This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier: pUUuDMcsc1nYqtTSONCmbNxHIiVwFjK8FBlRl8SmCWE=
Subject key identifier: D5:AD:41:7A:BC:0A:E4:69:D1:54:F0:12:24:0A:7F:EA:27:05:5F:4C
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial: 0EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number: 1226
Signing time: Thu 18 Dec 2025 17:28:31 +0000
Manifest this update: Thu 18 Dec 2025 17:28:30 +0000
Manifest next update: Thu 25 Dec 2025 17:28:30 +0000
Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: CFKvu8CuVEYdm2MbrUjqwzo1qUXA6CKiRWXXwjw7O1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Validity
Not Before: Dec 18 17:28:30 2025 GMT
Not After : Dec 25 17:28:30 2025 GMT
Subject: CN=694439be-547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:d1:72:31:fa:b4:bf:4f:cb:48:01:b7:2e:
ad:6c:c3:cb:b9:57:a8:09:18:72:ff:a5:43:0b:93:
fd:a2:f5:94:41:69:20:88:5c:35:90:5c:a2:c1:92:
09:61:e9:93:b5:f7:a0:79:f1:f5:bc:59:bf:0e:5b:
99:d0:b9:c3:2f:aa:6b:60:ab:b6:52:c8:51:3a:af:
e4:52:e8:1f:8e:ec:2c:1f:ff:c3:3f:52:71:76:1d:
32:43:f7:11:eb:22:d6:ea:a8:01:fe:dc:90:4b:fb:
6e:cf:00:2a:6c:a4:24:24:5b:ae:68:57:c2:ea:3e:
8b:04:15:21:be:02:44:79:ba:96:16:0d:e7:29:f0:
12:20:94:0c:b5:24:a6:3f:64:36:af:0b:12:9d:ab:
06:6e:3b:cc:73:df:7c:b4:3e:2d:9d:01:06:b4:2f:
74:96:52:76:c2:66:04:b8:58:33:ce:b7:4e:a2:1c:
2d:fe:64:b8:03:e0:18:65:70:b1:e5:e6:10:79:7e:
c5:0b:bf:6f:bd:42:b5:6a:7f:31:a1:93:93:ba:af:
bc:2b:eb:db:01:0a:e1:f0:85:cb:ce:b4:f2:33:1e:
26:3b:97:77:b8:13:68:50:a9:d9:de:db:bf:6c:3f:
75:52:ec:6e:e1:5d:f9:0c:70:94:09:79:db:67:6d:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:41:7A:BC:0A:E4:69:D1:54:F0:12:24:0A:7F:EA:27:05:5F:4C
X509v3 Authority Key Identifier:
keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:f5:ad:b2:9f:07:1d:05:c8:c5:e1:6d:85:4c:ad:45:89:
67:33:70:eb:76:84:71:dc:5a:f2:59:18:66:a3:7b:00:62:46:
cd:12:69:d6:84:e1:7a:86:3a:1c:b1:cb:02:83:c0:36:c8:a1:
4d:e3:52:6c:90:ac:b1:ee:91:cb:09:4a:d1:00:1c:88:74:8c:
1a:09:ee:2f:9c:b1:81:d7:ab:e4:65:da:c2:65:29:1c:db:23:
c0:b8:2a:2f:1e:6b:0e:5e:ec:94:fb:d1:20:2c:8d:c4:e3:9f:
ae:37:e2:b0:ec:d9:49:a5:8d:0a:98:ca:ad:cb:cb:50:22:07:
7a:f2:9e:dd:1e:e5:09:7c:7a:09:c7:ed:43:60:7a:38:9d:3f:
a6:c0:a8:a3:21:77:00:9a:ca:f5:06:3a:b0:09:2a:b4:13:0b:
c6:1a:a4:b5:34:ac:b6:6f:d2:3e:7a:e4:b3:93:fc:41:cf:9d:
c6:71:f0:a4:9c:0e:12:f6:57:38:25:44:64:2b:21:b8:e2:77:
f3:db:be:66:b4:95:0f:0a:e5:88:88:ec:f4:a6:95:77:33:41:
51:a6:a3:97:d5:86:87:94:85:a1:ef:7f:bf:b7:8b:80:3c:08:
ac:88:c4:94:1e:d3:db:1b:9f:07:ed:98:5e:42:a5:e5:a9:bb:
96:a3:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client