This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json)
Hash identifier: WY8+qKkEo/vKeEZWPOkW1Vvcrx++HCMiOk0/Hfeo6js=
Subject key identifier: 81:E9:0B:A7:35:B7:F6:9E:22:6E:85:8C:B4:78:98:98:60:08:61:54
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
Manifest number: 06CF
Signing time: Mon 22 Dec 2025 21:28:37 +0000
Manifest this update: Mon 22 Dec 2025 21:28:36 +0000
Manifest next update: Mon 29 Dec 2025 21:28:36 +0000
Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: qYJdrxwntOeOF033egrEJkADeOoVTqJXcXQT3EHjxsg=)
2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: xP9Z5oul8hfvI4Bg3vDxNFPmRZDWzmgh7aXnheGSSko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Validity
Not Before: Dec 22 21:28:36 2025 GMT
Not After : Dec 29 21:28:36 2025 GMT
Subject: CN=6949b804-a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:70:0f:21:b7:82:a4:8c:06:b9:8e:71:17:
8f:d5:14:85:71:1d:c9:39:9e:4d:dc:e3:78:66:53:
26:4a:ed:2c:fc:27:ad:20:7e:c3:6f:c2:3a:36:09:
57:fa:b1:eb:84:d6:cc:cc:35:b7:c9:ea:4e:a7:d1:
12:d7:af:53:23:a5:08:be:19:03:3a:1c:db:cf:c0:
b0:fc:df:af:df:af:aa:2d:e4:c2:ae:d7:a8:c7:1a:
ef:21:f4:b6:a5:65:7c:50:53:9a:a8:ed:58:fe:6f:
c4:eb:f7:00:e6:0b:fc:5e:fc:c3:21:42:52:2e:53:
bf:90:36:91:ee:86:bf:e6:d2:ea:e1:54:43:59:2c:
01:c8:c3:1d:f4:4b:87:32:d7:a4:be:31:66:45:12:
37:07:51:68:44:89:1f:dc:44:96:e1:70:40:cf:4c:
ef:5c:f5:bf:1a:90:e2:72:20:97:1a:ee:58:4b:73:
62:fe:69:af:ae:d5:e7:1f:35:5c:22:79:bd:ed:8d:
a4:d5:e4:a6:48:35:d4:85:3c:0a:17:c1:ac:81:6c:
30:09:33:fc:4e:2e:80:6e:a0:bb:2d:ac:03:23:9c:
92:66:9f:c5:af:51:52:2f:53:1a:dc:d9:80:da:6e:
a3:ec:a7:6f:5a:99:4c:50:65:43:7c:27:ed:9f:58:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:0B:A7:35:B7:F6:9E:22:6E:85:8C:B4:78:98:98:60:08:61:54
X509v3 Authority Key Identifier:
keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:eb:87:42:55:a1:90:c4:05:cb:fe:a4:9b:82:55:25:2f:
cf:14:32:bf:3f:de:70:ea:d6:cd:70:31:0e:b4:fa:43:3c:eb:
1e:ad:54:4f:59:67:d6:09:e6:0a:8f:fa:19:a9:b8:2f:ec:c9:
1d:20:ea:c1:11:72:30:80:4a:f3:4c:29:16:a6:5b:f5:8b:89:
66:4b:23:64:39:c4:b9:5c:fc:f0:16:91:e8:c2:91:0e:30:c5:
72:27:5a:da:3f:63:3c:56:65:4d:e4:aa:17:64:d6:9e:00:96:
77:2f:51:f8:64:88:7b:6a:5f:b7:5e:bf:15:24:bd:bb:a0:a3:
c1:0e:e8:d4:76:8b:c7:8a:68:75:da:58:c0:94:d5:fa:c6:b9:
da:68:9e:d2:a4:57:e1:43:4a:6f:be:1a:56:82:ec:8e:bd:48:
a8:b3:57:c0:d2:f4:68:fe:d9:81:f7:09:60:e7:5c:e7:47:48:
e4:b9:44:de:f9:94:c1:84:a6:85:22:96:02:d7:7d:b9:ff:41:
22:e5:c9:c5:0d:8c:a3:3d:14:30:25:38:36:02:ff:01:c7:2b:
f7:89:55:8f:09:40:fd:e4:79:f4:19:f6:b4:2a:a9:8c:a9:99:
1c:5f:99:59:8e:2f:e8:5f:ca:f0:9f:28:fa:81:f9:a5:e1:8a:
57:b7:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:07:01 2025 by rpki-client