This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier: +d8dqGs8t/nPoLKNDFW7DjCmmRBgHZrRBNEtZCt+Lds=
Subject key identifier: 4E:2A:15:EE:5F:B8:D8:25:17:04:70:21:9F:74:BD:70:A3:29:8F:7B
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number: 0239
Signing time: Thu 25 Dec 2025 01:03:52 +0000
Manifest this update: Thu 25 Dec 2025 01:03:51 +0000
Manifest next update: Thu 01 Jan 2026 01:03:51 +0000
Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 3ccCpRm73B0DsWCkRfWAQYBOSbF6zo+FESMsrbiUdtI=)
2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=)
3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 01:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Validity
Not Before: Dec 25 01:03:51 2025 GMT
Not After : Jan 1 01:03:51 2026 GMT
Subject: CN=694c8d77-17e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:20:06:14:15:94:82:25:0a:c9:4e:51:c2:
96:7c:2d:8b:00:d3:b1:f3:04:33:1a:40:c8:64:91:
5f:19:0e:6e:00:0c:77:7d:02:33:cc:d2:0c:14:2a:
4a:e6:19:0d:c1:b1:aa:4b:47:43:28:1a:08:b0:44:
0d:72:10:a3:fd:6f:de:76:af:c0:c3:a0:82:67:3c:
82:ae:9e:a9:75:a0:60:8e:7c:6f:7f:d3:46:3e:ad:
06:7e:27:8d:d5:a2:c7:3a:1b:0d:1b:91:89:26:22:
20:2a:58:7b:3c:93:2a:4c:0f:43:06:35:8d:10:ca:
70:8b:21:86:8f:74:d2:f9:ab:c8:48:ec:f9:74:6b:
6c:00:5c:2a:26:20:07:b4:f6:01:98:c8:08:d1:e4:
c6:69:8b:64:5e:cf:b0:d1:39:86:40:78:51:4e:fb:
d2:4f:37:03:36:cd:f5:48:a7:66:18:ff:6e:51:21:
25:cb:9c:12:b1:09:db:0c:6d:9a:4a:35:55:29:c3:
38:48:85:e7:cb:22:ac:08:7e:a5:74:6f:b5:2e:4f:
98:5f:05:76:c6:6d:50:0e:a4:e9:5f:c9:c7:c2:ad:
ae:58:c5:c5:d9:2e:6d:7a:fe:4d:45:a8:07:cc:57:
33:4f:37:d0:17:ec:d0:c8:1e:68:5d:01:72:03:5e:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:15:EE:5F:B8:D8:25:17:04:70:21:9F:74:BD:70:A3:29:8F:7B
X509v3 Authority Key Identifier:
keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6c:a6:69:71:98:31:83:67:6f:08:10:7d:ef:52:b2:27:f9:
6f:24:96:de:37:a3:a4:d8:b7:cb:7d:c7:f0:06:95:bf:bb:79:
70:c5:f0:f9:e7:fb:34:27:08:b4:59:a6:99:86:3d:42:bb:6d:
c2:01:b7:62:bf:3f:74:ef:85:ad:64:9c:21:8a:d3:06:ba:99:
17:bd:12:36:1d:61:b5:86:bf:86:f8:41:3f:27:21:cc:29:8b:
94:d1:d8:cd:15:5e:14:30:f7:01:95:5e:9b:ae:0d:48:30:0c:
11:94:cd:10:19:da:08:7c:fc:ef:4c:3b:e8:54:c1:b7:e2:28:
57:73:49:98:d8:07:29:c9:13:63:f5:75:57:fb:46:73:d6:17:
e8:8c:a3:e4:07:47:91:ef:d7:05:9a:05:7f:48:20:e5:2e:2f:
aa:33:76:fb:66:57:41:6b:1e:51:a2:ca:61:d9:69:16:77:56:
04:42:66:4c:91:80:80:bb:5c:6d:2c:18:e1:ff:21:82:32:d7:
01:22:16:0d:85:7d:95:fb:f1:54:35:c0:f4:b6:4b:13:1a:22:
e6:06:07:ba:41:f8:02:fd:c0:69:3e:7c:2d:3f:38:85:e5:14:
a8:17:10:4f:2e:2b:19:da:31:82:6f:93:a8:f8:29:48:5e:e5:
4e:57:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:11:33 2025 by rpki-client