This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: CdGnT0ab1BbCMMn1iGjZhwWgq0mE/08siyy3dvr7uQU=
Subject key identifier: 37:90:2F:87:2C:1D:D1:0B:34:69:FA:A2:10:37:3C:3D:87:56:D3:EF
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 02F3
Signing time: Tue 23 Dec 2025 00:16:44 +0000
Manifest this update: Tue 23 Dec 2025 00:16:43 +0000
Manifest next update: Tue 30 Dec 2025 00:16:43 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: Zt7mXr2hpmUFxokbodayG1/Z/Kbpe2FhXXrVrYbmmJY=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: NeNLEWs48p2lioiKT2J3ps7UOEiJA4wkGqbLsVS/UVI=)
3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: xFC28v5UWT7Q3EvTeNVvDz0nPDxJaAuJAejlh2w2fns=)
4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: f/KJzPtE5DhAN8MxPkZ/p+zkW8uVVZhQWMpOA1Tk7TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Dec 23 00:16:43 2025 GMT
Not After : Dec 30 00:16:43 2025 GMT
Subject: CN=6949df6c-e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:bf:63:b3:95:79:15:3c:48:c6:e7:54:6c:
d7:6f:08:2e:6e:3d:9d:ed:2a:65:32:83:46:40:e0:
65:32:35:af:bd:21:a6:5d:62:ad:4c:33:66:a3:96:
14:cf:ec:23:17:10:c3:6f:81:bc:a9:b1:97:01:00:
e8:82:12:11:1a:69:18:84:5b:ff:76:a4:3b:05:82:
80:9e:c8:20:cf:d4:dd:b4:92:3f:03:92:f4:ed:26:
6a:9c:c6:28:4d:30:7b:70:2c:ea:f9:35:d8:05:89:
39:00:33:06:0a:86:18:1b:23:03:b3:cf:fc:b6:2e:
62:db:02:b2:b6:19:f1:4e:5e:a3:03:8d:68:12:b2:
34:64:ea:54:f0:8c:9e:8f:a7:cc:62:09:c2:7f:c8:
66:66:db:2a:34:a7:66:26:87:1d:0a:11:f6:44:23:
f2:07:76:03:f5:e8:23:84:a7:a9:cf:86:94:dd:7f:
94:a5:34:1b:74:09:7b:41:b8:e1:4e:8d:cd:45:9d:
fa:2a:31:a3:fd:55:90:4c:95:c5:ab:d4:ea:60:71:
e7:49:72:a4:5b:5c:ed:b5:be:71:3f:f9:54:fd:ff:
e2:54:93:c0:36:e9:ba:57:47:46:06:d7:f9:15:73:
a2:37:22:fd:d1:86:9c:67:53:e4:bb:7a:6b:ee:a2:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:2F:87:2C:1D:D1:0B:34:69:FA:A2:10:37:3C:3D:87:56:D3:EF
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2f:1c:b0:77:52:c0:17:93:4a:f5:15:ee:f2:3a:4d:04:43:
05:d8:d1:23:3c:c7:d7:27:62:b4:c7:39:73:8f:ad:e4:03:dc:
aa:8c:3c:0d:2d:7b:0d:9e:2a:fe:bf:fb:b0:71:40:ed:30:2c:
f2:a9:18:05:f3:76:49:a7:85:e4:a9:82:69:89:36:d7:27:7c:
cd:0e:6d:98:26:6a:c7:35:cc:8b:83:3f:dc:75:03:ad:d8:d5:
64:7c:0d:bb:8e:a1:54:34:8a:8d:1e:cb:4f:38:0c:d4:43:74:
06:c2:42:9b:4a:39:c5:81:ef:6e:1c:da:a6:3a:e3:85:37:e1:
b6:91:9d:2c:86:1e:5b:68:e9:95:dc:2c:47:13:8c:89:08:01:
2c:67:9a:5c:b5:49:4b:2a:4d:c9:75:e2:b0:f5:a8:dc:e0:47:
ea:5a:c4:fe:d9:6e:b4:cc:ef:0e:a8:80:0a:66:bb:cc:95:f0:
7b:4a:36:f4:83:95:d4:e0:12:ae:8f:fd:a7:a5:67:88:b4:ea:
94:b0:de:40:b7:53:75:bb:20:43:4c:5e:ea:17:58:16:32:2f:
a3:40:8c:28:b3:32:be:01:d1:d1:dd:8b:0b:ce:33:08:a6:61:
b3:f7:d3:b1:a6:6e:db:2b:4e:40:b6:b3:cb:f2:ef:2d:f1:04:
36:d0:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:14 2025 by rpki-client