This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
File: 8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json)
Hash identifier: B2yrFTpMfydjC3DAaNTx78WBCRtl8zDWNFe2DXv3ET8=
Subject key identifier: 4F:9B:17:4E:9A:7D:EF:CE:89:82:09:A8:A8:8C:9C:11:AB:6D:CA:A0
Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
Certificate issuer: /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
Manifest number: 9C
Signing time: Fri 05 Dec 2025 04:19:04 +0000
Manifest this update: Fri 05 Dec 2025 04:19:03 +0000
Manifest next update: Fri 12 Dec 2025 04:19:03 +0000
Files and hashes: 1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: ybUwvm/u9Z94it4R0c5mt8MK8+KHslmA9oTLdqtF/18=)
2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Validity
Not Before: Dec 5 04:19:03 2025 GMT
Not After : Dec 12 04:19:03 2025 GMT
Subject: CN=69325d37-edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:73:25:71:36:75:58:fc:4f:70:c3:81:d1:
ea:f3:08:a0:57:2f:89:2b:4b:16:22:72:52:ed:be:
12:92:3a:70:c7:f7:39:c7:50:8e:f4:2d:ab:9d:e6:
7f:cd:0f:17:1e:1e:d8:8c:88:22:2f:08:ed:08:76:
59:4c:82:17:5c:d2:a8:34:6a:de:29:41:d8:e6:10:
b7:33:2f:d6:72:df:a5:6e:12:ba:82:5f:f3:bb:30:
9b:1c:23:db:85:b1:d3:b4:12:6b:1f:a5:bd:56:ef:
02:be:69:37:4d:dc:ab:80:66:08:91:8b:55:5c:ef:
29:e6:a1:50:ba:50:57:63:d9:d2:90:45:cc:68:ce:
69:cf:73:b4:c3:db:5c:a5:b6:24:42:a7:58:8d:86:
e0:a0:8c:05:f6:59:4d:19:87:71:e0:dc:7f:a3:f1:
6c:9f:0f:f5:be:df:b1:4f:a2:bc:81:2d:c5:0e:e4:
6a:09:17:74:d2:66:2f:ae:84:28:90:21:b1:75:b9:
de:08:32:ca:1d:5d:26:a6:b8:85:d0:c3:06:0a:ba:
9e:8d:6c:6c:19:58:36:43:94:bf:24:5d:21:ba:25:
be:86:59:62:a6:01:f1:77:26:0c:68:4d:d8:52:26:
19:a5:90:ec:d3:f8:4c:07:78:bb:c5:1b:9b:04:fd:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:17:4E:9A:7D:EF:CE:89:82:09:A8:A8:8C:9C:11:AB:6D:CA:A0
X509v3 Authority Key Identifier:
keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:93:c1:73:c9:cf:df:f8:f5:9f:92:8b:f4:b7:60:bc:1c:
21:61:d2:33:5f:3a:9f:f7:a6:7f:da:b0:92:97:2e:92:49:d6:
5b:e9:9e:e8:bb:67:ae:2c:48:e3:84:c7:18:87:36:89:1b:d1:
40:56:86:3a:2b:b2:9c:e0:1a:1e:a1:bf:b6:1a:f9:b8:d1:87:
3b:cc:1b:6d:85:ec:70:b3:ee:ae:4f:a5:af:a9:53:41:f2:5b:
ee:b0:9d:34:23:a1:9d:79:64:23:4c:46:17:5b:2a:f1:93:69:
16:68:0c:61:4c:03:3d:6d:26:2a:b0:e5:13:e8:fc:dd:59:76:
a1:b5:1a:8c:7e:72:dc:c1:38:e1:3a:96:ac:c1:ae:37:06:29:
ff:05:a6:24:dd:9c:86:c2:fb:7e:25:4e:00:a1:9f:c7:74:dc:
ca:6e:ec:bd:c1:9b:8a:d1:e0:48:a2:6e:6f:eb:c8:04:d1:bd:
63:bf:3e:fd:4d:9d:4e:22:99:f4:f3:26:54:0e:90:e6:4a:e0:
b8:f5:c1:eb:c4:f5:85:eb:8b:65:9a:ec:0d:73:75:bf:16:dc:
e1:dd:08:6f:c4:e0:0a:2d:06:d5:ba:39:af:80:a2:8f:b1:29:
68:64:29:44:1e:6c:99:86:62:28:4f:f0:2a:46:0d:b0:02:09:
d5:d1:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:51 2025 by rpki-client