This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier: nc4HqK7ctm+dhuzu9JfqVWVaeJmeZICexkJnlUKfpp0=
Subject key identifier: 1F:F1:34:5D:23:CE:85:15:20:9A:7B:B6:27:CF:97:C5:1D:A7:E3:0C
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number: B3
Signing time: Tue 23 Dec 2025 05:02:05 +0000
Manifest this update: Tue 23 Dec 2025 05:02:05 +0000
Manifest next update: Tue 30 Dec 2025 05:02:05 +0000
Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: ltUKGgpOto0jdD1H5xp0evNVg7XcgeJTS8NQaGyjwE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Validity
Not Before: Dec 23 05:02:05 2025 GMT
Not After : Dec 30 05:02:05 2025 GMT
Subject: CN=694a224d-212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:0f:c7:59:94:9f:ce:0a:2d:8d:47:13:93:
e3:c4:07:ec:10:d5:e3:fb:9a:4d:88:d8:fd:5e:31:
82:5e:a8:f1:67:3b:b6:2c:47:76:47:4b:e7:07:11:
cc:e6:c9:a5:04:23:c2:f7:44:b6:1f:06:f8:8c:07:
9e:ec:bb:bf:ac:7b:43:d8:32:c0:3e:47:22:5d:15:
fd:f6:15:11:ed:10:ff:06:4d:d0:4b:81:58:cf:aa:
d7:fc:7d:78:b2:75:c0:04:09:c6:c9:45:36:bc:ed:
33:45:5a:97:5c:73:f7:4c:45:5d:88:99:a0:a9:41:
bb:30:02:7a:f4:ff:45:46:13:b5:c4:29:8d:a1:16:
d6:dc:fa:ae:bd:33:ed:49:b9:5a:c0:c9:db:f0:87:
bd:c7:53:9e:a1:3d:95:33:9f:0d:89:93:19:94:d0:
27:99:23:75:f8:02:1c:51:79:f1:0f:31:5e:94:91:
30:6e:23:46:c5:94:62:81:2a:87:73:14:d7:f3:cb:
53:94:18:5f:ad:41:87:bc:81:1d:ea:27:58:35:d3:
88:1f:19:eb:9b:2e:49:12:fb:9e:9c:8f:6a:69:c6:
e6:b3:e1:b7:9e:db:b4:30:14:0a:df:a4:44:10:fc:
8b:8a:3f:ab:b5:14:c1:8d:3a:b7:ce:03:60:56:17:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:34:5D:23:CE:85:15:20:9A:7B:B6:27:CF:97:C5:1D:A7:E3:0C
X509v3 Authority Key Identifier:
keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:2b:36:0a:41:9e:5c:c4:6b:67:4b:30:5b:b7:9f:ac:b5:
a1:6d:38:57:4a:b3:d5:7e:58:a4:72:03:86:23:e3:12:ea:f1:
51:bc:ec:04:df:db:f2:9e:1f:ea:ab:52:5b:42:92:f5:45:a6:
32:6b:28:5e:a7:24:01:d2:d5:9d:cc:ae:18:94:79:d9:4f:18:
12:2e:7c:bf:43:ce:6f:a4:b8:a3:a2:5e:23:51:83:24:ca:bb:
df:01:c9:30:e8:17:55:37:2e:cc:fb:c9:4a:33:b0:6a:a7:f3:
9a:d1:d6:f0:49:12:bb:d6:dc:27:53:f0:f5:b3:76:19:b5:7d:
e4:37:6b:7d:80:91:98:46:54:39:fe:3f:be:50:ff:bb:22:7b:
85:6a:5b:60:50:cf:9d:77:72:e7:72:52:dc:da:77:68:7a:6b:
7f:0c:fc:f0:42:a1:9d:c0:36:63:82:2c:b6:64:b9:1c:3c:4b:
cd:2d:ff:e6:cf:d6:b1:d0:6d:a8:6b:68:88:52:8a:c4:3b:94:
55:cc:71:ae:4a:1d:0b:10:2a:dd:19:64:a7:25:74:14:cc:11:
21:bf:46:4d:a7:b0:2f:15:c5:0c:7c:cf:96:b6:9f:be:a6:74:
af:1d:ed:24:8b:81:76:83:49:9f:13:69:42:4e:42:8c:1d:06:
52:10:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:11 2025 by rpki-client