This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json)
Hash identifier: JUr7F/kn22YazTf4Ou8kvXtmOhw3fe3cu9SEJFPwjtk=
Subject key identifier: 24:5C:24:C6:CD:93:00:64:3E:CF:F8:96:18:F8:8A:B1:79:AA:F7:12
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
Manifest number: 019E
Signing time: Tue 23 Dec 2025 02:22:50 +0000
Manifest this update: Tue 23 Dec 2025 02:22:50 +0000
Manifest next update: Tue 30 Dec 2025 02:22:50 +0000
Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: SRNRLSRVuTRKM1NYKKGv8x6rtWWlLRXQU5oTlVJlxJw=)
2: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: smI8KFtozrldpJMIbPknM0ia5ZaENjQghxfBZjdwPy4=)
3: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: Er3/MAuCzoGUHkL9sYAa/oK9eluVmQp9z5pkVAw9cAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Validity
Not Before: Dec 23 02:22:50 2025 GMT
Not After : Dec 30 02:22:50 2025 GMT
Subject: CN=6949fcfa-74f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:cc:76:ca:36:23:8b:2b:c4:59:63:62:4d:
2b:2b:af:c9:90:58:eb:51:4e:cd:e9:81:c2:af:34:
b9:9c:dd:7e:4d:d7:3f:c7:d5:57:c3:b1:c0:9f:69:
d1:ff:fb:ed:ce:02:79:27:7e:38:aa:f0:c2:b5:e7:
c3:a0:9d:47:5d:12:dc:19:cb:22:43:6d:6c:58:af:
1b:39:e9:fc:96:a0:c9:e7:e7:63:bc:51:4c:66:67:
42:dd:fb:35:79:77:dc:78:8d:f9:d7:dd:48:a4:bf:
9a:2b:1a:d4:55:4a:7d:dc:1d:a3:47:49:bc:c0:c7:
eb:80:81:e4:f3:95:0f:75:a1:5c:90:2c:55:19:4d:
4b:cd:f8:67:d7:75:e7:b2:df:5b:46:5c:91:91:78:
4b:47:e7:f6:c0:7c:a3:f3:a9:b1:41:d4:92:2c:dc:
e7:2b:65:e9:cf:80:74:0c:4b:2b:09:b3:d4:cf:41:
33:12:24:dc:98:a4:56:d0:ee:aa:77:32:d0:40:de:
e9:56:78:70:3b:f0:ae:1d:fd:b9:ab:e4:68:68:b9:
c3:97:f5:cb:00:09:cb:e0:13:65:ab:ad:65:f8:34:
89:88:65:67:ca:54:f3:76:3d:11:5f:71:72:a6:bd:
07:3b:7e:5a:0f:a9:61:07:4e:85:2d:46:ff:b3:34:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:24:C6:CD:93:00:64:3E:CF:F8:96:18:F8:8A:B1:79:AA:F7:12
X509v3 Authority Key Identifier:
keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:ca:1e:05:05:0e:14:dc:27:fa:ba:93:32:7c:78:23:27:
32:e7:44:e9:ee:d3:1c:b5:06:a7:02:70:9e:e4:3f:04:47:a5:
18:85:61:76:18:22:b7:ce:ea:3c:01:f3:32:04:fd:fa:3d:ad:
35:61:1f:61:48:a6:3e:b1:79:91:49:ac:96:19:e8:42:0d:18:
00:d0:09:81:18:5f:de:a3:4d:76:2d:35:56:51:31:d5:82:4e:
2b:67:f9:c5:7e:1f:ea:fa:0d:04:08:92:4b:63:80:63:b2:02:
2b:d5:4b:91:6e:ca:96:00:76:49:c7:52:c1:8c:f8:63:f7:26:
19:23:19:e4:33:83:95:32:0a:90:42:61:08:d4:2d:eb:20:6a:
b9:2d:9d:96:9a:5a:7a:f5:79:1d:3f:22:cf:44:6e:85:56:03:
df:f4:09:12:4a:93:2f:78:6d:80:11:7f:09:36:d7:a4:fe:ec:
32:d4:ba:9d:9f:7d:86:f7:a1:de:64:02:7b:de:42:9d:f5:a6:
9a:85:3c:28:fa:4a:18:1f:f7:0c:35:7e:ba:dc:17:fa:e6:c0:
dd:ad:24:53:59:e3:31:05:6b:e1:5a:82:37:60:b3:38:1a:4c:
9a:7b:fa:b2:9a:53:76:49:33:50:54:19:b0:62:38:9c:8b:7a:
37:ad:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:25:03 2025 by rpki-client