This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: 5/ww1sMPlG0JOaLJ3Q4YAc0Yp02W4JsLM7tMrQf/sQA=
Subject key identifier: 65:61:64:13:9A:70:15:1A:7A:E8:C2:41:E9:77:80:BF:3D:33:BF:FE
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 0821
Signing time: Sat 20 Dec 2025 21:45:07 +0000
Manifest this update: Sat 20 Dec 2025 21:45:07 +0000
Manifest next update: Sat 27 Dec 2025 21:45:07 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: OqqtBhE/GxHW2Jmjyveli3WY2jShX3WmtMouTc2DcPA=)
2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Dec 20 21:45:07 2025 GMT
Not After : Dec 27 21:45:07 2025 GMT
Subject: CN=694718e3-8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:05:40:29:63:cd:55:25:b5:d9:ca:13:9b:
22:7b:80:14:da:92:c8:d6:60:21:24:26:aa:de:7f:
b7:17:07:30:dd:37:a2:bb:91:0c:b3:f6:c3:67:e9:
27:cc:9b:af:7e:15:c8:be:9f:95:26:78:f8:a9:20:
3f:1a:a2:73:4a:74:bd:87:f0:d4:c2:44:21:7c:63:
b6:f6:f3:c2:b5:2e:f4:36:7e:be:d7:42:67:9c:2e:
3e:32:2b:20:f4:2d:7c:54:3f:da:96:ca:c3:bc:13:
cd:2c:a6:bc:ed:43:ad:99:70:c0:83:aa:41:ff:06:
05:8b:c1:f8:c9:df:a4:0e:ce:e5:35:3d:a2:8a:13:
70:0f:07:1f:6b:05:f8:52:07:9d:25:59:f7:06:37:
de:24:6f:72:93:56:53:91:30:54:ab:45:76:2b:b1:
ab:3b:df:ff:a3:6a:18:e9:f1:75:b0:27:64:37:86:
f7:5b:dc:58:29:c0:98:03:75:e1:30:a3:6f:3b:0c:
33:26:ff:1c:a2:d2:5d:d2:4c:ff:ca:b4:94:82:11:
2d:2a:3e:2b:f7:d5:0b:ed:34:78:3d:20:5c:4f:f6:
93:c3:80:83:46:04:67:2e:0a:73:5d:68:8f:49:f3:
0b:9c:c1:d4:c3:0c:f9:7d:84:55:29:bc:6a:ff:40:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:64:13:9A:70:15:1A:7A:E8:C2:41:E9:77:80:BF:3D:33:BF:FE
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:2d:86:cf:ff:ff:78:e7:2e:e6:c4:b1:c9:95:46:a2:0e:
81:3b:7d:8e:ce:be:e4:6e:64:41:48:c4:28:e5:df:1d:87:88:
72:22:95:7b:68:fc:d1:4d:2c:0b:7a:d4:67:0b:6e:7f:dc:42:
fe:e5:40:b6:10:80:7d:a0:d6:20:fe:ce:27:5c:fa:66:2b:78:
f8:99:8b:a0:6c:c7:cd:35:04:11:bd:ab:f0:c6:96:7b:af:c2:
60:f2:08:8a:53:36:76:32:b5:38:e2:09:8a:d3:74:51:a0:81:
dc:64:cd:5f:ab:56:ab:3f:f0:8a:79:ac:61:d1:f1:95:4b:a5:
96:09:9d:86:32:15:e0:0c:37:31:e0:e6:df:f0:74:19:b9:14:
d9:1c:f5:24:17:3f:96:bc:70:03:e2:ed:a1:1b:3e:92:5a:dc:
0c:1a:7b:c2:80:cb:bf:9d:29:50:41:43:fd:62:a7:e9:7c:01:
e2:02:4d:a0:f9:b2:96:89:7c:69:0e:c2:77:88:d6:6b:44:fa:
8a:7c:d1:df:d9:e1:5e:ef:b3:e4:7a:05:4d:7d:b4:a5:cd:84:
03:89:75:12:58:3d:41:0d:57:c6:5d:a7:49:03:8b:aa:b2:a2:
24:35:64:b0:fe:f4:43:6c:57:6d:e5:bf:28:ce:80:c2:45:2e:
08:c0:ea:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ5NjMxMTAvBgNVBAUTKDFENDkyRkEzRjNCMjk1ODA0OTVBNjg4MEQ0MDRFRTBD
MzcwQUQ5MjUwHhcNMjUxMjIwMjE0NTA3WhcNMjUxMjI3MjE0NTA3WjAYMRYwFAYD
VQQDDA02OTQ3MThlMy04YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2L8FQCljzVUltdnKE5sie4AU2pLI1mAhJCaq3n+3Fwcw3Teiu5EMs/bDZ+kn
zJuvfhXIvp+VJnj4qSA/GqJzSnS9h/DUwkQhfGO29vPCtS70Nn6+10JnnC4+Misg
9C18VD/alsrDvBPNLKa87UOtmXDAg6pB/wYFi8H4yd+kDs7lNT2iihNwDwcfawX4
UgedJVn3BjfeJG9yk1ZTkTBUq0V2K7GrO9//o2oY6fF1sCdkN4b3W9xYKcCYA3Xh
MKNvOwwzJv8cotJd0kz/yrSUghEtKj4r99UL7TR4PSBcT/aTw4CDRgRnLgpzXWiP
SfMLnMHUwwz5fYRVKbxq/0DgkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVhZBOa
cBUaeujCQel3gL89M7/+MB8GA1UdIwQYMBaAFB1JL6PzspWASVpogNQE7gw3Ctkl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3
RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZQkpXbWlBMUFUdUREY0sy
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hVa3ZvX095bFlCSldtaUExQVR1RERjSzJTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZ
QkpXbWlBMUFUdUREY0syU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsci2Gz///eOcu5sSxyZVGog6BO32Ozr7kbmRBSMQo5d8dh4hyIpV7
aPzRTSwLetRnC25/3EL+5UC2EIB9oNYg/s4nXPpmK3j4mYugbMfNNQQRvavwxpZ7
r8Jg8giKUzZ2MrU44gmK03RRoIHcZM1fq1arP/CKeaxh0fGVS6WWCZ2GMhXgDDcx
4Obf8HQZuRTZHPUkFz+WvHAD4u2hGz6SWtwMGnvCgMu/nSlQQUP9YqfpfAHiAk2g
+bKWiXxpDsJ3iNZrRPqKfNHf2eFe77PkegVNfbSlzYQDiXUSWD1BDVfGXadJA4uq
sqIkNWSw/vRDbFdt5b8ozoDCRS4IwOoF
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:34:29 2025 by rpki-client