This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: mFgs3XInlw7lf3BwxhBWexSPTOlt0NgprNNu5QDKF/c=
Subject key identifier: E2:3E:D7:03:85:86:77:A4:4D:C7:07:CA:BB:CE:2A:59:D0:F9:43:B4
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 038C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 0382
Signing time: Mon 22 Dec 2025 23:52:53 +0000
Manifest this update: Mon 22 Dec 2025 23:52:52 +0000
Manifest next update: Mon 29 Dec 2025 23:52:52 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: yMK10OLMmidP0inuMApg4AZJCAVNtABwfpJxmUitvMQ=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: Dec 22 23:52:52 2025 GMT
Not After : Dec 29 23:52:52 2025 GMT
Subject: CN=6949d9d5-67a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:72:c8:98:bb:70:12:6e:9a:82:e4:9f:df:
1d:95:94:23:5d:a0:05:9a:a3:ce:b6:17:4f:3c:d6:
ad:d7:51:ac:90:14:43:e5:df:7e:8e:35:36:59:55:
83:a1:fe:9d:b4:48:52:af:1b:6f:da:91:12:d5:fa:
39:05:bc:04:cf:63:4f:a9:cb:c3:3a:ad:2d:2d:90:
25:ca:08:5b:40:fc:ce:98:13:ab:37:9a:52:9c:7d:
fe:82:49:3d:ab:a3:a6:7e:06:72:a8:d3:ce:84:57:
68:c2:df:55:d6:7d:d0:03:9d:0f:bd:2d:c4:8b:8b:
13:d3:f2:03:bf:9d:be:16:17:ed:d8:04:aa:3a:de:
43:df:34:f2:63:4c:9f:d4:1f:8b:0b:b0:1c:3d:1a:
bc:3e:b6:6e:32:9d:4f:ec:41:81:25:10:c8:9c:75:
59:16:bc:bc:3c:48:6d:bb:24:eb:0e:ae:ec:a8:70:
d8:64:f8:d8:56:d5:de:9f:eb:c4:bb:e6:fe:19:84:
b6:1e:b7:3a:2c:8c:f7:eb:5e:a7:9b:c7:55:b3:7a:
c1:bb:af:80:74:12:e1:71:21:82:38:00:49:18:71:
47:cb:28:51:71:63:55:df:9d:72:fa:c6:81:0f:f7:
fc:67:1d:0d:a1:55:f9:ea:90:92:f2:1b:9f:68:80:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:D7:03:85:86:77:A4:4D:C7:07:CA:BB:CE:2A:59:D0:F9:43:B4
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:eb:e2:5d:a1:0e:65:6b:5a:ff:46:b8:60:f5:8d:6a:df:
90:78:26:7d:6c:6d:55:f7:c7:0a:38:70:ab:1c:39:36:2c:2c:
0d:8a:7d:5f:95:21:64:a3:9c:05:f3:03:51:f2:d6:a1:74:5e:
39:6c:31:4f:6a:bc:5b:be:e6:c6:59:96:be:a3:a1:9e:e2:2e:
b1:18:02:d8:1f:02:b0:c1:db:62:32:86:5e:d6:35:ee:f8:5e:
ad:3b:3a:0e:f0:de:3d:c0:ef:d5:cd:60:e2:79:7c:d1:a8:6f:
7e:9f:a2:0e:7d:7a:d0:1e:23:10:f3:81:6d:66:26:e7:b5:d3:
f4:1e:5a:99:34:6e:87:af:54:82:bb:f3:c1:fa:af:4d:ca:f7:
53:67:93:91:03:f9:b9:ac:ce:18:b3:8b:2f:68:21:c8:5f:17:
c3:2c:e1:15:ea:ef:99:dd:15:56:3e:5b:c0:3a:83:5d:eb:e0:
45:4a:10:cf:5b:7a:a5:a2:e8:23:8d:3d:8f:b1:b3:84:76:d3:
f9:5b:00:a0:b0:17:9b:8c:72:9a:53:53:29:3b:78:f9:8e:a1:
e1:ac:e7:b0:1b:e7:80:12:6b:8c:1b:df:53:ed:2c:23:e6:99:
0e:27:b3:86:3c:15:90:76:13:29:c9:3c:21:e4:aa:c5:22:cb:
85:6a:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:21 2025 by rpki-client