This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: 52hudL/e/oOJbFZS08MlMf8JypvtR5k6JIf21pJGY6s=
Subject key identifier: 77:A4:7C:5D:40:34:AE:6B:B5:29:69:50:8A:15:5C:84:B5:F8:8F:3C
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: CC
Signing time: Fri 19 Dec 2025 05:02:50 +0000
Manifest this update: Fri 19 Dec 2025 05:02:49 +0000
Manifest next update: Fri 26 Dec 2025 05:02:49 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: ISBlwlHZzADugohnIuSEUVGx+VA2QedPqNMYqn3OqdM=)
2: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=)
3: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=)
4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Dec 19 05:02:49 2025 GMT
Not After : Dec 26 05:02:49 2025 GMT
Subject: CN=6944dc7a-5fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:06:8b:39:95:25:d9:16:4a:5d:9d:85:80:
7b:33:e3:38:b7:33:71:40:0d:ae:73:3a:e0:8e:ce:
1f:12:f5:7f:03:33:66:12:8f:f5:46:fb:3d:9c:5a:
db:c3:42:43:d0:d7:50:54:5a:67:68:83:54:2f:13:
98:cd:f5:cc:61:53:51:ff:ad:76:02:61:a8:95:49:
d1:b9:9a:06:85:b1:44:00:cd:27:e7:58:64:e7:1c:
bd:bc:e1:65:8d:82:15:6a:cc:cf:1f:ac:6f:df:2c:
7a:70:2a:68:7b:25:87:94:ca:e2:95:3b:70:cf:ce:
77:3f:0a:5b:d2:cf:26:63:a0:fd:d0:eb:bd:2a:ee:
70:e7:99:82:1d:38:16:6e:57:68:ee:b8:6e:65:55:
93:44:68:ce:82:1e:f1:fd:96:cb:a5:de:56:1a:db:
bd:f2:32:32:39:a7:87:06:08:e9:5c:78:0d:6d:9d:
c1:5e:14:bf:14:a7:c5:79:7c:98:8f:cd:4e:8b:fc:
f0:06:08:b2:3f:ce:7b:f1:36:7b:e0:e4:52:98:81:
d0:e4:8d:e3:ec:70:bf:f7:8a:c4:a1:1a:c6:24:ba:
e1:58:69:3b:11:a4:1b:c9:2a:c7:4d:2a:19:f2:87:
a0:e2:24:56:e6:69:b6:8c:34:4b:e7:ff:ba:78:86:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A4:7C:5D:40:34:AE:6B:B5:29:69:50:8A:15:5C:84:B5:F8:8F:3C
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:60:08:6b:4e:38:e2:77:01:86:cb:26:c5:f0:bf:59:54:1f:
cb:5f:77:36:41:ba:88:f2:dd:ef:d6:ab:3f:14:1d:21:b8:1b:
ca:80:5f:b8:0a:7a:f5:fe:1e:ee:c9:2f:26:3e:c6:fc:5f:13:
75:30:0a:f8:1b:8d:09:ee:ca:10:01:80:77:cc:57:e9:d7:b5:
8e:b1:28:43:87:bf:9c:47:12:3e:ce:a1:c2:e6:fe:b6:2c:47:
65:fa:f5:65:8a:14:e1:bb:2f:97:d9:ff:9d:05:f1:a6:3b:e9:
51:76:b4:a9:fd:14:b2:14:d8:91:92:87:6a:56:b1:de:90:d9:
b8:8f:45:36:00:e4:dd:f1:5b:02:5d:e0:58:c2:7f:19:e8:cd:
47:b5:e2:2f:98:5a:12:02:b8:f8:59:2d:dc:58:fe:b6:52:1f:
95:fa:ef:66:cd:42:23:48:b3:08:49:ce:40:e8:21:bd:23:bb:
2b:bd:c7:c1:b4:b8:fa:b8:b1:ec:9e:3e:59:b1:56:4e:75:f2:
cc:7f:37:20:0c:80:4b:52:f6:87:c3:0f:35:e6:ea:91:e2:27:
7d:67:ac:d0:79:9f:5f:5e:35:20:fb:fc:fa:80:13:e5:e2:13:
72:a5:12:e8:7d:1d:d6:41:da:62:cd:3a:e1:12:b8:b0:9f:af:
95:ed:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:34 2025 by rpki-client