This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier: sF66YfOImRlpWjvv6iRXsohWExTxCo9eQ4ICRROMY0E=
Subject key identifier: 3C:1F:BF:60:D8:42:13:A7:2F:86:C2:2F:16:B1:78:B5:15:FD:08:CF
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number: 03C4
Signing time: Thu 18 Dec 2025 23:55:44 +0000
Manifest this update: Thu 18 Dec 2025 23:55:44 +0000
Manifest next update: Thu 25 Dec 2025 23:55:44 +0000
Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: v3Cjso1/h6P6fEjbkZEA1rvhZpncIC8OL/1oGkzlr6c=)
2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=)
3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=)
4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Dec 18 23:55:44 2025 GMT
Not After : Dec 25 23:55:44 2025 GMT
Subject: CN=69449480-ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:88:bd:7f:88:d0:d9:9f:be:96:40:6a:da:
ee:d1:48:f7:9d:fc:8a:4d:2b:fd:25:45:e4:bf:ec:
f9:89:7a:00:49:6a:ff:72:53:b2:d4:00:3a:06:66:
89:ed:29:61:29:b7:e2:cf:d7:a9:f5:54:ea:c0:d4:
97:cd:ec:17:f0:56:65:39:dd:87:a6:6c:e7:f0:a7:
f3:ac:e8:7f:95:4e:3b:72:21:df:d6:67:db:13:b1:
52:00:2e:65:5a:3a:af:00:27:3f:5a:a8:7c:9c:24:
5b:f9:fa:e8:5f:12:03:e0:e3:d6:71:b9:11:05:62:
ad:22:e1:90:9a:e8:c8:b8:f0:c4:ca:7f:32:ea:f6:
4a:72:d7:ac:1a:55:b8:77:c5:32:2b:57:73:f3:1f:
f9:a7:46:f9:92:aa:7b:cf:0d:94:4d:28:20:e7:20:
8e:31:dc:f2:73:ff:fe:c6:c1:56:82:49:bb:d5:9a:
ae:17:4b:db:e4:82:1a:85:94:84:3a:f5:94:eb:50:
c6:67:39:cd:8c:3f:3e:1d:c9:63:9c:2c:a8:b9:4d:
37:8a:1a:49:6f:44:cf:76:18:71:f8:04:55:d9:a2:
f8:64:ee:19:48:d1:97:8e:b9:ee:9e:55:e0:be:81:
81:33:bd:cb:ad:28:0d:58:33:d1:1d:65:ed:d4:da:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:BF:60:D8:42:13:A7:2F:86:C2:2F:16:B1:78:B5:15:FD:08:CF
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:22:35:52:e7:be:87:c4:0d:2b:25:f4:f8:d4:b9:52:71:75:
90:bf:72:5a:23:e7:f1:f7:01:e7:06:19:c1:46:99:7c:45:9a:
1b:b6:04:de:c4:2f:d7:8a:82:9e:12:26:9b:01:b1:03:af:54:
e7:aa:b0:52:85:af:72:9e:95:ee:64:ef:58:6b:27:4c:3a:12:
9f:b2:14:18:39:1a:13:fa:44:4f:7d:cb:3b:0c:1b:fa:4d:d2:
ec:42:e4:52:53:a0:6d:ac:7c:70:75:4f:6e:04:23:db:65:c2:
3e:42:a2:79:b1:08:56:b9:7b:cc:47:56:19:f7:25:d6:25:d1:
32:32:31:6c:cd:ce:ab:35:b3:fd:36:d0:14:a6:6f:34:60:81:
68:cc:95:68:c6:d0:c2:4f:76:fa:4c:7f:59:76:6d:a1:32:68:
0c:07:69:ca:cc:69:21:d1:c6:ae:f5:33:1e:57:ca:1e:a8:b7:
21:35:97:63:ca:11:c4:8c:c6:49:1a:f2:60:00:c3:32:f5:19:
38:4d:95:e6:70:a8:bf:36:c1:2e:45:e5:ed:67:21:0a:e5:14:
0d:d1:de:8e:7f:81:da:7a:05:e2:27:9e:ae:ae:18:f3:cd:5c:
a9:db:e5:12:2a:4b:65:8b:4a:d5:0d:7c:60:8d:5a:10:48:93:
00:dd:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:34:26 2025 by rpki-client