This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json)
Hash identifier: D8ekebgnKLeNIc38i0mVAx9Y2w8odHmchVHWnHZpMmc=
Subject key identifier: 7A:4C:B6:5B:36:46:63:50:BC:F8:3B:DE:5A:17:EF:5E:2A:26:65:12
Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Certificate serial: 0C97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
Manifest number: 153A
Signing time: Sat 06 Dec 2025 17:47:27 +0000
Manifest this update: Sat 06 Dec 2025 17:47:26 +0000
Manifest next update: Sat 13 Dec 2025 17:47:26 +0000
Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: rUuzY+MKY6El7uyYWVsf+1nbx7xTIUWPt83hkVUGjN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3
Validity
Not Before: Dec 6 17:47:26 2025 GMT
Not After : Dec 13 17:47:26 2025 GMT
Subject: CN=69346c2f-7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:76:35:9b:55:8e:23:5a:91:16:18:16:3d:
eb:5c:e6:aa:5a:4d:85:6a:24:66:58:48:46:78:5e:
55:8d:61:01:e8:ab:eb:ab:48:02:d9:af:15:46:b2:
67:a1:b0:c4:5c:16:b3:cd:13:bd:00:77:dd:02:26:
7a:dc:ca:3c:91:b0:c8:f4:dd:a6:5b:a0:55:aa:44:
b5:7e:0a:c0:be:75:b5:88:0b:12:5d:89:ce:60:63:
a9:08:fe:12:c2:2a:30:29:74:8b:77:28:8b:fc:31:
4f:a3:e1:6f:85:f9:f3:1f:0f:6b:71:e6:cf:3a:f8:
6d:44:91:1b:68:5f:83:7d:54:fe:bf:4b:b2:de:92:
7d:b6:ae:d4:69:fe:83:bc:58:6b:7f:d3:de:c5:c6:
68:7e:62:f5:36:3d:31:e1:76:aa:4f:76:67:63:60:
4c:c5:74:fe:43:4f:46:4d:01:94:60:7d:99:ea:9d:
54:e3:f4:5f:ad:64:fa:2b:cd:f7:a5:8f:67:d1:51:
88:7b:82:11:85:4f:d5:fc:c7:08:73:1f:01:42:e6:
6e:f5:be:e6:3a:18:6c:74:8a:fa:31:de:70:00:85:
a7:92:a4:6b:52:42:90:85:f2:76:10:44:c8:5e:4f:
e6:b5:7d:d5:d1:82:3e:2c:41:0f:84:5b:6b:6e:02:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:B6:5B:36:46:63:50:BC:F8:3B:DE:5A:17:EF:5E:2A:26:65:12
X509v3 Authority Key Identifier:
keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a2:e9:bb:7f:6a:9e:ea:b0:3e:4e:b6:f7:1d:22:d5:db:d5:
ac:26:50:4d:e1:4c:dd:13:6c:63:e4:f4:66:15:c8:e3:f1:82:
be:55:64:42:8a:f4:30:a7:7c:c4:04:c0:55:48:6a:70:43:ef:
47:f6:c5:d4:ea:e6:76:a3:4b:7b:3a:36:45:c1:4e:74:c6:e4:
31:11:43:45:b8:12:d5:42:18:3a:70:f3:af:59:c3:7a:4d:ae:
cf:3f:cb:52:9c:a3:37:af:62:c5:7a:8e:bf:12:2b:a9:1e:17:
b7:d6:4f:88:1d:ce:2f:a0:68:63:c1:4c:11:b8:b1:e7:37:19:
75:45:47:7d:61:b0:87:02:e8:78:23:5b:8d:4f:8c:b0:89:d3:
a2:2a:b3:76:b7:9d:e3:ad:00:41:fe:e9:1a:ec:a6:3b:d2:ce:
cc:b1:ae:10:82:c6:2d:0f:cc:56:83:03:b5:be:72:f9:1a:f5:
80:d1:74:68:09:b5:42:9c:a7:2a:93:71:09:49:3d:e9:cb:55:
ac:e4:2b:09:c0:3b:6f:c4:92:82:aa:74:e4:ab:5d:ce:a6:b5:
e0:50:50:d8:00:c1:de:3f:35:93:9a:f2:c4:2e:d9:f1:d9:fc:
51:99:fd:8e:2c:7c:15:51:1b:8a:ef:89:93:df:a4:3d:80:3c:
d1:f4:17:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD
NDY1MEZDRDMwHhcNMjUxMjA2MTc0NzI2WhcNMjUxMjEzMTc0NzI2WjAYMRYwFAYD
VQQDEw02OTM0NmMyZi03Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1EB2NZtVjiNakRYYFj3rXOaqWk2FaiRmWEhGeF5VjWEB6Kvrq0gC2a8VRrJn
obDEXBazzRO9AHfdAiZ63Mo8kbDI9N2mW6BVqkS1fgrAvnW1iAsSXYnOYGOpCP4S
wiowKXSLdyiL/DFPo+FvhfnzHw9rcebPOvhtRJEbaF+DfVT+v0uy3pJ9tq7Uaf6D
vFhrf9PexcZofmL1Nj0x4XaqT3ZnY2BMxXT+Q09GTQGUYH2Z6p1U4/RfrWT6K833
pY9n0VGIe4IRhU/V/McIcx8BQuZu9b7mOhhsdIr6Md5wAIWnkqRrUkKQhfJ2EETI
Xk/mtX3V0YI+LEEPhFtrbgKsQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpMtls2
RmNQvPg73loX714qJmUSMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5
MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2
bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCooum7f2qe6rA+Trb3HSLV29WsJlBN4UzdE2xj5PRmFcjj8YK+VWRC
ivQwp3zEBMBVSGpwQ+9H9sXU6uZ2o0t7OjZFwU50xuQxEUNFuBLVQhg6cPOvWcN6
Ta7PP8tSnKM3r2LFeo6/EiupHhe31k+IHc4voGhjwUwRuLHnNxl1RUd9YbCHAuh4
I1uNT4ywidOiKrN2t53jrQBB/uka7KY70s7Msa4QgsYtD8xWgwO1vnL5GvWA0XRo
CbVCnKcqk3EJST3py1Ws5CsJwDtvxJKCqnTkq13OprXgUFDYAMHePzWTmvLELtnx
2fxRmf2OLHwVURuK74mT36Q9gDzR9Bd4
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:20 2025 by rpki-client