This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: TeP1SoZI85CnrSIkSqdyFl1QI7wOgu5TcLMMvY9EhiM=
Subject key identifier: 12:33:B4:7D:29:BC:20:6B:46:D0:D9:68:C0:B9:AB:58:E3:47:E3:01
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 02CA
Signing time: Tue 23 Dec 2025 00:25:52 +0000
Manifest this update: Tue 23 Dec 2025 00:25:51 +0000
Manifest next update: Tue 30 Dec 2025 00:25:51 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: c2sg+IkT3lU2xRnqSdAUySsjwAMtpvxeRRAsIloJxvU=)
2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: WJqsk6AcOsT6swR6sit9xUG2kzzl+g8zMFEk5jMyaa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Dec 23 00:25:51 2025 GMT
Not After : Dec 30 00:25:51 2025 GMT
Subject: CN=6949e190-4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:11:a6:99:dc:ba:9a:fa:16:e2:e7:a7:44:
06:aa:3c:89:85:24:e7:38:fc:92:3e:b4:ed:ce:be:
a9:ee:04:51:26:e1:58:d3:00:74:cb:7a:57:95:41:
ce:77:ea:bd:c0:fe:03:0d:c1:38:3f:e6:2a:6c:fc:
33:98:5b:5f:e0:ab:83:2a:29:0e:40:2b:0d:f8:07:
6b:89:6c:de:f7:2a:7e:b2:6d:59:2d:ec:31:e8:0f:
0f:c8:66:cf:b2:e4:0e:10:db:7f:da:44:18:88:fc:
61:63:82:08:6f:8a:e0:ba:42:6b:c9:d9:55:ad:57:
18:6a:2d:f7:e6:92:ae:ae:70:db:6d:6f:f8:79:3a:
d1:90:75:8f:fb:a8:01:7b:82:5a:49:ac:48:67:d5:
41:f3:78:16:d5:69:0e:3d:ae:dc:8f:01:5b:76:49:
fe:45:8e:c2:0a:6e:33:5f:2f:34:01:aa:a8:69:15:
53:ab:c5:22:fe:c2:65:84:f0:38:a1:d4:0d:73:07:
bd:bb:92:5e:94:f3:19:1c:12:af:bd:ae:fe:ad:22:
1a:5e:a7:13:f8:61:65:99:e0:b2:2b:51:8e:e4:f3:
b5:6c:7a:a4:68:de:b5:6d:fd:29:27:9d:a7:b2:f9:
97:6e:a4:97:ed:2c:da:30:06:ed:18:ab:d1:89:ff:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:B4:7D:29:BC:20:6B:46:D0:D9:68:C0:B9:AB:58:E3:47:E3:01
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:c3:eb:ae:a2:6d:45:ae:58:ba:99:cc:d4:5f:20:77:f2:04:
5b:49:51:0d:48:f5:44:30:ac:f1:1b:54:54:dd:8c:a3:91:e9:
83:04:28:0e:70:82:08:a4:c1:7c:3f:a5:15:57:f6:c2:17:66:
cf:b0:47:c0:b0:9a:92:8e:e3:e8:80:ed:85:56:ee:f0:e0:af:
e6:3e:ad:f5:45:65:65:60:28:94:5d:03:d0:de:32:fa:2b:dc:
71:2d:8a:77:72:c1:76:fb:90:2d:b1:5d:b5:16:ea:0d:b5:a1:
7e:f5:61:c3:27:88:82:f4:79:14:68:aa:31:f0:41:da:96:40:
4c:77:1f:6f:23:86:ea:8b:a0:29:a7:6a:3f:0e:b4:c8:fe:04:
11:d1:83:8a:e4:1c:7e:60:9a:50:eb:2c:c8:72:e1:59:68:da:
fc:05:f1:b7:b8:1d:66:1e:21:fa:b4:87:2f:68:fc:46:df:66:
8b:e9:1e:0e:76:7c:65:a0:a6:06:3b:39:4c:b2:ba:17:3c:35:
fb:a6:66:84:9f:e6:e9:4e:71:5a:1c:25:e3:0d:55:f6:c5:90:
2f:81:e9:68:b7:ae:8f:8d:03:df:15:2b:70:d0:d3:aa:56:17:
7f:6e:d0:ce:63:cb:d9:e6:55:4a:0b:52:66:ac:28:f7:e9:ba:
ab:b5:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:59 2025 by rpki-client