This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: WA0WLwsdph1mVwq8a9i4ZZRcWDABSJ8lPFenqmKfYU4=
Subject key identifier: C9:5D:6B:19:E5:C0:29:C2:64:F3:18:3B:D6:68:23:8E:65:7B:31:45
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 0172
Signing time: Sun 07 Dec 2025 02:14:23 +0000
Manifest this update: Sun 07 Dec 2025 02:14:22 +0000
Manifest next update: Sun 14 Dec 2025 02:14:22 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: ncx8fbvybwFzFQHBLoAIrQWTrkUjBYq+yPt+aEErkHk=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Dec 7 02:14:22 2025 GMT
Not After : Dec 14 02:14:22 2025 GMT
Subject: CN=6934e2ff-657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:6f:38:a7:d1:fc:e9:de:29:c5:d6:fc:3b:
c1:3b:be:4d:05:b1:ed:df:89:8e:e6:16:51:4f:02:
da:90:5e:19:2b:48:8e:8e:81:69:7c:7a:6b:82:d8:
c6:bf:28:76:2a:47:0f:4a:cc:a5:15:d2:88:09:d4:
55:d1:21:7c:66:ca:26:a3:36:c4:68:0f:ed:a3:1b:
09:c6:72:5f:62:ac:7f:92:73:3e:4a:b1:c5:b3:e8:
8d:50:56:15:6e:69:8c:a0:35:46:21:11:00:89:64:
85:9b:09:4f:db:e0:46:11:ea:f7:d5:ca:ad:e1:3e:
7e:89:f0:28:1b:72:e8:d3:5e:35:b6:e5:99:48:30:
43:11:8f:10:e6:14:cf:e1:bc:a6:5f:d2:cb:63:a2:
4d:1a:85:4e:d2:77:7a:d4:fe:5f:d5:e7:28:c5:21:
20:fb:f1:8d:14:71:7a:b6:11:66:00:62:06:06:6f:
23:9e:0b:fd:f5:6f:e3:ca:0c:bc:08:85:35:fc:66:
fe:cc:f4:2a:16:85:1b:7f:92:80:53:d4:b6:de:23:
94:d3:5d:b3:a8:a2:9c:2d:cf:de:f8:65:66:19:81:
ae:54:1e:de:75:ae:25:70:76:43:d0:bf:1f:ad:2e:
7c:0d:9e:61:39:ab:07:43:ac:60:4c:5c:4f:2a:13:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:6B:19:E5:C0:29:C2:64:F3:18:3B:D6:68:23:8E:65:7B:31:45
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:a0:b8:e9:6b:e4:7e:1c:e0:f0:f1:a7:da:b3:c5:da:da:
b4:3f:24:02:46:b9:dc:94:af:cb:34:74:fc:c0:a8:ff:44:28:
3b:17:62:96:27:b5:0e:4c:57:4d:5f:9d:d6:9d:24:f7:a5:62:
7a:0f:01:56:42:cc:72:58:a4:61:f9:f4:18:61:56:1c:8d:74:
a4:e9:0c:4b:10:18:b5:03:34:ed:37:17:02:2c:1e:e5:8f:4b:
80:03:6b:fb:cc:59:b4:c3:49:b9:f2:12:11:9c:cf:40:05:c7:
e2:2e:2f:b1:e2:66:8e:00:ef:3a:4d:ba:d9:63:5b:0a:bf:bc:
6c:98:2b:33:cd:c7:3b:3b:cb:4d:35:98:26:e6:f8:fa:76:bc:
71:bd:3a:90:36:34:3b:30:6a:3e:6d:77:91:2c:7c:5a:73:c7:
6a:bd:77:2a:ec:b2:ff:96:9a:f5:7b:6b:b4:f7:93:cb:21:30:
2a:ca:3a:42:ce:d1:52:c9:c0:ef:87:fc:25:7c:b5:aa:9b:cd:
84:34:9f:82:2b:c3:b6:64:d7:d4:09:b6:14:be:cf:10:46:12:
60:bc:df:f5:4d:5a:a8:63:81:aa:39:f1:d9:88:62:40:1b:9f:
ce:47:de:7d:fb:22:bc:c1:9e:9a:79:4e:3b:f2:26:1a:85:1b:
14:56:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:00 2025 by rpki-client