This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier: P7FQvFA4+ZKzW3ofIrp9o4nIy/fJUhSBfs9hyHlO/ow=
Subject key identifier: 37:3C:02:8E:66:B4:76:EE:08:02:1B:8E:95:BB:C2:8F:FB:DF:45:A8
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 06BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number: 06B5
Signing time: Sat 06 Dec 2025 21:09:04 +0000
Manifest this update: Sat 06 Dec 2025 21:09:03 +0000
Manifest next update: Sat 13 Dec 2025 21:09:03 +0000
Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 1RlnOfDHRShXoKUNgdQbNZFWAJM/mTGm2eVFnE2u6L0=)
2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Dec 6 21:09:03 2025 GMT
Not After : Dec 13 21:09:03 2025 GMT
Subject: CN=69349b6f-0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:a2:5d:33:78:30:c6:69:ec:e5:63:07:4f:
60:0f:6c:d3:67:5f:fa:15:2c:c1:3e:b5:ec:0c:2b:
32:8c:2d:57:03:89:14:2f:b2:86:b4:fc:83:13:8e:
b7:e1:cb:68:0e:40:79:96:36:bd:6a:ad:ed:c9:4d:
a5:f2:51:e7:9f:69:83:e6:8d:7a:48:11:4c:3d:04:
e0:d0:c6:7b:90:01:b5:72:ed:70:4c:9f:46:d9:7c:
48:bc:fe:b4:2a:10:93:8e:83:8d:3f:85:f5:8a:d1:
e5:81:2e:a9:12:b7:3a:1f:87:6b:0e:e6:7e:8d:aa:
08:62:c7:9f:14:4a:4f:5a:8a:7d:9e:35:f5:8b:5d:
6c:c2:88:93:2f:8b:21:1d:e1:bd:67:fa:7a:67:70:
b7:ff:13:ec:5f:b7:00:49:d0:ab:98:b2:e1:b3:3d:
3f:05:b2:aa:95:8c:08:1c:00:32:20:05:d9:a2:58:
dd:51:c2:1b:65:67:28:b9:2c:93:b4:85:85:b5:9f:
b8:17:4c:f2:3b:94:32:bc:bf:51:93:2c:75:2a:15:
95:ca:3a:29:86:41:ad:9b:33:84:ce:66:ac:92:26:
bf:65:ea:39:14:e8:91:d9:0f:9c:f8:22:92:38:95:
78:54:e1:9b:ee:02:f0:5e:f5:31:95:d5:97:62:c1:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:02:8E:66:B4:76:EE:08:02:1B:8E:95:BB:C2:8F:FB:DF:45:A8
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5b:58:a5:6d:d8:6b:89:af:08:89:22:2f:06:08:da:76:75:
b5:1c:a7:f9:c8:67:42:d0:fb:41:c6:34:f8:7d:e8:2f:d5:f3:
be:bf:7f:95:e0:47:5b:5a:f2:06:0f:9f:93:cf:94:93:94:b6:
b5:3a:ef:a0:95:65:ee:15:03:11:32:7b:ed:c1:84:a5:12:49:
b2:cf:93:4c:ab:6d:67:b1:28:ef:c0:ea:f7:65:ef:73:ea:84:
3c:99:6f:96:6c:76:63:59:ec:37:0f:02:31:f0:47:1b:a3:4a:
fc:7a:52:12:00:42:dd:73:f8:8e:c3:34:7f:e5:4c:e3:49:cf:
98:7d:98:c3:8e:ce:17:6b:94:a3:2e:e5:47:cf:a7:b5:9f:b4:
49:46:00:eb:f7:87:3f:df:79:32:70:0d:ff:fc:37:59:07:82:
0e:e0:05:10:7e:b3:cf:06:88:69:ff:b3:00:9d:d6:26:b8:2e:
fa:ca:a0:6c:77:d1:65:bd:a8:15:f1:2c:07:e5:b0:20:b6:64:
67:c2:57:0d:4d:ee:81:ac:df:08:0e:36:4d:b9:a7:cc:b1:5e:
dd:9d:46:47:78:25:06:79:0e:73:ad:c4:46:63:88:a2:c5:f6:
00:10:dd:c0:84:fd:b5:45:2f:d4:f2:f5:fb:02:b7:e8:b9:d9:
be:8d:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:30:27 2025 by rpki-client