This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier: KucXSmcXmGNLhmAP/PbozHhr8X+JImhmo0/Drq0k/q4=
Subject key identifier: 80:03:27:AB:B2:1B:86:9D:A2:D9:E5:38:EF:06:D8:13:53:01:6B:B3
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number: 011A
Signing time: Sat 27 Dec 2025 03:49:16 +0000
Manifest this update: Sat 27 Dec 2025 03:49:16 +0000
Manifest next update: Sat 03 Jan 2026 03:49:16 +0000
Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: uwv/jjoVTbbwEhCO7HNS8TWjeUkdLWen1zt1si3YQZs=)
2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: ZyyI/ZozrG5/nhJLIBxR0Bcz7+GF6Q+AWpBF1mK4I18=)
3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: NjBAV+BZBuGQVA2KV6NfHJRJuvgRL/XOA20W9Q3lchw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Validity
Not Before: Dec 27 03:49:16 2025 GMT
Not After : Jan 3 03:49:16 2026 GMT
Subject: CN=694f573c-06f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:90:60:f5:b3:79:aa:72:7a:b4:7e:a2:4e:
36:ed:4d:8b:82:5e:82:31:81:17:f6:40:dc:04:38:
10:ee:24:2c:e2:c9:28:0b:df:e1:44:e7:00:11:37:
39:8d:ae:69:57:7e:a6:6e:af:79:2a:10:1c:88:a9:
09:60:3e:1d:39:63:b8:a4:6c:4e:27:12:57:ae:e0:
21:5d:74:7b:71:6d:df:d9:63:09:94:91:9b:c0:e1:
6b:c9:0b:46:21:08:5d:8c:23:75:3f:0c:cf:3d:90:
cb:8a:03:c1:af:af:28:18:e5:82:9f:93:72:f6:84:
d2:36:72:98:d4:77:a2:72:f9:f5:34:61:02:17:37:
22:07:3b:27:ef:96:3a:27:a7:ee:6e:de:c3:6d:a1:
86:8d:95:89:d7:f3:3b:a1:58:bf:c4:a9:1e:46:89:
58:25:35:6c:d8:78:b7:59:7b:40:a7:21:1f:13:59:
de:a1:ab:80:0a:07:8e:19:df:8e:84:10:33:43:ab:
9b:e8:1e:17:c7:e5:5c:36:48:ec:1a:31:48:f5:88:
81:b1:1b:9a:11:26:b8:ff:66:67:0d:bb:19:dc:42:
ce:b8:a6:21:e7:93:75:36:23:a2:ec:25:1c:e7:19:
3b:1b:d5:3e:5a:a3:f8:eb:c8:16:e8:c3:9d:35:d2:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:27:AB:B2:1B:86:9D:A2:D9:E5:38:EF:06:D8:13:53:01:6B:B3
X509v3 Authority Key Identifier:
keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:93:33:09:87:50:c3:c7:bf:70:c7:54:39:77:87:d5:48:dc:
75:5b:0f:1c:af:24:6e:2a:de:ae:42:2e:a8:ec:6c:00:8b:df:
39:4e:64:25:a8:6d:6f:81:be:a0:4f:80:52:51:46:13:83:47:
8a:d0:d1:66:21:be:da:23:8a:90:8c:4e:0e:b2:13:b5:c9:1e:
3a:8c:5f:04:51:04:46:e3:68:6e:84:ff:46:39:37:80:e3:d6:
b9:58:17:7b:cf:29:5b:e1:67:9d:b4:c5:fb:80:34:1d:6f:7a:
88:4e:2f:1e:b1:2e:69:55:ff:43:f2:4b:dc:7b:a7:c9:ea:05:
e6:5d:ef:7a:37:e8:93:d0:bc:89:8e:ef:78:ea:59:75:de:6a:
db:aa:44:6b:9d:76:fd:f6:82:02:8a:09:dd:73:26:a4:1d:01:
b1:65:bf:26:e5:62:47:aa:ed:ca:6d:3e:29:5d:b5:af:fd:1c:
08:2c:82:1e:3f:55:08:86:60:f5:90:f1:f5:5a:ba:6a:5d:26:
ea:52:1f:82:2f:e8:b6:b8:a5:8e:63:0e:2c:da:32:34:ac:9d:
fe:cd:82:39:38:34:25:2b:a0:7f:22:48:fe:9a:85:39:a4:db:
95:ae:f3:eb:59:f9:0b:4d:df:b8:93:26:61:1e:85:d6:44:ad:
2b:88:19:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF
RThFQjRDMkQwHhcNMjUxMjI3MDM0OTE2WhcNMjYwMTAzMDM0OTE2WjAYMRYwFAYD
VQQDDA02OTRmNTczYy0wNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnCQYPWzeapyerR+ok427U2Lgl6CMYEX9kDcBDgQ7iQs4skoC9/hROcAETc5
ja5pV36mbq95KhAciKkJYD4dOWO4pGxOJxJXruAhXXR7cW3f2WMJlJGbwOFryQtG
IQhdjCN1PwzPPZDLigPBr68oGOWCn5Ny9oTSNnKY1Heicvn1NGECFzciBzsn75Y6
J6fubt7DbaGGjZWJ1/M7oVi/xKkeRolYJTVs2Hi3WXtApyEfE1neoauACgeOGd+O
hBAzQ6ub6B4Xx+VcNkjsGjFI9YiBsRuaESa4/2ZnDbsZ3ELOuKYh55N1NiOi7CUc
5xk7G9U+WqP468gW6MOdNdJXQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIADJ6uy
G4adotnlOO8G2BNTAWuzMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC
QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG
ODJmWk1Fdno5eHJ1anJUQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgkzMJh1DDx79wx1Q5d4fVSNx1Ww8cryRuKt6uQi6o7GwAi985TmQl
qG1vgb6gT4BSUUYTg0eK0NFmIb7aI4qQjE4OshO1yR46jF8EUQRG42huhP9GOTeA
49a5WBd7zylb4WedtMX7gDQdb3qITi8esS5pVf9D8kvce6fJ6gXmXe96N+iT0LyJ
ju946ll13mrbqkRrnXb99oICigndcyakHQGxZb8m5WJHqu3KbT4pXbWv/RwILIIe
P1UIhmD1kPH1WrpqXSbqUh+CL+i2uKWOYw4s2jI0rJ3+zYI5ODQlK6B/Ikj+moU5
pNuVrvPrWfkLTd+4kyZhHoXWRK0riBlK
-----END CERTIFICATE-----
Generated at Mon Dec 29 02:25:30 2025 by rpki-client