This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier: 8cdbEwJ1GU9rnZG+dhI/3Iy7GmJHV/Iu6uIlwtojbug=
Subject key identifier: 87:10:97:56:F7:E0:C9:79:98:6E:39:5F:90:9A:88:07:74:BE:59:E6
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number: 0702
Signing time: Mon 22 Dec 2025 21:10:03 +0000
Manifest this update: Mon 22 Dec 2025 21:10:03 +0000
Manifest next update: Mon 29 Dec 2025 21:10:03 +0000
Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: AzyJmdJ9QtaPMLF2Xf6o6KT0FUU9ukCpuiXrmyZgRMk=)
2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Validity
Not Before: Dec 22 21:10:03 2025 GMT
Not After : Dec 29 21:10:03 2025 GMT
Subject: CN=6949b3ab-1f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:55:ea:8b:f8:91:ea:0a:9c:2c:49:7f:2e:
ab:55:56:4e:65:52:7f:fd:99:9b:4d:e9:f1:d4:1d:
ed:ea:00:e5:52:9b:25:b8:0b:b1:73:32:da:99:3e:
9c:f6:28:ce:44:d1:85:a0:1a:67:eb:4d:8f:9e:f4:
22:9b:c5:19:8f:51:0d:0f:d2:26:03:e6:b5:7a:3e:
f8:95:70:9c:4f:db:4e:54:39:7a:ba:08:fe:a8:de:
89:26:d2:9a:f6:a8:f6:78:97:f8:6e:38:3b:68:4e:
c6:fb:07:2e:54:fc:61:f4:26:04:15:cd:46:b0:ec:
eb:38:ce:7c:0b:f6:da:80:c7:2b:19:e2:39:93:e3:
26:c8:bf:9a:c0:1e:af:15:31:1a:ae:60:75:dd:62:
17:6b:f3:0b:bb:b3:5f:bf:23:6e:93:04:73:12:4b:
2f:ac:48:11:f8:ec:a6:63:1a:63:db:8a:ce:74:c9:
64:cc:dc:a2:83:84:9d:9d:99:8e:7a:8d:55:87:5c:
a5:95:f8:af:c4:9a:f2:24:83:79:b3:98:5a:95:87:
0a:35:ae:8f:3d:82:01:c6:e8:22:57:8d:9f:ef:bf:
8e:c4:18:12:49:1c:77:03:91:ab:7d:e0:c6:82:ed:
52:d4:2f:2d:3d:a3:72:86:01:6d:f5:c8:cd:fd:6b:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:97:56:F7:E0:C9:79:98:6E:39:5F:90:9A:88:07:74:BE:59:E6
X509v3 Authority Key Identifier:
keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:4b:62:71:ce:54:60:1e:2d:be:ce:23:ff:c6:e8:8d:8f:
d8:49:76:0d:f5:8f:31:00:2b:36:6d:32:e8:80:c4:a1:09:ce:
36:82:78:95:f1:d7:d5:35:17:d5:52:7b:f1:4d:23:f3:d7:1f:
60:23:a8:07:90:7e:d6:38:e1:8b:e9:46:6e:21:2a:4b:8d:70:
27:45:4f:6b:4a:3e:dd:70:48:62:e2:32:49:14:87:a6:6f:46:
48:f0:03:9f:38:78:92:5e:44:90:94:36:ac:a2:cd:81:76:f3:
9e:4a:42:ac:73:89:dc:b6:a5:d6:a7:d6:1c:f5:00:99:be:3d:
b9:be:05:f9:70:81:14:c4:45:91:2b:12:c5:9d:0e:f1:53:b0:
56:52:6f:75:ab:58:e2:9b:25:89:15:58:48:56:86:8b:b4:42:
29:b7:27:f9:35:ed:e7:b0:62:3b:cf:77:09:f0:b6:60:32:f9:
7d:3d:df:b1:ef:45:63:19:df:dc:0a:9a:ac:9e:47:e1:5b:1a:
1d:60:02:dc:cc:f2:bd:69:a2:ef:a4:e0:ac:fb:4f:d3:23:f1:
3e:ee:86:70:52:90:92:89:81:47:c5:47:5e:18:2d:04:fe:8c:
be:4f:7a:81:1d:aa:b7:9b:7d:1f:c1:f7:b8:95:c3:63:10:4c:
65:f6:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:41 2025 by rpki-client