This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier: 284ygErnui3oZ19OBTb3TEDm3QvON7NQe1Z1cc3j2tQ=
Subject key identifier: AB:FA:87:A4:13:BD:A0:AF:2A:58:B0:A9:A7:87:33:0D:09:D2:B4:CA
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial: 07B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number: 07AE
Signing time: Tue 02 Dec 2025 20:38:34 +0000
Manifest this update: Tue 02 Dec 2025 20:38:33 +0000
Manifest next update: Tue 09 Dec 2025 20:38:33 +0000
Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: 5PlrzHq4mWD36nSP5fromauJU0Ltrt/oIDgKm1ZCHAQ=)
2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: ORWgLETy9xdLV6va58PYuRXQugFIvAZqmcO/bSIQ6Ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 20:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Validity
Not Before: Dec 2 20:38:33 2025 GMT
Not After : Dec 9 20:38:33 2025 GMT
Subject: CN=692f4e4a-d449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:06:bd:ff:ec:2f:fa:3b:7f:37:17:e6:71:
a4:2a:30:34:61:53:8c:9a:77:cc:fb:db:26:29:eb:
f9:96:8d:e7:6a:13:d6:3f:af:f8:7e:c9:85:16:e5:
40:e2:46:f3:4a:f0:fe:40:d1:d0:40:fa:e0:73:1c:
f8:bc:a3:ca:30:75:ec:36:88:f9:67:27:e9:66:8b:
82:7e:a2:50:4a:ff:06:0d:ce:37:8e:d3:07:c8:92:
a2:af:3a:b2:56:cd:59:f2:be:d9:bb:70:27:6f:03:
fd:ab:57:c3:e4:e2:4a:a2:0f:60:8c:bc:19:d8:28:
b7:24:3c:ae:43:b8:6f:57:31:72:f1:48:4a:39:5c:
d6:9f:b4:fe:4b:02:52:f3:58:43:ce:10:f3:72:48:
10:9c:b7:c8:fc:76:5e:28:2d:18:0c:ca:2a:7c:9a:
14:eb:dc:db:bd:75:60:ae:c4:9b:da:8a:d1:62:c3:
c0:bb:97:d6:d9:89:31:72:9a:2e:bc:19:03:13:fb:
9c:da:d1:d0:79:66:f1:51:31:a3:7a:4d:d0:80:02:
09:f3:6f:21:ad:9c:b1:48:52:4d:3e:d4:61:f1:c8:
58:0c:c8:b1:d8:c8:60:7e:9c:ef:92:c7:0c:27:10:
6a:af:7d:9d:11:5d:c3:36:67:8f:56:8f:91:91:21:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:87:A4:13:BD:A0:AF:2A:58:B0:A9:A7:87:33:0D:09:D2:B4:CA
X509v3 Authority Key Identifier:
keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:64:09:6e:fa:44:0d:57:c5:17:b3:28:da:d5:34:07:69:
94:98:d4:25:d0:67:df:1c:51:db:ec:d4:3d:76:dd:03:a6:e7:
be:d5:af:3a:17:1f:2f:b1:33:d5:19:f9:da:59:04:28:c3:09:
df:fa:45:41:30:e0:5d:9d:1f:a4:ff:ef:bb:91:f5:eb:93:95:
dc:58:6b:df:b9:2f:6f:ed:2f:e9:48:e2:d8:eb:c1:41:bb:f4:
db:7d:f0:bc:d5:b1:8e:8c:b5:6d:71:69:71:09:99:6c:7a:50:
a6:c0:a0:c1:50:33:fb:ae:f6:20:53:2d:af:de:d9:3b:88:1a:
64:b8:4e:4d:5f:95:3f:f8:20:bc:2e:b8:c0:1a:cc:e6:e0:2e:
c6:3f:27:25:a9:cf:19:49:ee:28:06:17:c3:fb:09:93:2e:1c:
4f:11:69:71:4c:59:af:8b:6f:80:3e:69:3c:a7:38:d1:ed:8d:
12:09:b9:ad:bd:e5:32:25:c1:d0:85:0f:b5:32:98:df:00:73:
a3:85:0a:b3:e9:1e:95:48:4e:2b:b6:84:b4:97:62:c5:16:28:
27:bf:15:b4:94:64:66:50:ec:5f:f2:a2:78:ec:16:42:e8:32:
d9:01:a4:37:e9:ac:e6:96:33:21:6f:b8:35:8d:ec:61:68:74:
69:23:80:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD
RTM5N0FGQjUwHhcNMjUxMjAyMjAzODMzWhcNMjUxMjA5MjAzODMzWjAYMRYwFAYD
VQQDEw02OTJmNGU0YS1kNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpQGvf/sL/o7fzcX5nGkKjA0YVOMmnfM+9smKev5lo3nahPWP6/4fsmFFuVA
4kbzSvD+QNHQQPrgcxz4vKPKMHXsNoj5ZyfpZouCfqJQSv8GDc43jtMHyJKirzqy
Vs1Z8r7Zu3AnbwP9q1fD5OJKog9gjLwZ2Ci3JDyuQ7hvVzFy8UhKOVzWn7T+SwJS
81hDzhDzckgQnLfI/HZeKC0YDMoqfJoU69zbvXVgrsSb2orRYsPAu5fW2Ykxcpou
vBkDE/uc2tHQeWbxUTGjek3QgAIJ828hrZyxSFJNPtRh8chYDMix2MhgfpzvkscM
JxBqr32dEV3DNmePVo+RkSEnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv6h6QT
vaCvKliwqaeHMw0J0rTKMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3
RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1
UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeGWQJbvpEDVfFF7Mo2tU0B2mUmNQl0GffHFHb7NQ9dt0Dpue+1a86
Fx8vsTPVGfnaWQQowwnf+kVBMOBdnR+k/++7kfXrk5XcWGvfuS9v7S/pSOLY68FB
u/TbffC81bGOjLVtcWlxCZlselCmwKDBUDP7rvYgUy2v3tk7iBpkuE5NX5U/+CC8
LrjAGszm4C7GPyclqc8ZSe4oBhfD+wmTLhxPEWlxTFmvi2+APmk8pzjR7Y0SCbmt
veUyJcHQhQ+1MpjfAHOjhQqz6R6VSE4rtoS0l2LFFignvxW0lGRmUOxf8qJ47BZC
6DLZAaQ36azmljMhb7g1jexhaHRpI4Cl
-----END CERTIFICATE-----
Generated at Thu Dec 4 00:55:02 2025 by rpki-client