This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier: hP5NU9hFHN+3M2uqqC0bS33Lk5syDN6QIRfEYVadCt8=
Subject key identifier: 95:48:10:1E:1B:CF:BB:A7:E7:64:67:D5:97:11:F6:45:DE:1D:23:BA
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number: 01B6
Signing time: Fri 19 Dec 2025 02:18:06 +0000
Manifest this update: Fri 19 Dec 2025 02:18:05 +0000
Manifest next update: Fri 26 Dec 2025 02:18:05 +0000
Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: PKj4qmo2TOjgeh9w+02zc9Nix30UjtqdSh4GctXZdhI=)
2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: 8cwkmAzUHnzmEAUNr254jpd6TX395TnuYUK7Fbb2vBY=)
3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: 9D2leAHQTTe0D0yRNnuNqQquZYtL0KUcupehuXV27S8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Dec 19 02:18:05 2025 GMT
Not After : Dec 26 02:18:05 2025 GMT
Subject: CN=6944b5dd-3784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:8b:7b:1d:0d:f8:c7:4c:ba:91:b2:8b:8e:
ab:60:48:b5:7c:c9:5c:01:99:f8:eb:90:4b:9d:0a:
7c:36:56:32:a4:26:6b:9f:bd:1f:a9:44:01:a9:1c:
7c:65:07:45:5b:9a:42:55:90:98:dd:d7:f7:96:39:
0d:0c:b1:19:a0:09:c6:8f:2a:b7:97:e7:09:97:b3:
95:59:49:e5:1f:54:25:3f:c3:eb:df:ff:7b:66:31:
e5:85:05:a9:3e:78:3b:1a:b4:16:51:be:0e:39:92:
cb:bb:c0:98:3a:f1:dc:eb:3f:8c:79:b9:43:d9:39:
91:34:42:bc:9a:f9:7d:9d:f5:57:16:15:ce:43:7b:
fb:40:54:28:2c:af:41:77:a0:93:f5:8c:b1:9a:e3:
db:34:af:ae:a2:55:47:a3:1f:26:5c:36:ab:4c:fe:
bf:99:5b:c6:fb:87:10:c0:c6:ef:94:c2:04:b8:dd:
c0:2e:5b:f5:5a:03:88:a9:62:2b:8d:34:fb:3f:61:
b4:bc:a2:57:35:1f:1d:53:03:15:1b:cc:65:40:12:
46:01:30:6d:60:df:38:47:44:eb:d8:e5:aa:b1:38:
b7:db:e5:72:ff:1b:af:97:50:55:86:5a:13:89:6b:
b6:8b:4a:5a:b0:68:7e:19:5e:c9:a4:f6:ca:7b:93:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:10:1E:1B:CF:BB:A7:E7:64:67:D5:97:11:F6:45:DE:1D:23:BA
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6d:2c:ee:dd:cd:45:d7:71:73:7e:16:76:92:ee:9f:27:4f:
02:63:9d:16:92:16:f4:5e:c6:90:ab:27:64:35:0b:d1:1a:de:
f7:b9:85:9a:89:65:d5:73:34:cb:23:ea:16:34:65:8e:b5:3d:
5c:dc:2d:2e:95:b8:f9:46:5b:88:9f:13:0d:7a:63:fc:5c:f5:
0c:00:20:75:67:73:ec:2c:b1:17:ff:d6:ec:17:84:22:bd:1f:
31:53:4d:ec:94:f8:a4:86:a9:a3:db:30:b5:e8:60:78:8a:22:
b3:aa:85:66:08:b4:8e:64:3a:b3:47:14:b3:f9:a6:44:5f:4a:
b1:cd:ea:f8:b6:de:46:65:59:b0:fe:66:fb:a8:55:6a:43:e1:
d7:1d:61:f2:9c:a9:ee:72:1d:f3:2c:c5:95:5d:81:46:26:ce:
f0:9d:1f:14:1f:38:8a:cc:d1:4a:f7:cb:54:70:34:d8:0d:c1:
5b:96:8c:01:47:a8:43:21:bb:14:30:e7:09:f8:08:78:55:c0:
b9:03:2f:46:e0:2d:39:fe:a2:2f:00:01:6e:9e:40:7a:df:b9:
f8:6b:2d:78:67:cb:7b:73:28:d3:97:e0:c1:4e:e8:29:ce:4d:
2b:ce:ec:2d:91:68:a3:33:a1:45:7e:d3:69:c4:3c:ec:55:05:
91:3b:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:52 2025 by rpki-client