f4:
fd:5e:06:1b:d8:2e:4e:cd:23:0f:27:d7:b1:70:75:
d5:d7:13:37:57:7e:64:ec:84:41:73:c4:6d:7f:5e:
9d:b5:3a:34:f0:47:46:99:6e:60:84:55:7b:d7:15:
a8:b2:b4:72:bf:1b:b8:f7:15:8b:23:99:4c:73:c7:
63:de:e6:c7:50:30:00:3a:60:7c:4a:93:8c:ad:d8:
13:78:33:51:65:33:fa:79:06:51:94:74:56:4f:5f:
df:ca:e6:44:b6:68:e5:42:90:b9:d5:62:f9:ab:ca:
a6:0d:c4:bd:42:98:62:9c:53:e0:bd:65:ef:13:fd:
f7:8b:55:6c:46:32:46:6c:4e:bf:c3:4e:50:c5:89:
fb:a2:88:2b:ff:e4:93:be:7c:0b:2a:fd:c9:e5:a5:
6f:3b:0c:65:42:31:93:a2:c8:a5:82:cd:02:31:e1:
4f:44:af:42:37:a2:0f:9b:a0:a9:ef:7b:0a:23:b8:
d2:e5:11:1a:fb:00:ea:9b:47:a2:be:6f:8f:94:7e:
3e:25:22:1f:55:47:39:ca:4c:de:88:63:3e:8e:4d:
0d:95:34:be:31:91:59:f7:1f:c2:f8:85:29:db:79:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:CF:93:5A:8A:18:B5:45:0D:BA:D8:8C:D1:65:10:E5:94:4E:61
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:60:80:da:42:16:76:d0:ee:f8:ee:15:24:4c:80:c7:5c:
eb:f4:1b:b7:5e:b9:43:1c:5f:91:b9:10:49:c2:14:ec:d6:2c:
63:52:8b:fb:34:5d:3c:5b:00:24:cd:f1:17:1e:13:e8:a8:3a:
11:a6:c6:9a:b9:83:ab:9a:e1:79:db:ec:ab:f9:5d:fc:93:23:
52:73:ae:b4:72:8b:1f:67:5e:81:f9:c7:87:cb:07:32:7d:d1:
3f:44:8a:ed:38:6a:85:61:0e:6b:20:8d:8e:ec:d7:53:82:8b:
cb:a1:20:d9:c1:8a:ee:9b:ef:81:7d:6e:b1:bc:0f:1f:06:f4:
5b:a0:a8:b8:0b:15:fd:25:6a:b6:0c:8b:df:35:2e:96:64:ff:
fc:c5:a3:a4:b3:da:f6:72:c6:a0:f9:fb:ae:86:f3:5c:0d:f9:
bf:ac:75:6a:0a:06:d7:9a:7e:8e:7c:0c:dd:98:83:3d:c0:fb:
c0:1a:90:23:ab:50:ea:ff:b7:3f:26:ae:f8:06:df:d4:6f:97:
46:84:a4:be:78:f3:a9:32:da:f6:1d:a8:61:cf:6e:5e:e3:b2:
26:cb:3a:c8:2e:36:94:34:34:63:ac:ed:7f:11:80:ee:42:e3:
d3:4b:29:c4:18:91:2e:75:5a:39:78:bd:6f:db:bd:db:de:b8:
17:23:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:26:00 2025 by rpki-client