This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File: HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier: 7vfWciYQqe53B7AZP4stcpaVsnkKfaX2lCTV/vfkVqU=
Subject key identifier: 2F:03:70:B8:01:64:97:6B:94:BE:3C:03:9C:83:5B:28:6F:3D:DD:A2
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial: 0437
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number: 042C
Signing time: Mon 22 Dec 2025 23:23:10 +0000
Manifest this update: Mon 22 Dec 2025 23:23:10 +0000
Manifest next update: Mon 29 Dec 2025 23:23:10 +0000
Files and hashes: 1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: gEi4AQmlPZirGJ8sh2wNfROftq7iiPuNUCE4jVYlWe0=)
2: F4639D76356211F09A66C487C4F9AE02.roa (hash: PHU5aUvAOrBIKy7huYHffiKA6xh2xWAfjAUu0W1+Jtw=)
3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: XE/ZbmFKgtcJ8d/T46yRFJ9hkQIFqFEENN93aFpVlI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Validity
Not Before: Dec 22 23:23:10 2025 GMT
Not After : Dec 29 23:23:10 2025 GMT
Subject: CN=6949d2de-c233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:54:3d:6b:2c:02:e2:9f:c6:56:5b:c6:b7:
6a:a8:33:b0:60:cc:fa:3c:f3:ba:e7:18:c3:f6:f6:
8c:3d:36:bc:59:b1:10:99:22:29:4c:64:e3:bb:f4:
db:7e:c4:f6:26:1e:d3:ad:c4:5b:8a:ea:69:e3:4e:
1b:87:ba:62:ab:bf:87:42:85:05:9e:5e:9a:c6:17:
6c:9d:01:28:96:26:d4:5a:fe:e1:f9:78:fd:5c:03:
33:a8:08:0c:2a:ba:b0:fb:29:64:d8:5d:2a:52:18:
93:50:3d:aa:07:37:bc:49:f9:b3:f6:71:86:e6:d4:
ca:b3:8d:8d:2b:e0:e2:54:cf:89:45:80:36:ea:39:
04:ad:17:e4:1e:c6:71:4a:7c:26:c0:a6:37:07:3d:
23:ec:60:6e:0c:a7:d4:29:fa:c2:0a:7d:e7:73:ff:
0b:7a:17:6f:df:e3:12:d2:57:00:6f:b3:e2:0a:65:
d2:21:77:05:b5:3a:06:83:8f:cd:90:78:cd:75:eb:
87:98:28:7b:16:05:a2:51:6b:84:f5:0a:ea:cf:4b:
29:8c:ac:01:20:59:f3:e0:1e:b4:6c:c8:30:78:f9:
75:8c:b4:7d:68:88:70:8c:f7:22:ce:59:d4:05:ea:
19:90:f5:e0:e2:3c:b5:37:8d:31:fa:0d:be:e7:f6:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:70:B8:01:64:97:6B:94:BE:3C:03:9C:83:5B:28:6F:3D:DD:A2
X509v3 Authority Key Identifier:
keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:f1:a8:28:e2:10:9b:ef:de:e0:e3:55:a8:ad:2b:21:8c:
f6:ff:6b:b8:47:27:06:74:51:ab:b4:41:99:83:69:7c:aa:ab:
78:20:14:79:8f:3a:16:03:c8:e2:1e:fd:07:69:e0:7b:e3:66:
0e:4d:6b:6e:ba:a4:8b:07:03:f4:7f:fd:8f:a5:83:d2:65:f8:
67:ab:52:34:77:5d:bd:82:e9:1e:3f:76:dd:e2:a1:1b:47:9f:
54:47:5e:38:2d:77:08:ec:0a:5b:50:3d:26:50:ab:ad:f4:c1:
18:c3:57:dd:93:62:39:28:a3:16:cf:6e:cd:a9:7f:0d:03:69:
29:e3:e1:cc:f2:ba:be:37:78:12:12:8d:63:04:ed:64:19:7a:
ea:13:f9:70:be:48:9c:94:11:5b:8d:6c:50:80:12:ce:b1:42:
83:d1:3e:e0:bc:7a:03:19:fe:4f:c6:db:2c:5f:55:24:ad:9a:
55:e6:20:df:22:d1:c9:8f:12:a9:ba:f8:4c:47:90:88:86:9b:
2f:d1:1f:10:6e:5d:17:65:36:e3:84:1a:fd:27:fd:41:29:71:
31:57:90:be:b1:e6:ff:7a:68:a8:fa:b5:d3:f0:64:5a:df:9a:
00:ae:2c:53:12:0d:1e:0e:c1:17:45:0d:be:96:50:34:c5:ab:
78:e2:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:18 2025 by rpki-client