This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json)
Hash identifier: kjoEfCV9l56nKkAIMwjXaSVsAMSEq6C88Znzht9zsl8=
Subject key identifier: 50:12:F7:8E:22:6A:92:7D:07:FE:00:27:F0:49:E6:9A:CD:1E:1D:C5
Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
Manifest number: 07C4
Signing time: Wed 31 Dec 2025 20:55:10 +0000
Manifest this update: Wed 31 Dec 2025 20:55:09 +0000
Manifest next update: Wed 07 Jan 2026 20:55:09 +0000
Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: 7gNNndv5EOwJRwBYj3Tct9kNiWUl0PxKnF7WH4t5hVs=)
2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 20:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Validity
Not Before: Dec 31 20:55:09 2025 GMT
Not After : Jan 7 20:55:09 2026 GMT
Subject: CN=69558dad-7fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:f9:21:b5:de:91:de:cc:e8:d4:15:e2:0f:
ab:fe:c5:76:81:b8:c6:2f:f7:47:d0:28:ea:9c:6e:
60:3a:c3:4b:77:bd:00:2d:10:7f:8f:e7:d9:b4:6a:
50:d6:fb:ab:27:b9:a7:64:13:0f:c2:19:cd:8a:6a:
30:ec:94:90:0a:6c:28:6c:2f:0f:9e:ab:d9:c0:8c:
c6:41:70:4a:f1:94:d9:ec:85:15:52:e8:c1:e1:80:
db:0f:99:41:1e:8c:0c:65:70:b3:12:8e:b1:70:92:
0f:34:e2:e1:88:76:0e:de:5d:70:68:c2:33:5a:9a:
70:fa:3c:79:44:65:55:0a:ff:3b:23:a3:92:32:00:
02:9e:11:96:08:0e:21:e4:a9:78:29:95:46:5e:17:
77:c5:9c:4e:e8:32:39:19:d9:39:71:46:4b:5d:a1:
bd:e7:a6:53:ea:a8:9f:aa:c1:f0:86:10:ab:7e:28:
54:b8:44:51:64:ab:03:50:4f:bf:42:a4:38:c9:25:
06:00:c3:c4:dc:07:5d:71:31:fd:a2:2d:fe:e1:8b:
fc:1c:48:8c:63:b8:ae:01:55:54:91:77:db:54:77:
68:78:75:d6:e1:94:0d:08:0c:35:24:ec:bd:63:44:
d5:64:43:4f:fa:78:fc:88:aa:85:b5:62:7f:03:bc:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:F7:8E:22:6A:92:7D:07:FE:00:27:F0:49:E6:9A:CD:1E:1D:C5
X509v3 Authority Key Identifier:
keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:5a:bc:5b:48:32:25:4f:e2:86:7b:80:63:a9:4b:ba:55:
f3:20:27:23:d8:48:35:ed:ed:6a:69:4a:51:f7:74:99:a4:c7:
b5:08:b8:03:7a:be:ee:35:0f:2d:42:2f:37:96:37:13:52:4b:
5e:23:21:1d:60:7c:b4:16:1f:59:1c:5f:c4:3d:53:39:57:1c:
2e:73:dc:5f:5b:e0:2b:4f:39:ce:81:78:79:2f:e5:7a:fd:d0:
35:f6:49:10:1c:7b:1c:21:ad:1b:69:46:89:aa:97:d3:de:fc:
89:8d:47:4b:ef:89:fa:a2:b1:50:34:92:53:8f:d0:d2:ae:d7:
32:21:76:f7:a3:83:36:0f:2b:03:ce:06:18:49:51:60:71:4c:
c2:67:17:b7:a7:a9:50:77:6b:24:55:b0:22:88:a2:0c:2c:74:
2f:2e:d7:85:4b:1b:83:63:9a:7a:18:31:f1:41:38:d4:26:c1:
db:82:71:af:b2:dd:d8:c0:ba:24:ba:25:26:41:01:d3:a0:7f:
32:42:58:6a:ad:33:46:69:e9:e7:f5:06:7e:f5:46:a3:7f:21:
11:a9:6b:2b:7d:2b:81:1f:4d:c0:59:92:e7:83:fd:d0:23:09:
bd:bf:0e:0f:3d:6a:3f:1f:5e:f3:a7:53:3c:c0:09:ca:07:e7:
4d:32:b2:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1
N0VEMzA0MTIwHhcNMjUxMjMxMjA1NTA5WhcNMjYwMTA3MjA1NTA5WjAYMRYwFAYD
VQQDDA02OTU1OGRhZC03ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmpX5IbXekd7M6NQV4g+r/sV2gbjGL/dH0CjqnG5gOsNLd70ALRB/j+fZtGpQ
1vurJ7mnZBMPwhnNimow7JSQCmwobC8PnqvZwIzGQXBK8ZTZ7IUVUujB4YDbD5lB
HowMZXCzEo6xcJIPNOLhiHYO3l1waMIzWppw+jx5RGVVCv87I6OSMgACnhGWCA4h
5Kl4KZVGXhd3xZxO6DI5Gdk5cUZLXaG956ZT6qifqsHwhhCrfihUuERRZKsDUE+/
QqQ4ySUGAMPE3AddcTH9oi3+4Yv8HEiMY7iuAVVUkXfbVHdoeHXW4ZQNCAw1JOy9
Y0TVZENP+nj8iKqFtWJ/A7yEowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAS944i
apJ9B/4AJ/BJ5prNHh3FMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0
QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W
cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBib1q8W0gyJU/ihnuAY6lLulXzICcj2Eg17e1qaUpR93SZpMe1CLgD
er7uNQ8tQi83ljcTUkteIyEdYHy0Fh9ZHF/EPVM5Vxwuc9xfW+ArTznOgXh5L+V6
/dA19kkQHHscIa0baUaJqpfT3vyJjUdL74n6orFQNJJTj9DSrtcyIXb3o4M2DysD
zgYYSVFgcUzCZxe3p6lQd2skVbAiiKIMLHQvLteFSxuDY5p6GDHxQTjUJsHbgnGv
st3YwLokuiUmQQHToH8yQlhqrTNGaenn9QZ+9UajfyERqWsrfSuBH03AWZLng/3Q
Iwm9vw4PPWo/H17zp1M8wAnKB+dNMrKT
-----END CERTIFICATE-----
Generated at Thu Jan 1 05:45:35 2026 by rpki-client