This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json)
Hash identifier: kkpFHMTdAlBERyncrKv0CYdt19zK60A6aNoU7H1kWtk=
Subject key identifier: 07:40:A0:DE:1A:73:23:A0:AA:5C:A8:C5:1D:EF:36:4E:D5:FD:F0:B9
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial: 0573
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
Manifest number: 0565
Signing time: Sat 20 Dec 2025 22:39:55 +0000
Manifest this update: Sat 20 Dec 2025 22:39:54 +0000
Manifest next update: Sat 27 Dec 2025 22:39:54 +0000
Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: BUT5Q6oZZlFcxWw2lf9LVnyJNTngTWI521uciNyuFVE=)
2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: /IGLzAXuXU/u4IPTCqQf/9lVNO8RLs7YLaM82Km8Ccw=)
3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: VvF3MIz+4Br3ozt4JhOvNtBKtO8t7qZskpCQA7B+vs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Validity
Not Before: Dec 20 22:39:54 2025 GMT
Not After : Dec 27 22:39:54 2025 GMT
Subject: CN=694725ba-0f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:2c:13:8f:be:4d:23:44:85:db:d5:15:82:
ba:ec:27:ad:75:81:4a:52:bc:c8:0a:c2:4e:a4:bb:
32:c3:53:50:e9:a7:6e:e1:63:a4:70:e3:57:f6:78:
3d:76:df:d1:44:35:26:55:b4:f9:d7:73:7d:9a:21:
0d:23:30:c2:56:36:f3:87:1f:7e:96:37:1f:78:13:
01:15:55:68:72:c1:71:5d:c0:4d:2d:72:9c:4a:58:
17:f4:1c:22:79:c5:1d:ad:f2:fc:93:5c:6c:31:10:
18:1e:b0:6f:4f:4f:cd:c4:aa:9e:51:4d:20:3e:29:
62:22:bf:8f:03:d1:3d:5a:eb:4a:6f:80:ed:19:d5:
22:2c:eb:32:5d:ab:ad:b0:04:95:6f:99:43:88:c6:
85:d5:e3:39:8d:44:f5:37:55:43:eb:4e:ff:71:cd:
5f:81:76:fe:3f:d9:a4:b6:80:4a:a7:c5:64:15:ad:
6b:65:88:c1:37:09:2b:1b:29:15:5b:b1:e3:b7:7b:
77:ec:e1:cc:9a:ee:f0:2e:62:db:7b:81:6c:6b:d7:
c9:ff:19:48:8d:13:8c:0f:95:86:24:42:c0:2a:43:
be:80:f1:93:02:cf:0b:75:b2:70:cd:fc:f2:ee:ad:
b3:ef:f0:80:77:7d:61:b3:86:b1:f1:ca:bf:35:af:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:A0:DE:1A:73:23:A0:AA:5C:A8:C5:1D:EF:36:4E:D5:FD:F0:B9
X509v3 Authority Key Identifier:
keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:df:c7:c5:7f:07:6a:37:3f:ac:4a:7b:fe:93:a3:8f:17:
e5:f4:c2:ef:4b:07:cf:ae:d6:a0:b5:ad:3d:70:be:75:ac:20:
04:57:42:2c:c5:09:2d:00:e9:4a:f9:61:2d:92:81:8f:06:4c:
88:be:de:fe:3f:0e:73:f2:51:51:58:c5:f1:2e:c8:60:4e:a3:
67:6d:05:1c:a4:d6:04:63:47:80:04:83:e3:24:ee:1b:8f:7c:
7c:81:0a:60:27:4d:01:e7:aa:af:76:48:03:25:e6:01:05:d7:
01:58:ae:ac:25:36:f5:ba:ea:78:9b:b7:07:85:57:9d:84:45:
70:f0:66:d4:d4:30:f7:87:82:c8:d4:ae:d9:af:d0:a9:25:b9:
97:33:b4:8f:4e:77:14:fd:ed:04:5d:8e:7c:a2:15:0c:ce:a5:
69:4a:06:d1:3f:4d:a4:bc:96:7c:a5:f3:55:f4:2b:bf:50:54:
1f:cf:f6:3f:b1:db:c3:48:15:e6:ec:11:c2:22:64:ec:46:94:
74:49:cb:ff:90:06:f6:53:58:3f:cc:69:3f:ba:af:fe:1f:df:
e2:bd:98:a7:af:a5:2a:ac:d5:70:c9:af:ee:2a:10:7b:71:8f:
48:5f:76:8e:e2:0f:57:0e:e5:da:04:7a:b9:b8:a7:68:6c:78:
03:c6:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:19:59 2025 by rpki-client