This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json)
Hash identifier: iycxb1wyoxj/j8sIwpgRdNlcn6DJe/j8peshQQi3bqU=
Subject key identifier: 47:9B:BA:28:7D:F0:AB:49:31:4B:B4:4C:F7:EE:11:D2:F2:B3:DF:C5
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial: 070D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
Manifest number: 06FE
Signing time: Sat 20 Dec 2025 21:17:36 +0000
Manifest this update: Sat 20 Dec 2025 21:17:36 +0000
Manifest next update: Sat 27 Dec 2025 21:17:36 +0000
Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: nl4gYusVAE4qv9OFcULyqdONW+xzwCEASFdnM/6DHZo=)
2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY=)
3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Validity
Not Before: Dec 20 21:17:36 2025 GMT
Not After : Dec 27 21:17:36 2025 GMT
Subject: CN=69471270-a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:7e:3f:d5:5d:10:84:f5:64:6c:88:44:51:
e7:f0:25:7f:6f:f0:78:3f:1a:4a:4d:8b:07:cf:5c:
f8:d2:31:f5:2b:ff:54:93:31:5b:80:db:08:d5:1f:
7e:c1:77:4b:09:9e:ec:c3:75:f2:5c:47:a0:81:42:
68:b3:94:e0:c7:66:23:fa:8c:cf:cc:0a:27:c6:7a:
15:8e:1c:a4:c0:88:8e:50:8f:17:7c:4d:38:e5:ef:
da:78:03:a8:04:56:2f:e7:aa:34:14:4c:2d:55:5f:
4e:d6:80:06:e0:23:50:b5:91:48:90:78:d2:47:db:
4c:6e:27:92:2d:28:ab:05:55:7c:3f:75:01:f8:36:
2b:ee:6f:1c:45:c8:be:b5:15:29:73:4c:26:83:76:
86:bc:e8:7d:2a:15:d1:89:78:74:1b:76:95:14:eb:
2b:63:19:df:58:61:ad:88:3d:5e:b8:21:36:4c:1b:
42:bf:dc:30:9c:a7:2d:47:91:87:38:64:54:d7:96:
f1:c3:b2:42:d7:69:4d:be:a0:44:c1:e9:1d:e1:e7:
57:81:3c:47:f5:88:b3:0d:b0:db:0f:12:42:a0:d1:
13:25:38:43:3b:9c:21:2c:57:85:b4:6c:d1:ce:7b:
c6:71:75:a1:ca:4c:a9:27:c9:48:5f:2c:3a:e5:a7:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:BA:28:7D:F0:AB:49:31:4B:B4:4C:F7:EE:11:D2:F2:B3:DF:C5
X509v3 Authority Key Identifier:
keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:6b:62:ba:23:fb:ce:de:12:63:65:4b:96:2e:05:8e:1f:
0f:26:e6:fe:39:fd:c7:b3:d7:82:bd:62:3f:bd:ad:5b:62:84:
48:70:c7:88:4d:14:ab:fc:a1:45:35:a7:df:cc:c7:bc:e4:57:
6a:ff:b3:c6:a1:e4:4a:05:a1:2a:02:52:8d:f8:33:b2:e4:59:
2c:9e:cb:c3:e7:fd:90:f5:43:65:ab:a9:e5:e4:aa:cb:2f:61:
58:8b:09:57:67:02:10:98:94:96:6e:9f:b1:a6:46:ed:71:4b:
2d:f0:30:e6:38:66:78:06:9a:83:54:5a:60:c2:e9:28:7c:26:
c7:fe:1f:37:ab:4e:50:43:1b:16:8e:50:dc:bd:6c:6b:b1:30:
41:fc:67:a0:2a:2f:1f:df:42:2d:c2:cd:73:51:7f:e3:a9:f4:
24:8d:da:78:26:eb:2c:34:93:28:66:5b:b2:de:7a:65:2a:69:
24:d1:9f:4b:0b:e2:20:29:1e:ed:c0:14:50:c5:c0:c5:3d:88:
8e:ca:ad:b9:ea:9d:95:15:b0:35:33:5e:ea:5d:d2:f6:d6:a8:
86:d4:34:71:40:52:7b:78:5e:f5:73:79:43:8d:a8:04:33:e3:
17:2a:49:1e:40:2b:86:c0:a8:82:f4:fa:62:33:a8:d9:e2:be:
b3:f0:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:09:40 2025 by rpki-client