This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier: OmITm0t+8ko/GA5cAZzomQmU6yPY10ljQGoGLAfr8OE=
Subject key identifier: 40:EC:6E:6C:B1:84:6B:DB:9E:A0:33:A6:ED:CA:DE:01:FF:2F:58:D1
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number: 0230
Signing time: Sun 21 Dec 2025 01:16:31 +0000
Manifest this update: Sun 21 Dec 2025 01:16:31 +0000
Manifest next update: Sun 28 Dec 2025 01:16:31 +0000
Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: F7ZhxUuWzRlAXNyqKChRKyMu8ixFgtEzErWRihVQQt4=)
2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Dec 21 01:16:31 2025 GMT
Not After : Dec 28 01:16:31 2025 GMT
Subject: CN=69474a6f-81d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:87:38:a6:77:ed:d3:f9:8e:1d:a9:f0:29:
73:df:69:df:99:fd:c0:65:41:de:f3:52:47:a4:93:
65:92:70:90:95:41:62:0c:df:10:bc:e7:c8:7a:9f:
5c:52:23:69:45:6f:f7:9a:d1:2b:4e:6d:5a:d6:db:
cf:b7:86:c6:87:ef:60:f0:7d:fc:95:04:b3:dc:54:
d1:3f:88:5e:d1:80:3c:30:e0:66:63:c5:e2:a3:ed:
c1:3e:ac:91:9a:40:91:08:32:1c:e7:0e:c6:3e:59:
dc:8b:78:85:cf:9d:8c:2a:95:85:b0:7e:0a:34:fc:
f4:e8:49:26:13:97:9f:61:45:5f:70:b2:6f:72:9d:
1b:fb:7c:a6:62:86:c4:c7:46:d7:f0:b0:5f:b9:d5:
33:0d:27:39:c5:36:3c:f6:1e:95:53:fa:0a:c6:00:
07:d5:8a:6a:36:d4:c0:96:9d:d5:46:4d:87:1f:9f:
f8:74:50:dd:88:e8:51:85:03:f9:5d:5f:21:c6:bc:
9a:d3:76:f4:79:f2:84:f2:47:fc:3c:7e:ad:02:bb:
70:f5:40:a6:72:6c:7d:2b:6a:9c:fb:d1:11:a2:54:
bb:71:4e:01:ce:aa:0f:a6:5d:b4:e0:84:34:8c:40:
14:6e:b7:1b:fe:a2:28:21:43:51:38:f3:94:cc:f4:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:6E:6C:B1:84:6B:DB:9E:A0:33:A6:ED:CA:DE:01:FF:2F:58:D1
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:5d:c3:9e:94:69:b4:b0:4b:0b:be:21:ec:6a:b4:a8:06:
81:e6:f0:0c:88:a5:04:e5:c6:02:3c:32:3f:5e:34:b3:f3:7f:
47:2f:97:e0:95:a3:6f:cc:61:9d:31:77:9a:0a:4f:f0:67:c8:
e6:08:3d:19:72:9c:ed:5e:1c:17:33:0d:bb:50:f8:5d:ae:fb:
29:c1:2a:cc:65:c7:8b:b3:55:74:35:71:51:f6:16:b4:3c:65:
9d:f3:00:e0:a1:04:4c:14:0e:bd:7f:d7:72:1c:a9:43:40:f4:
2a:5a:c3:61:3a:29:56:c4:17:fd:a7:12:fb:3c:82:04:13:25:
d0:bc:9b:77:fe:ca:cb:f3:d5:de:6d:9f:b5:c7:3c:a3:77:64:
d9:8b:c1:e4:7b:6f:78:d5:0a:e8:db:29:df:61:42:26:b2:df:
5e:46:3b:f8:95:be:1a:93:71:5c:d1:c7:cf:71:5b:dd:a2:44:
40:a7:53:0f:18:a7:f8:fa:99:ce:5b:05:60:af:32:dc:0f:e3:
fc:b4:41:7b:37:4b:c0:51:1a:39:57:f1:2c:49:d4:c4:87:ab:
f2:d2:bf:85:9e:4f:58:24:d8:96:4f:96:27:ec:26:b6:6a:5d:
e2:85:56:4c:8d:eb:cf:7f:b7:af:16:8b:49:29:b2:3c:a6:33:
89:c5:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:16:03 2025 by rpki-client