This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier: zRpaRseZtU63wXBch7/LYbGeiRQZZHlyv8MORcex1gU=
Subject key identifier: 54:62:D5:B9:A9:B5:77:6A:7F:8D:3E:1E:1F:97:9C:CE:ED:44:FD:EF
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number: 0800
Signing time: Sat 20 Dec 2025 22:02:00 +0000
Manifest this update: Sat 20 Dec 2025 22:02:00 +0000
Manifest next update: Sat 27 Dec 2025 22:02:00 +0000
Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: D13PbJ4Xa78VmtEPSsTmea6legW7j3pQezXl3FzDH+8=)
2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: KrHRF1GAdSejuwJPh8FeCiH4WaaXz6aXNUfwd0PIsqQ=)
3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: aHhZ09FyTGWuPL21l6sEGdPpH/ZI8e7Ar6oNdRPw5Co=)
4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: 2+pMen1/mVG17axHfaJf6K4zr5VFlLkq/JD7aEzO63s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Dec 20 22:02:00 2025 GMT
Not After : Dec 27 22:02:00 2025 GMT
Subject: CN=69471cd8-d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:fb:f3:2c:7e:cb:8c:86:f0:8d:61:41:a3:
49:21:d2:6c:78:4d:18:71:f2:ea:39:c1:76:b3:d1:
2d:18:c1:5a:12:2f:f5:1d:37:4e:66:4f:42:ed:71:
10:8e:42:cd:2f:20:bd:b2:b4:64:e8:bb:c8:b6:0f:
bd:53:ab:51:eb:07:ad:5f:96:bd:bd:4f:56:5e:4f:
dc:e2:bf:7b:ee:29:92:38:f6:99:52:02:fd:52:1f:
ab:c0:48:49:b1:72:5c:cd:df:cb:24:c8:2b:5c:40:
63:1e:ee:5a:c8:7e:a0:8d:c1:83:92:62:8a:3f:42:
cb:5d:fa:58:f4:fe:b8:dd:df:44:6d:11:60:7b:2b:
6a:93:36:3c:0c:b3:bb:80:f9:32:e5:82:53:79:d4:
2d:da:32:b4:4d:56:a7:d9:47:90:13:a4:c2:51:ae:
22:2f:cb:10:c2:82:51:d9:fd:1a:25:c7:8a:6a:58:
07:0d:92:55:8a:4a:da:d4:7c:0f:a1:9c:5a:1e:37:
b9:b4:72:8e:f8:1f:ca:67:d4:96:72:37:bb:15:ae:
cf:ba:a5:38:54:6a:ac:98:10:93:00:c0:9b:16:3d:
41:fe:9e:cb:8a:80:15:ba:86:6a:60:be:6c:ab:db:
25:3d:3c:4f:70:f5:cd:4f:57:8e:a1:2a:bc:9a:5d:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:62:D5:B9:A9:B5:77:6A:7F:8D:3E:1E:1F:97:9C:CE:ED:44:FD:EF
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:f5:bd:bd:60:1c:fe:d3:40:cf:95:75:56:0f:c1:09:ca:
2b:10:67:02:b1:db:8f:9c:4b:f4:40:db:e2:42:71:1a:ef:93:
c3:76:3d:25:f9:2b:a0:34:3b:5f:2a:51:4e:3f:7a:ce:ef:4d:
20:c4:0c:4a:78:d6:57:5e:fa:3a:ed:e9:5b:c8:b7:e1:48:7f:
12:b4:4b:18:f4:32:0c:03:2e:a8:58:a5:b8:fa:97:33:a5:e6:
a8:bb:da:84:5d:62:5c:52:d3:ed:14:50:55:7d:6d:33:45:02:
49:77:b2:28:62:73:97:ee:af:ce:4c:c7:57:7f:ea:b1:fb:74:
e8:52:ff:8b:02:18:42:87:fc:57:e3:d4:88:5d:ea:1a:8a:7b:
e9:9f:e4:7a:73:7e:cb:7f:04:45:50:97:4c:79:b4:28:94:c6:
b0:c4:fb:a8:ab:e9:15:ba:c7:3e:a0:37:02:eb:a4:85:23:85:
88:0b:22:a3:04:fb:fe:f1:9b:ac:ab:34:6d:38:7c:ce:96:4f:
f4:12:8f:86:7b:c4:02:32:23:5c:08:3b:bf:d7:67:66:4f:90:
a1:f0:14:92:80:fa:81:55:c4:07:b6:1f:d0:25:b7:59:fe:a1:
df:5e:c7:3e:f0:86:49:ae:70:37:b2:a4:4b:df:78:72:28:97:
71:bd:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:24:46 2025 by rpki-client