This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: Ejsq8Gn6oSvBOMrno5K3Wwg05VRqXXgajYEjsOCXTH4=
Subject key identifier: D1:1D:08:1D:79:34:88:E3:DF:0D:50:1E:77:06:07:1B:18:26:15:76
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 0376
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 036F
Signing time: Mon 08 Dec 2025 23:17:55 +0000
Manifest this update: Mon 08 Dec 2025 23:17:55 +0000
Manifest next update: Mon 15 Dec 2025 23:17:55 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: KzLcC0ZPGPHC4ENbvW/gOqLoyb8hXwFARDAfJCNOl8A=)
2: CBA514345AD611F0B344B779C4F9AE02.roa (hash: ZoSQYr35p9lvePv6z4h+/wRPh9dqRmUkfHvsxsAGrCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 23:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Dec 8 23:17:55 2025 GMT
Not After : Dec 15 23:17:55 2025 GMT
Subject: CN=69375ca3-d4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:08:01:2b:dd:2b:52:a9:2b:c9:e3:51:23:
94:8c:ad:1b:4e:6a:a7:53:dc:92:e6:20:ad:ed:4d:
d8:b6:b8:b2:40:35:d2:5a:12:21:f9:f4:c5:8d:ed:
3d:00:72:41:d5:aa:59:3f:43:b0:24:b4:3c:92:96:
a7:bd:5e:50:c2:8d:d3:0a:4a:51:89:3e:ce:1d:22:
f9:ba:2b:43:e9:1e:74:b9:44:b5:c2:8d:a3:be:71:
7a:e6:b0:a4:a5:67:49:66:a2:ac:f4:ba:6e:c9:fe:
93:d4:55:41:13:25:42:08:e6:7b:60:11:b5:24:11:
ae:65:89:2f:63:9e:7d:40:68:ed:0f:d7:6d:e6:f4:
31:a4:54:00:03:1e:1c:90:04:0d:db:81:58:34:4b:
64:29:e3:fe:71:0b:1e:75:6f:7d:bf:ba:6b:8c:d0:
95:f0:a2:b7:67:1f:cc:5f:0a:7d:6d:74:39:cd:2c:
73:11:17:a2:ae:b4:98:92:55:b2:cf:2d:ac:93:c4:
36:5f:b4:a7:cb:4d:fc:69:9a:29:5a:c8:c0:37:14:
ce:24:3b:36:d1:09:5f:dc:10:c8:22:56:33:55:7a:
8f:ea:ee:3b:3a:0a:80:17:ab:92:f9:f9:79:d5:60:
8f:ea:a3:f4:0c:95:ca:34:df:a6:9e:db:8e:54:89:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:08:1D:79:34:88:E3:DF:0D:50:1E:77:06:07:1B:18:26:15:76
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:fc:76:1a:a7:b0:8e:05:90:83:60:0c:36:03:30:83:bc:
e1:27:99:20:59:b4:d8:44:2e:4b:34:29:78:4f:3c:79:42:41:
5b:dc:0a:ef:63:5b:dd:2c:ac:56:a1:3b:81:a7:b2:75:72:29:
38:82:fd:fa:42:6f:c7:78:b5:87:51:b7:e5:13:9d:04:27:3b:
d1:70:7d:5b:c7:e9:6f:f8:d4:e2:28:ea:25:22:24:01:3a:7e:
b6:35:ce:b4:0b:cc:aa:b0:55:33:7e:0c:b1:aa:5b:2d:e9:9a:
26:f2:e4:ea:cd:d9:08:89:f7:2d:df:e0:59:f5:03:42:60:19:
8f:69:da:f4:59:bf:c5:78:71:09:41:ac:23:65:55:88:e9:af:
a8:19:c1:f5:10:7c:28:79:ba:44:0a:93:09:8d:7c:b5:34:18:
f4:bb:7c:5a:d8:7b:87:ba:a6:55:a9:cb:e1:79:b8:21:10:bf:
dd:c8:8e:d4:e2:d3:21:c0:f5:d6:c5:41:7c:e7:e7:c1:4a:8b:
f8:0e:db:85:a2:7c:85:23:c1:a8:20:7d:64:a1:75:30:bc:c4:
16:d7:dc:48:8c:af:08:8f:8f:ba:b1:5b:15:10:2f:d2:63:7d:
d7:18:58:e8:35:9d:75:b1:2b:36:37:2d:2e:44:8a:fd:08:d9:
11:7c:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:56:36 2025 by rpki-client