This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json)
Hash identifier: fpTWRQJwPrgtWCGXT94rYmzhYTZdAvNe5REHNt8OgvI=
Subject key identifier: 5A:EA:39:03:B3:6C:FB:C7:EA:90:77:B4:FC:3D:E1:B4:16:0C:2F:A2
Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
Manifest number: 0495
Signing time: Wed 24 Dec 2025 23:12:47 +0000
Manifest this update: Wed 24 Dec 2025 23:12:47 +0000
Manifest next update: Wed 31 Dec 2025 23:12:47 +0000
Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: 30NF2nYuqUQgY4saW/R6I+lw15yrOavpWXyHriHns3c=)
2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: fQ0lOTp636B6JzhaI+qZOzSOhRz2bX5jQhxvsBKg2Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 23:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Validity
Not Before: Dec 24 23:12:47 2025 GMT
Not After : Dec 31 23:12:47 2025 GMT
Subject: CN=694c736f-a88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:b9:62:d2:13:54:2e:3f:ac:f4:4f:d4:8d:
2e:6c:10:9f:10:97:f9:a4:83:e5:6d:31:b5:59:04:
df:86:53:ec:72:bd:3d:32:3e:da:4a:8c:94:4e:e1:
3b:50:9b:7a:2c:0a:ce:32:67:3b:70:cc:54:bb:82:
1b:73:c2:bc:1a:9e:a4:b7:ab:ce:a4:28:af:10:bd:
b3:0b:36:d5:cc:75:b6:2d:4c:3b:0e:ae:c0:3d:df:
20:75:cd:b7:8f:c5:2a:5c:dc:74:40:3f:e3:68:a8:
e4:35:4c:53:3d:50:38:92:fa:e3:5a:e6:85:46:0e:
7c:09:ca:52:63:4b:25:44:56:c9:0a:c0:a8:3a:86:
58:2d:67:e6:49:fc:c6:cf:44:f2:68:dc:e0:4f:f0:
20:11:2d:34:58:f7:6d:91:47:87:45:67:19:31:5b:
3b:c9:f1:8f:9c:44:c2:fd:d1:d6:90:56:cd:b1:13:
de:0f:4c:78:77:90:41:9e:02:bb:9c:05:a9:ec:4a:
e4:a2:38:3e:63:dc:ec:38:13:bd:d1:4a:01:a5:bb:
ac:ce:fc:eb:62:c1:f1:51:3d:d5:36:35:d3:cd:03:
d7:56:e6:05:46:07:dd:28:21:da:7f:90:3c:99:40:
af:b3:45:92:5c:52:31:a1:0a:91:0d:c9:78:7d:73:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:39:03:B3:6C:FB:C7:EA:90:77:B4:FC:3D:E1:B4:16:0C:2F:A2
X509v3 Authority Key Identifier:
keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:fe:31:f8:ff:5f:52:f8:c0:68:a0:f5:2e:dc:df:34:42:96:
7e:12:03:cc:ef:89:b0:1c:92:92:8b:56:75:cb:71:a0:9c:1b:
2f:21:d4:a0:f9:63:49:65:54:06:39:d2:97:f9:db:4e:47:b4:
00:f3:0f:f6:3e:1c:86:e8:b7:74:06:9a:60:c3:eb:5c:32:1f:
ab:67:d8:ae:3a:5c:ee:8e:16:d4:c5:50:26:c9:72:11:d4:3c:
9c:4e:89:f1:ba:a2:f9:44:f8:bf:21:7c:9e:93:e7:71:c7:d8:
df:33:57:0b:19:fd:b2:b8:06:32:17:32:c1:10:b0:04:36:73:
f0:2d:56:8b:38:87:9d:b2:2b:48:b5:ea:e0:5a:57:56:7e:05:
f1:49:3f:11:ed:09:2f:66:fa:a6:73:a9:bd:8b:73:5a:71:9f:
e6:a3:ca:55:18:9f:f8:8a:78:db:e3:b0:0c:03:54:1d:b1:91:
19:05:52:cc:2c:a6:f2:d2:be:36:4d:cb:5d:f5:19:d9:4c:03:
6f:11:7a:b8:49:f3:b2:32:ef:88:27:89:3a:db:6f:76:59:56:
4b:4c:61:a6:75:f0:7d:f3:f2:d6:5d:fa:2c:29:0d:07:57:01:
5c:33:e0:e9:94:00:6f:66:d5:00:1a:d0:71:28:26:d0:af:f2:
d8:31:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:51:19 2025 by rpki-client