This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
File: -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json)
Hash identifier: D7em5aeLIzv+UFM7AvrIyObsc6OgJuPsAuyb/X+Op9o=
Subject key identifier: 55:4D:9D:F2:A4:DE:C7:D5:8B:CB:39:74:19:59:A2:D3:2B:0E:9D:03
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Certificate issuer: /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial: 0689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
Manifest number: 0681
Signing time: Mon 22 Dec 2025 21:43:44 +0000
Manifest this update: Mon 22 Dec 2025 21:43:44 +0000
Manifest next update: Mon 29 Dec 2025 21:43:44 +0000
Files and hashes: 1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: uLc4dNy6SsFKfV3+zXskzPhcifyPG9EoP6AisiMC8bM=)
2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: aPUJnag1shqRG8J7/SwQ5Siu54HJfQtvC5SHdSgBnZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Validity
Not Before: Dec 22 21:43:44 2025 GMT
Not After : Dec 29 21:43:44 2025 GMT
Subject: CN=6949bb90-8cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:5d:98:b2:a8:cc:80:74:5c:f6:0c:b2:bc:
69:a2:4d:75:d7:07:43:0b:14:6d:d6:e3:bb:7f:b1:
40:94:fb:58:2a:18:55:53:aa:2a:d6:0c:f9:38:16:
67:87:b0:5a:2f:b3:4e:9b:fd:a7:25:86:9d:ee:21:
5a:e0:c6:31:cf:f5:c6:f8:c5:9f:a2:70:dc:31:1e:
44:11:14:59:22:4f:bd:3b:8f:30:ef:ef:9d:ad:79:
34:85:9c:4a:e5:d4:a3:1a:a3:21:71:d8:ad:b7:af:
84:c7:0a:39:f7:b3:db:ca:dd:04:66:c5:25:32:ff:
0e:d6:7c:9f:d6:7e:8f:af:a8:cb:e4:92:33:a4:18:
db:80:f1:6c:d1:40:69:d3:61:5e:47:d0:dd:bb:99:
5d:33:f2:fe:f6:fb:e0:8b:98:90:f5:0d:2c:d7:5c:
cf:b8:ed:ac:d0:ef:72:46:e9:58:5a:41:88:29:96:
04:12:14:28:a8:c0:00:b5:79:f6:99:34:03:1e:46:
df:65:ef:49:cb:55:80:8b:9e:92:c8:bc:dc:47:43:
46:63:2d:a2:5a:ec:aa:47:9e:1f:d1:9f:e9:ed:cf:
d1:95:95:b0:4a:3c:4b:1e:76:29:0d:9f:44:a6:b7:
c4:93:cf:7e:0e:d6:9a:fb:1b:3b:a6:0e:b3:31:93:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:9D:F2:A4:DE:C7:D5:8B:CB:39:74:19:59:A2:D3:2B:0E:9D:03
X509v3 Authority Key Identifier:
keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:81:26:b2:2d:47:72:5f:75:09:6b:fc:cc:4c:dc:33:28:2c:
0b:f6:cb:f9:8e:e4:41:30:fe:fb:f0:49:f2:3a:1c:d8:65:76:
d3:a2:ca:e9:df:1d:f6:53:c1:99:a1:f5:43:75:8b:0d:e2:bc:
f4:6b:fa:d2:9c:1a:4e:f6:5b:97:02:7b:0e:8a:21:60:d1:e6:
66:58:6d:f4:09:4a:12:42:79:70:2f:7e:6e:ba:4b:94:af:54:
26:6e:0e:d2:0c:03:e8:37:6c:40:d8:8a:ed:03:ab:53:7d:ee:
c0:b8:bf:56:0f:ec:af:0b:fa:70:f4:9b:eb:34:62:47:3b:c6:
5b:39:30:d9:25:18:05:0c:92:2c:00:15:9c:d7:93:9b:a7:62:
7b:8e:f2:e8:8c:14:f0:4b:72:30:70:f8:8b:4f:fe:44:4b:5d:
6b:1f:73:34:26:11:21:df:ac:11:11:ff:43:91:08:aa:96:89:
68:dd:f9:48:32:c7:37:4f:e0:51:c6:ca:9f:69:42:d7:9d:de:
23:6f:b4:b4:4e:5f:93:ca:e3:23:b8:f0:7c:80:1b:a1:cd:1b:
34:a8:dd:8d:a5:e9:79:a3:75:b1:75:d5:cc:f9:e5:b9:c6:2c:
5d:84:f0:8c:35:62:f0:52:4d:26:44:1f:75:d3:69:7c:79:fd:
32:66:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:16 2025 by rpki-client