This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier: hcMeTDzb1iNLsGoK3nOeFmVyYgzr5Vo97j2gvlaNu9c=
Subject key identifier: 4A:D8:25:18:0F:DC:8C:E9:97:11:B2:71:50:59:2B:70:73:8B:58:9B
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 03ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number: 0378
Signing time: Fri 19 Dec 2025 00:16:01 +0000
Manifest this update: Fri 19 Dec 2025 00:16:00 +0000
Manifest next update: Fri 26 Dec 2025 00:16:00 +0000
Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: XJN6PQgZFyCWJF1Mze/7k1hs3CtiQUC2KgzZw4hEdDg=)
2: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: DtxFYEOtGQIY53GPRL1dPzv4/8AYv0bkRXV3Pqe74uw=)
3: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: Yx63u4z9hDR8keVLNdP1xC6pEQSE/UG9aZLw+X4LwRo=)
4: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: z5Obs62Z4LeG64hnhJujzAwct4kvn0rbMC23ZtCEssE=)
5: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: 10NBPSybJ1d+q+ni3VVF3MNFnJGqTgzoq8TVIRJgedI=)
6: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6WmIg/lOdQnkEvIsKV1OREBoFlxfYt6gLUjZAiHr4+8=)
7: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=)
8: EA792108690E11EF9396CC48C4F9AE02.roa (hash: 6kpxPOxsj0Raf3qdIHWPGMM1EX7pSguYPkBcI1ejIWI=)
9: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: CZLbLDcndy2xxG5xhFEstQ1CfMNrOMxWn16hiuaCB3A=)
10: 218211CA68F911EF986C8281C4F9AE02.roa (hash: mHnULwgJoiFgX9ai3WggRtZIFI0XOoqJW+z2W78zhrY=)
11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: KVYDjb3LOCylq5/WVla/qjjDgT6zCAlDqXpLKrRgpFk=)
12: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ugtcgz+OwF9hfe6CeTebPqLvH2EQn6e6HzRfBkIfJHo=)
13: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: aOIDROQi6GkPOjEwda+oZgehrmBXac6uf9Rdo2Bd6r4=)
14: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: xRZTvOkzIPzpcRY24c/2u0KIcsyrTX9YYHCujB9nKyM=)
15: BE4B3228691411EFB573C120C4F9AE02.roa (hash: 5H32B3wtPXDSZssXMxHc0JZTPyABfL6/i25/U22sL/A=)
16: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 0Wbd0TloILo4D7y7bRvBLRW10Y2AoSQoJYvEUNn6cbg=)
17: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: 9K/dPzFWeJ3662AXxOwpQnYP5rZeIOBTrzjoLeu+KQo=)
18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: 2OyyCanvq13/lef3XlgSuSBG44PottDi4GJaK+x96f4=)
19: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: eDZoNBLuQcw3Wn1rO/220lw34J3dfQJ4no+D+vY9xGU=)
20: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 2TbZWTz5MrS4pUvVlInd+ICIzajVNRsMUaqG9OLqDBQ=)
21: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: q8+3jxkLjtGgAWTpN6kPoNOdBfmaZjeJ2k/PYDuVa+o=)
22: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: zw3Bw3tYxrZQpKxOUK57pZSMryzQb0S86CCh4Nq5BP4=)
23: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: VMFfG28SR9K0gvV1WJc79wKMQ3bg4zxW5arPOP7vJGw=)
24: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: D5I1AGWIgCpGbK2ioEBWE7LhyF6lwZBdzrjdsvoMJHo=)
25: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: 1GqQuY6ipOukNjcNmFCRz4aP/qgsCVml/uDhWXv7ZZA=)
26: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=)
27: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: /NnlQrY/nq8rIKszOQKAgkEH+3DZidftTKYbVxGk7FQ=)
28: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: 2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=)
29: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: a6e59gPtF+oIYCL1FfTClIwM64Rzhh/gE9NV+k4hGio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 19 00:16:00 2025 GMT
Not After : Dec 26 00:16:00 2025 GMT
Subject: CN=69449941-9e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:21:65:80:09:78:82:52:6e:50:7d:79:00:
bb:d1:5a:9e:67:52:bd:f0:b0:d3:2e:04:e8:6f:94:
06:7f:aa:5e:db:7f:67:af:0d:f5:01:df:f6:63:73:
4e:d4:55:93:3a:18:2d:c0:3a:eb:e5:2c:26:05:9a:
c7:2e:b1:66:94:b5:66:e4:6a:09:9f:ef:4e:27:00:
d8:bf:f0:2c:70:7b:83:94:80:78:70:db:dd:53:5c:
69:8d:11:b9:e6:ed:55:70:68:e7:24:fe:04:4c:5f:
4f:a3:6f:ae:3e:14:c8:87:7b:30:61:9a:ef:76:7e:
a3:4f:f8:66:24:1c:db:29:f8:8f:5c:04:5a:66:f9:
b5:69:a5:9b:a2:a3:e6:c0:69:16:c3:22:c3:00:10:
f9:66:99:1d:59:dc:4e:f8:fd:78:e5:48:63:8b:11:
87:3b:6f:b9:e5:9f:7f:ef:0a:98:45:3e:72:c9:f6:
22:7c:cf:b8:dd:dd:1d:56:c5:f9:20:52:13:42:35:
16:ba:30:29:ce:95:e3:41:10:78:90:95:0f:42:10:
8b:5d:67:e4:9c:20:a6:97:3b:51:84:f3:c7:c6:50:
1c:77:b5:b7:3e:2a:27:56:73:a8:e5:5e:3a:2e:9f:
15:dc:59:7e:a2:3e:63:99:36:5f:50:27:bf:5a:8e:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:25:18:0F:DC:8C:E9:97:11:B2:71:50:59:2B:70:73:8B:58:9B
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:57:4e:86:90:3f:f3:09:e3:5d:6b:1b:c0:13:d3:e4:7a:
f6:92:c4:42:74:91:d5:91:e3:ac:09:b9:51:42:5c:d3:23:24:
b2:c6:76:92:f0:72:d3:b7:c5:fa:2e:f3:5e:25:08:9f:da:a3:
07:96:02:6f:72:ae:cb:77:c9:a2:b4:ea:eb:20:1c:a0:d3:28:
be:d4:97:41:ab:ac:ea:7d:ee:08:a1:ef:cc:ac:7f:92:dc:9f:
7b:ab:5a:9d:d8:2e:c4:7a:5b:8a:1b:5f:d6:61:a2:62:cc:2b:
13:52:56:0d:8f:01:a8:b8:8b:4f:de:2f:e1:75:4e:dd:fa:5b:
8d:34:83:d4:a0:4c:c1:83:5c:28:ef:36:6f:5c:71:13:61:72:
9d:36:45:18:b2:9c:be:a1:c4:1a:8e:56:68:79:4e:ee:28:76:
06:a5:22:7e:79:0b:20:44:8e:ba:e8:b6:1b:74:d3:69:89:89:
25:3b:08:f0:85:2d:b3:72:03:a3:74:cc:56:04:15:0e:b9:d2:
e9:9c:be:38:0d:f7:83:34:1a:a9:10:92:38:92:a8:c5:3c:0f:
62:9e:63:42:dc:58:06:14:3e:6d:d6:74:b5:5f:da:70:fa:e4:
94:c9:2b:a2:52:6b:81:ff:14:fd:ec:49:10:ee:93:c4:1e:0f:
e5:fd:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:50:14 2025 by rpki-client