This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json)
Hash identifier: AEuJACHlbaDU5oAYjpz/18xqAoMt5Pix/vsr0HBGw4w=
Subject key identifier: 48:8A:3A:62:00:8D:BA:85:94:CC:21:D9:F9:13:54:AD:69:A6:50:87
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
Manifest number: 06FB
Signing time: Sun 14 Dec 2025 21:19:44 +0000
Manifest this update: Sun 14 Dec 2025 21:19:44 +0000
Manifest next update: Sun 21 Dec 2025 21:19:44 +0000
Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: Vir9RbxgblY35yBHGDh2bIou+ld3AQ9dc7Luj7556I4=)
2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY=)
3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 21:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Validity
Not Before: Dec 14 21:19:44 2025 GMT
Not After : Dec 21 21:19:44 2025 GMT
Subject: CN=693f29f0-b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:7b:92:88:a5:8b:86:95:6d:02:2b:0a:c4:
ca:40:8f:03:35:fa:2a:03:ca:68:e3:b4:7f:57:9b:
73:96:2c:64:47:90:f3:6d:19:03:48:5b:3f:9a:ae:
e7:c8:7e:ea:d3:bf:7f:fc:b4:44:8d:92:7a:fd:f7:
b4:1d:af:fe:b0:6a:60:c4:bd:aa:e7:76:9f:9d:a3:
54:8a:26:1c:93:b1:bd:be:4e:2f:d8:df:a6:f3:62:
7a:f3:dd:3d:ca:c4:2c:2e:54:4f:2a:40:c1:a6:00:
a5:49:fc:a4:04:85:12:32:7a:eb:53:a3:72:18:ec:
3d:65:2f:70:24:28:77:46:74:37:9c:cd:a2:02:05:
7a:09:fc:12:2a:b1:97:87:40:ed:48:43:e4:b9:97:
e7:dd:37:85:26:6e:8d:a3:c3:d3:97:5b:38:ef:af:
63:27:ee:e9:c5:0b:7e:7c:d8:51:19:c6:5b:16:7f:
44:b1:cc:6b:8e:1f:a7:3a:e6:72:a3:3e:bf:aa:ff:
1a:9f:fe:92:07:46:68:b1:eb:19:62:f5:58:a5:98:
8c:a2:09:39:11:c5:47:cc:55:99:8c:61:cf:04:7a:
0d:83:cc:bc:f1:a5:09:3c:d8:4b:fa:49:b3:c9:b2:
53:a4:73:f7:60:a4:7a:58:63:4a:4f:e2:0c:df:85:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:3A:62:00:8D:BA:85:94:CC:21:D9:F9:13:54:AD:69:A6:50:87
X509v3 Authority Key Identifier:
keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:67:95:6a:b7:73:d9:3b:4f:af:ad:c7:36:a9:64:89:70:
a0:d8:ee:3f:20:43:45:95:c6:bc:7e:94:77:14:04:bc:e4:91:
89:12:e8:cc:a2:aa:a7:09:c5:d6:67:2c:58:cf:ba:0e:72:3a:
86:71:c3:3d:d3:c7:ee:48:1d:fb:5c:b8:3d:34:a6:d3:8b:7e:
29:8b:9d:54:85:98:4f:39:8d:a3:2b:38:e9:b0:eb:29:57:7e:
da:88:14:33:bb:1c:7c:4f:6f:7d:75:02:ae:38:33:46:55:57:
d6:8e:b6:c5:85:1a:ff:fc:36:8d:3e:32:12:fc:d9:f2:c8:27:
6e:fd:19:e9:e8:06:01:3a:5c:1d:f1:0f:cb:42:7a:a8:9b:50:
b2:5a:fe:22:33:15:33:0a:b2:e7:40:b5:5d:28:7e:24:b0:ea:
19:23:45:ac:7e:31:5f:a2:49:ab:79:fc:f2:6a:a3:8a:9c:89:
39:61:60:8d:24:36:27:5d:66:3b:ad:86:bc:81:b9:99:b8:52:
5f:45:f0:0f:d4:8f:9d:1b:78:74:51:b3:ef:0f:e6:45:16:6b:
32:32:d6:09:0d:ee:20:67:56:fd:74:83:16:da:cb:ff:1b:26:
c0:3a:06:e6:b6:55:6b:1f:a3:5f:94:e3:10:ce:4f:22:89:3a:
f7:e6:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:03:04 2025 by rpki-client