This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier: ViMh4dTUoKt6akHrRdgdd7toMA+25rD2bJ93G8Sj2nA=
Subject key identifier: FF:F2:0E:BE:75:13:12:0E:11:B8:F1:35:68:4C:F6:B9:B1:4C:87:99
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number: 072E
Signing time: Thu 18 Dec 2025 21:17:34 +0000
Manifest this update: Thu 18 Dec 2025 21:17:34 +0000
Manifest next update: Thu 25 Dec 2025 21:17:34 +0000
Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: u7yyVulxyr289AlgroduJofh4f7GdjPLpm0NfoFWd5M=)
2: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=)
3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=)
4: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Validity
Not Before: Dec 18 21:17:34 2025 GMT
Not After : Dec 25 21:17:34 2025 GMT
Subject: CN=69446f6e-8bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:06:73:5b:b8:2e:af:ed:22:c0:12:e8:3a:
96:31:76:28:32:48:db:26:17:0e:bc:16:b7:00:47:
8c:2b:56:e6:d2:f3:40:8a:66:a5:f7:c0:36:ab:5e:
e7:ba:2d:ba:3a:c0:23:13:23:55:95:6c:bd:8f:7a:
81:21:8b:82:bb:13:5c:50:88:bc:7a:ac:c2:4d:ec:
9d:86:cb:c7:45:b6:3e:50:6c:e9:de:83:0e:3a:71:
1a:35:79:80:02:e3:45:07:ca:ae:70:a6:c1:54:be:
88:38:12:67:ab:a3:98:be:24:af:a0:4b:c8:e0:f2:
31:20:0c:b7:a3:df:81:3c:60:5d:7e:64:2d:e2:62:
04:e6:fa:09:1e:87:dd:06:f7:c7:78:16:9b:1a:8d:
83:01:73:cc:08:c0:48:11:91:06:4e:42:17:2d:d0:
a2:9a:74:e6:89:0d:ee:c7:1c:f7:c0:ec:fc:7d:a9:
32:f2:8c:e3:f7:ae:0e:d9:c5:d4:79:4d:c7:1d:3c:
3e:37:b2:cc:ff:4f:f6:8a:8e:ef:66:b6:42:58:54:
6f:e4:e8:5f:04:df:11:43:bc:8a:72:47:3c:b5:d9:
ce:ef:80:f0:c9:98:84:8c:05:c3:a4:b1:c1:00:2a:
36:c6:09:6c:4f:b2:fa:2e:20:32:b1:f7:79:0f:a0:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:0E:BE:75:13:12:0E:11:B8:F1:35:68:4C:F6:B9:B1:4C:87:99
X509v3 Authority Key Identifier:
keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:e0:e8:c9:7b:ee:75:86:08:6e:5d:2d:eb:aa:94:ad:03:
7b:48:28:a8:6b:40:da:58:f7:35:d4:fc:c2:f3:46:35:79:a2:
06:68:ce:90:87:5c:15:e9:db:04:12:d4:b6:d8:75:32:db:d5:
df:b9:18:f9:b5:f1:77:aa:f0:c4:1b:6c:c8:42:2e:0b:67:bf:
0b:ed:19:5c:c1:79:e0:4c:2a:f4:18:f8:b3:45:ee:03:4f:4f:
dc:e2:fd:1b:be:6c:7b:9f:94:4c:2c:a9:4c:67:49:be:67:e5:
e1:1a:e1:45:c2:f6:bc:88:48:ff:f6:67:9c:ff:93:78:c4:c1:
d5:51:23:07:ea:ed:cc:ce:cd:f1:5c:3b:eb:26:76:62:ce:5a:
55:0e:55:d6:11:9c:8d:87:a5:fa:a4:9c:c4:80:9c:d7:3a:4d:
42:55:c9:f0:68:dc:15:ba:af:9a:28:7d:a0:42:7b:50:34:75:
9e:ec:df:5e:43:b7:e1:d9:33:45:a0:05:23:99:f4:13:31:4a:
75:07:9c:8b:0d:b0:46:d6:5c:90:9f:92:d4:55:a0:e7:d4:8b:
1d:59:b2:7d:8f:bb:62:90:68:57:33:97:37:5d:81:1d:68:e6:
0e:af:0e:5c:b3:31:76:cc:27:9f:ca:12:20:41:ba:51:57:e1:
7d:28:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:21 2025 by rpki-client