This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier: uipcetC0IyXSV4PBB3g/1mgq6/MpgrABL0aIFh5HKtY=
Subject key identifier: B6:90:C6:12:22:59:C7:D3:53:8D:C1:90:30:A9:EE:42:96:83:FB:29
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial: 0F22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number: 0EFD
Signing time: Tue 30 Dec 2025 18:14:38 +0000
Manifest this update: Tue 30 Dec 2025 18:14:38 +0000
Manifest next update: Tue 06 Jan 2026 18:14:38 +0000
Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: XvNJb0uM1G+r8Xj3pG3f5PDBa3IV+Kd8Xbv40ZmmYHc=)
2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: d+whIiEXh86M/fJB2X2sH2vZ5K1XYOVZNOCCGnxRDyI=)
3: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: UqT90GWN6u938kElL1el3jkr3x6UYEFJjNq4ar+p04k=)
4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: xi4yoyms06WhExaW9gu+Oo/FprIj45uriQGp+HkgIXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 18:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3874 (0xf22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Validity
Not Before: Dec 30 18:14:38 2025 GMT
Not After : Jan 6 18:14:38 2026 GMT
Subject: CN=6954168e-6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:53:79:c9:29:35:10:61:34:35:dd:b3:c7:
9a:30:c6:2b:fb:27:3f:02:54:46:9f:24:fb:16:7a:
98:d0:07:4f:7c:14:5f:dc:22:5e:68:b5:d9:ab:e5:
8d:ee:2d:81:75:ae:ce:39:18:11:25:dc:cd:9a:d7:
b7:75:ca:62:a1:2c:c9:60:f5:5e:63:02:bc:bb:12:
c3:85:c5:b7:ac:22:a6:3b:ce:ba:12:d3:3d:31:11:
e8:af:93:7d:de:2f:f7:5f:c1:eb:71:a7:2b:25:95:
83:f4:af:10:8f:04:1a:d2:b2:08:13:57:67:4f:a7:
28:e0:c2:63:17:e4:1f:93:b5:9d:1a:ea:d5:52:a6:
bf:12:f7:a0:01:4e:78:80:53:dd:46:17:03:3f:b4:
fe:23:c8:12:f5:28:dd:52:d7:44:ba:b6:a1:3a:d0:
52:26:89:d4:a0:86:67:fd:9b:bb:98:72:29:ac:5d:
c1:72:3f:90:9e:9d:59:f6:a4:ae:7b:cb:a5:50:76:
e0:ed:e8:01:97:9d:7f:a9:51:67:5a:00:08:2d:d0:
f2:a4:81:bc:60:1f:de:25:d8:ef:0a:19:47:76:b4:
ba:62:03:98:82:04:af:b8:51:9d:99:14:28:76:1f:
80:76:a4:b1:82:e6:81:01:6e:80:3f:c9:69:64:98:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:C6:12:22:59:C7:D3:53:8D:C1:90:30:A9:EE:42:96:83:FB:29
X509v3 Authority Key Identifier:
keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:e8:df:af:8f:a2:0c:81:21:0d:45:b7:36:63:93:a5:34:
29:c4:ba:39:b7:df:49:73:ce:b7:2d:2a:e0:95:c2:d3:a9:a1:
62:08:c8:0e:30:ec:9d:02:0e:6e:63:44:5f:8c:7f:d5:0a:e8:
05:4c:1e:d6:4b:e5:10:89:dd:86:6c:76:26:78:2a:ec:83:08:
5d:bc:43:8f:8c:9a:7d:e1:48:a7:64:3f:04:6c:ee:49:0d:82:
87:b7:0f:b1:9b:de:34:7b:1f:30:d1:0b:b3:cb:8d:6f:ff:6a:
e0:f2:6c:19:04:47:40:01:bf:29:42:06:5a:00:c4:87:cc:e1:
43:0a:3f:d9:dd:76:5c:72:23:25:6e:49:49:09:13:2a:b5:15:
61:cc:e7:e2:56:17:40:a1:9c:f0:82:16:5e:0b:d9:c5:91:1c:
04:12:a8:9e:7a:4d:0b:d5:fd:d1:00:8c:23:4b:e9:cd:1d:11:
51:e5:a0:7d:38:4f:75:82:ec:dd:62:fb:de:aa:6f:d9:e9:5a:
b7:75:d4:80:3d:1a:73:7f:0d:b7:6b:eb:a6:e3:56:2c:b7:bf:
44:20:2d:7d:1b:40:6c:87:ac:48:20:9b:20:10:41:c3:f6:4c:
ea:84:7d:02:ea:d3:d5:7c:95:5b:87:c9:c9:7f:4e:84:25:28:
e3:a8:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:42:46 2025 by rpki-client