This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: LLMNs/9yAw7n+HmHKl8b/9MBDk4RTe0zvNNoNdCqHcY=
Subject key identifier: 50:C6:26:D0:A7:3D:EA:29:F2:85:FD:AF:CD:63:DD:16:5C:32:61:44
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 02EF
Signing time: Tue 23 Dec 2025 00:17:54 +0000
Manifest this update: Tue 23 Dec 2025 00:17:53 +0000
Manifest next update: Tue 30 Dec 2025 00:17:53 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: DHaob6mwzNuNq0YBDYUJA7+KWJPlj9AP6GRCQoletsU=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: le7JEqoYvZIMl+uq0wwq/akdNhi0QtrKh8LNnkVREXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Dec 23 00:17:53 2025 GMT
Not After : Dec 30 00:17:53 2025 GMT
Subject: CN=6949dfb2-0bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:19:bc:bf:1b:24:e3:81:92:74:f6:d4:e7:
14:10:42:39:80:8d:ae:ac:fc:a1:51:78:03:a5:23:
c1:bf:2a:37:48:78:91:d3:4e:1a:9c:7f:e7:cc:34:
86:8f:8d:23:b2:91:8a:4b:fc:da:45:59:90:8d:48:
ad:f8:64:e5:97:d1:f2:55:dc:f0:ed:a9:80:7a:89:
83:66:ba:25:08:05:c1:78:43:9e:a5:ab:e3:8a:37:
aa:63:bf:13:4c:17:e7:23:33:e7:d5:fb:4f:0e:48:
d1:f4:99:b8:bc:b2:6f:8b:82:15:00:eb:91:a1:15:
46:15:75:b1:c3:7e:af:17:7e:d0:12:11:a2:49:9d:
1d:e7:c8:7b:0f:fc:95:fe:1e:c1:aa:16:e5:29:68:
79:32:de:c8:ce:b8:42:eb:51:10:5c:af:d2:a0:7d:
7f:ca:72:f1:1e:ee:6f:fe:02:3f:d0:cb:74:c0:61:
c1:1e:e9:dd:58:0d:03:dc:4d:fa:5f:28:01:88:0d:
69:91:df:f6:dd:67:c5:66:47:54:cb:b4:5f:e9:bf:
d6:a4:b9:26:48:8b:a9:14:f9:b9:da:0f:5b:be:28:
a7:67:5e:81:84:3f:52:7a:78:ed:b1:6c:d8:c7:1f:
c7:c9:43:fb:94:58:71:d7:7f:fb:0e:46:d7:c3:6b:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:26:D0:A7:3D:EA:29:F2:85:FD:AF:CD:63:DD:16:5C:32:61:44
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:b1:37:54:c2:de:f6:41:0e:d2:35:d1:d2:e7:2b:4e:52:
55:d8:87:9f:3c:12:f7:f8:fa:2c:e6:30:49:ca:31:bd:a4:7c:
01:3c:22:8b:39:30:e0:04:81:34:c8:79:f5:9b:d1:2e:13:30:
7d:d3:5a:8b:38:1e:b6:f2:d8:6b:13:3c:e3:3b:a5:e5:72:e3:
a3:80:8b:81:8f:c4:83:11:4d:a5:65:c3:c7:99:9b:18:ff:da:
77:7c:7f:b5:71:c3:0f:ed:3a:cd:83:cd:d2:36:ce:1f:6f:de:
0e:cd:fb:c2:ce:46:4f:70:4c:3a:b0:aa:ff:e9:b9:09:d8:5a:
77:76:f3:17:f4:34:f7:65:96:ab:94:0d:33:ab:fe:1c:32:25:
4e:d7:b5:06:cf:8d:33:bd:aa:6e:8c:32:c5:7a:6b:5d:8b:c4:
1a:54:34:10:22:c8:0a:0c:47:3e:d2:7d:c1:2b:e3:36:ce:65:
a2:55:76:55:d3:05:55:d6:bc:4d:1e:2f:ed:a7:9c:46:71:09:
b6:da:c6:31:35:df:3b:dc:40:a6:8c:16:cd:57:79:03:a2:02:
51:bd:72:db:b7:f2:e6:ea:36:e7:aa:ae:1f:c5:72:16:1c:74:
4e:41:28:58:04:08:af:82:45:a3:0d:26:4f:ad:15:f6:b9:7f:
f5:53:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:18:13 2025 by rpki-client