This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier: j+9Ih0We8eIbCAVWIuDEq761iOxiybkTGU7dxYS/2V0=
Subject key identifier: 70:F8:6A:51:CA:4B:CE:FA:86:7D:F9:13:6E:DE:15:33:6E:B9:61:B0
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number: 01D8
Signing time: Fri 19 Dec 2025 02:02:34 +0000
Manifest this update: Fri 19 Dec 2025 02:02:33 +0000
Manifest next update: Fri 26 Dec 2025 02:02:33 +0000
Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: rv3Fs+vYf2dtrIRXAbZBH0LWYNO0giu2tKypf0Tes8U=)
2: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=)
3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=)
4: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Validity
Not Before: Dec 19 02:02:33 2025 GMT
Not After : Dec 26 02:02:33 2025 GMT
Subject: CN=6944b23a-3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:56:7d:c3:61:28:bf:bc:0c:44:04:92:f6:
e9:9f:df:dd:8d:8f:f2:92:d6:fc:36:d1:d4:54:5c:
a5:33:bf:3a:f4:a5:b3:e6:33:6a:5e:18:5f:fb:8d:
73:95:7d:eb:12:94:c4:71:80:91:4a:7f:68:6d:c1:
ba:1c:d3:33:38:09:f9:ef:b4:90:ec:3c:46:55:45:
79:ec:26:6c:8e:52:f8:2d:95:b8:74:66:83:ab:4d:
12:ed:6d:15:95:5f:5a:bd:f7:16:35:f1:cd:26:b4:
01:8e:37:18:79:6f:48:8f:89:3a:a4:2b:6e:86:93:
1e:c6:60:61:7d:95:19:24:64:15:d6:5c:c1:14:8d:
01:93:00:7e:c1:ce:8e:94:7e:fd:97:4f:2b:0f:55:
65:93:f9:65:f8:77:82:33:aa:a8:4a:f0:13:dc:f9:
bd:9e:b2:c9:2e:fe:b8:ce:12:2d:16:4c:1a:11:f6:
c5:18:1a:e6:52:5b:5b:fb:5f:a8:8e:28:b0:30:e2:
84:49:88:34:36:45:ec:9f:84:af:0e:4f:99:bb:26:
c3:09:d9:b6:d8:58:99:f2:fb:45:90:ca:12:9a:7d:
de:2a:e8:5b:f7:2d:e5:97:04:a9:e3:8b:0b:d3:df:
38:45:aa:81:43:41:1d:c2:9c:2c:a6:ec:c5:b2:3b:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:6A:51:CA:4B:CE:FA:86:7D:F9:13:6E:DE:15:33:6E:B9:61:B0
X509v3 Authority Key Identifier:
keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:ca:70:35:06:12:fe:68:4c:78:2f:3a:76:bb:dc:69:5f:
27:5f:a2:e6:cd:cc:c2:7e:e3:5c:d7:e8:5a:d3:cf:dc:06:9a:
b9:58:21:e9:fb:16:0d:ed:2d:6d:e0:75:3a:d6:f3:fa:75:bf:
ed:da:0f:1e:ad:21:2b:36:42:a1:c4:33:53:e5:0b:12:e2:56:
3b:70:28:70:64:0e:83:a9:02:2d:55:e5:04:d9:df:07:e3:97:
51:23:2c:3d:11:60:7f:a4:0f:d5:7f:db:68:a9:2b:0f:f0:a2:
a9:99:66:46:aa:b6:dc:69:25:52:f6:cf:13:2d:05:80:87:0d:
1c:95:26:bf:53:eb:d7:71:d8:ee:53:19:cd:5c:a0:10:1c:f1:
9f:db:90:cf:1d:58:6f:45:fa:a9:2d:4c:71:a3:f5:19:2f:dd:
5f:ae:55:98:37:3a:03:98:7a:a6:6c:f8:73:8f:0a:e2:f4:9d:
d4:18:56:c9:2c:95:3b:86:31:60:ef:5e:c3:d4:f6:c7:72:8f:
84:42:b4:dc:d5:28:f9:f6:43:f0:be:be:12:89:33:34:c3:e9:
d8:05:ef:72:1e:43:0e:1d:b9:e2:cb:79:eb:b1:41:44:19:d2:
50:ea:d8:46:ca:29:36:90:1f:77:55:c0:27:a2:90:0a:fd:37:
08:78:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:23:24 2025 by rpki-client