This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier: cU0IZbyDswL/i11XOPtkdHy2EEH/uTEyx5r1J7PQ03U=
Subject key identifier: 3D:D0:66:52:42:6C:09:5B:CC:85:40:46:E9:76:00:AA:22:5B:1F:BB
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number: 04EB
Signing time: Tue 30 Dec 2025 23:19:14 +0000
Manifest this update: Tue 30 Dec 2025 23:19:13 +0000
Manifest next update: Tue 06 Jan 2026 23:19:13 +0000
Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: eymawvk4qL8BMTyIiHBzFVFwSAfvg5Gz0sG0O7KY5as=)
2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: +7lQ2vZ2O9dISUBGN6anBTolmIgtjfTUnbA7p/Zk1lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 23:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Validity
Not Before: Dec 30 23:19:13 2025 GMT
Not After : Jan 6 23:19:13 2026 GMT
Subject: CN=69545df2-bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:52:17:01:ee:46:dd:86:e6:37:40:f4:e6:
72:d5:45:9e:3d:6b:6e:ee:55:6b:f8:5b:05:02:ab:
f6:14:f4:2e:d0:6f:07:d3:c4:8b:99:b3:84:ed:36:
6b:fb:49:7f:da:ec:3b:17:30:66:dc:d8:96:b7:e3:
d2:68:8e:e3:86:63:91:c4:6d:10:c5:b0:f6:db:a6:
59:28:ee:76:49:df:18:ba:e2:0d:8b:b9:4a:3b:47:
80:35:f7:45:db:22:e6:d3:03:04:b2:3e:31:29:92:
0e:15:36:da:69:52:35:36:b0:c7:1d:bd:e1:2a:b3:
a0:ce:0b:69:00:ef:d3:bb:8f:00:db:00:69:f4:84:
0b:39:d8:da:00:b8:83:5d:79:15:31:59:8a:04:cd:
d8:41:29:f1:a8:f9:c5:7d:88:74:be:79:2d:cf:df:
f8:63:33:49:8b:9e:18:8e:8e:01:01:c6:2f:fb:57:
1c:2b:50:e7:84:df:ae:d3:60:9f:da:24:d6:5d:43:
5e:cc:68:db:9a:72:63:66:db:e4:68:9a:28:75:42:
85:64:56:91:16:76:ac:c7:a9:69:1b:ca:4f:cf:fb:
f7:30:86:57:a6:1a:87:47:39:5a:42:27:02:a6:66:
65:e4:60:d0:62:75:e9:fc:e9:a8:67:e0:4a:79:3d:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:66:52:42:6C:09:5B:CC:85:40:46:E9:76:00:AA:22:5B:1F:BB
X509v3 Authority Key Identifier:
keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:aa:e9:af:21:2a:4e:34:a3:23:07:54:c6:03:bb:b5:5b:
57:49:fe:a0:42:a4:71:b6:87:1d:a7:c0:c5:93:31:f1:ef:58:
f3:d4:e7:c8:5c:76:35:4b:fd:77:4f:db:92:08:81:04:b0:86:
d3:10:5d:46:ec:58:07:5a:4d:28:c3:8a:d2:52:2a:c1:4d:13:
da:30:e9:78:80:80:eb:3c:22:bd:8f:6b:1a:0d:9d:6c:4e:57:
95:eb:ce:c0:02:87:b7:0c:79:c4:17:b5:a7:52:f2:dd:48:58:
7c:f3:3a:3e:6d:d5:d8:7c:be:05:20:ce:4a:c6:f7:be:91:dd:
db:bb:5d:4b:68:b8:be:dc:cd:39:7a:52:6a:ef:92:6e:09:fc:
89:5e:ca:1d:ce:65:4b:c7:a9:1c:4d:ee:6a:6b:b8:3f:24:5c:
94:95:73:97:cb:a1:ef:9b:7c:a7:9c:cb:74:1a:6f:df:bd:cb:
b2:3f:69:2b:0d:18:06:08:df:2b:98:d3:7f:7b:91:31:f7:11:
d5:27:22:69:1e:0f:4b:5a:26:3d:e1:cc:b7:4e:62:56:dd:8d:
e9:d2:13:15:c4:ea:a1:91:77:2f:0b:e8:3b:ed:bb:ee:dd:a6:
80:a9:f3:ca:86:8c:d3:01:62:93:6b:2e:bb:2a:75:49:4a:96:
95:e9:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 23:29:47 2025 by rpki-client