This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json)
Hash identifier: E9oJn7hK55TCJx5gzJNpzaJfafiCq7r4/MjCF+pZaS4=
Subject key identifier: BA:B4:98:12:BA:82:8C:85:F0:C1:EF:26:4B:1B:FB:F7:54:19:9F:6B
Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
Manifest number: 019E
Signing time: Tue 09 Dec 2025 01:33:13 +0000
Manifest this update: Tue 09 Dec 2025 01:33:12 +0000
Manifest next update: Tue 16 Dec 2025 01:33:12 +0000
Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: D0Bix6eo6SN06Q8PoVv8p1yFTsZDAgxvlJa2s+uv6oE=)
2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: rJhU0HNeCO7s+q3+M9x1ayjXSA/Nsx02UCSMMgX+AUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C
Validity
Not Before: Dec 9 01:33:12 2025 GMT
Not After : Dec 16 01:33:12 2025 GMT
Subject: CN=69377c58-62c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:0e:b7:7d:27:bd:b6:42:fc:cd:e0:f6:42:
9b:e7:91:1d:0d:ac:fd:e1:09:7a:cb:8f:7d:a8:da:
17:90:af:de:74:9c:2c:61:a3:ca:7e:83:e6:56:1d:
e3:81:23:7b:a7:bc:d8:22:ea:02:95:6e:1f:0b:d7:
67:04:b4:bf:e1:f7:9a:da:ee:58:21:82:96:b1:5f:
3d:3b:34:58:f4:65:18:f1:57:9c:40:28:15:ba:3c:
da:a5:40:b5:e6:e4:33:7c:4c:d6:c3:55:70:f6:9a:
b6:ad:cb:a6:37:61:18:e6:ec:eb:be:0e:33:6b:67:
35:20:26:b5:ae:4d:4d:5a:9b:2e:04:d4:2a:2e:a1:
a2:e8:a8:55:d8:6a:95:72:20:aa:f7:28:44:d8:cb:
18:16:63:84:aa:7b:2e:92:9d:ce:13:76:22:53:c5:
8e:d0:83:41:5f:e4:56:9e:56:49:12:89:b0:ba:24:
4e:91:80:11:a8:a4:fa:ea:80:31:e0:d0:33:92:53:
8d:ea:b4:08:13:aa:0a:67:a0:70:ca:5f:1b:69:f7:
1b:e0:06:1f:dd:dc:f1:31:22:13:4c:fb:92:62:dc:
0f:0c:35:d1:d0:e6:77:a8:54:13:8e:fd:ad:39:57:
2c:4e:01:d0:80:9d:0f:f8:d4:fe:a3:d9:35:f6:0c:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:98:12:BA:82:8C:85:F0:C1:EF:26:4B:1B:FB:F7:54:19:9F:6B
X509v3 Authority Key Identifier:
keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:11:fc:84:ae:59:61:e5:d6:3f:7b:f5:6b:56:82:6c:08:
a9:4f:5a:70:4d:8e:57:20:c6:a1:83:a9:a0:ba:62:db:bd:58:
f3:1e:98:57:a2:d2:99:86:74:c7:61:4b:90:e9:45:67:c3:d1:
45:f3:9d:da:59:71:d0:40:0f:fa:df:f1:f9:2a:ba:79:02:8b:
3c:19:5b:7d:e8:79:bb:fb:61:b3:72:97:bb:59:54:2d:39:68:
4a:a5:41:b8:50:1b:7a:19:44:e2:eb:33:8a:dd:29:3e:44:ef:
84:3a:2c:31:70:5e:03:c0:d5:2f:47:a1:df:d8:e8:ca:97:d6:
4b:59:94:0f:1d:69:a7:bf:5b:71:40:95:17:d3:27:6e:93:b4:
25:56:83:98:b4:df:81:43:c2:73:2f:97:7a:04:29:83:38:c0:
29:1f:c1:43:94:90:2b:ea:88:18:c9:59:dd:85:56:2d:5a:d2:
93:1c:07:db:26:ba:7a:e5:9a:1e:7f:67:e1:0a:4a:ab:db:24:
32:10:57:76:ae:25:c4:bc:24:ae:15:60:5f:36:fa:a7:a6:57:
8a:50:bb:38:b7:8e:65:5b:bf:8d:ab:cd:aa:22:08:29:26:f8:
32:5c:26:3c:f8:e6:38:f6:f8:0e:0c:f7:22:8d:fe:b1:43:3a:
ea:4d:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 06:01:19 2025 by rpki-client