This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json)
Hash identifier: ZB0ksXILrU0Yx76xqwSzvtxs0kUlJcBw/Y6ptWGBL/I=
Subject key identifier: BB:FC:5C:95:38:54:C3:67:0A:44:9A:3D:A0:A4:59:01:9B:C0:AB:F9
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
Manifest number: 02EB
Signing time: Sat 06 Dec 2025 23:51:47 +0000
Manifest this update: Sat 06 Dec 2025 23:51:46 +0000
Manifest next update: Sat 13 Dec 2025 23:51:46 +0000
Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: AXdUo6HWbIvLEQUM4j3HqQwM6PdtGE9/DvN0fcPcjkA=)
2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: NeNLEWs48p2lioiKT2J3ps7UOEiJA4wkGqbLsVS/UVI=)
3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: xFC28v5UWT7Q3EvTeNVvDz0nPDxJaAuJAejlh2w2fns=)
4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: f/KJzPtE5DhAN8MxPkZ/p+zkW8uVVZhQWMpOA1Tk7TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Dec 6 23:51:46 2025 GMT
Not After : Dec 13 23:51:46 2025 GMT
Subject: CN=6934c193-9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:8b:61:b3:79:58:aa:82:36:b8:e8:ec:2c:
46:56:46:0a:ee:90:b5:46:69:a2:1c:da:36:76:30:
f5:c5:ea:28:b3:4b:24:ec:b5:9e:dc:36:1c:ed:55:
e6:26:44:d9:5d:59:b9:12:c8:6f:b7:4a:75:c4:dd:
97:7e:54:5b:2e:e3:6e:86:5d:f4:c5:dd:41:f6:3c:
a5:8d:dc:90:62:23:91:12:9c:3d:b9:18:8a:f0:cd:
c6:7c:99:86:d3:62:a1:d3:1d:00:24:49:4c:5c:cd:
95:6d:1c:37:80:52:fe:06:0c:4f:d1:94:ae:0b:a8:
65:87:06:86:2e:90:3c:d2:7e:e2:c1:56:5d:99:44:
db:83:34:c6:2a:4f:03:46:df:54:bf:42:84:ab:0f:
44:c2:b5:51:40:05:61:3e:ee:b3:f0:20:59:b5:db:
e3:9b:20:00:16:3f:77:b1:2e:25:8d:22:35:76:f5:
40:a8:77:9a:15:d8:fe:1f:78:8c:a7:41:2e:52:b4:
66:a9:44:17:a3:be:9e:30:69:d7:95:df:f1:f5:13:
e5:2b:04:28:5a:7a:fe:4c:2d:4f:5f:a4:a0:8c:7f:
32:18:27:8a:e4:7d:35:d7:92:04:d0:89:e8:ec:a1:
e3:9e:98:de:b3:76:a6:00:d2:78:62:bb:6e:c6:34:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:5C:95:38:54:C3:67:0A:44:9A:3D:A0:A4:59:01:9B:C0:AB:F9
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:79:b6:59:74:86:c7:43:2f:77:a0:c4:21:46:3a:dd:cf:
0b:4e:78:f6:ae:ac:df:37:44:94:ed:d9:d7:df:e0:44:cd:5d:
04:18:be:26:3d:e4:d6:39:c1:22:b1:77:47:5b:4f:71:d4:cc:
3b:c3:18:41:61:37:6b:88:e8:81:7b:69:5a:7e:c3:34:d7:71:
c2:ff:3d:14:31:3a:9a:23:0b:57:65:8d:68:fd:db:b1:a6:2d:
39:9b:fa:94:e1:e0:51:cb:bb:b2:18:cc:42:aa:1b:a1:e5:50:
af:33:84:33:f2:fb:ec:4a:45:56:a0:37:ee:ad:64:ac:51:2a:
8b:28:ba:7a:92:e2:54:d2:e1:c7:6e:04:6f:43:e3:3d:a4:bd:
03:88:1b:0e:c4:16:46:5a:97:e5:28:5e:0a:a9:11:97:f5:ba:
c6:84:37:33:33:ce:7f:46:52:55:1d:7a:d2:0e:4c:af:3d:19:
07:f9:cf:a2:13:65:07:5c:29:72:7b:52:d7:06:de:f6:7d:e2:
8d:46:b2:03:ae:0b:7b:10:30:a8:cc:da:fb:7c:7e:b6:1e:da:
28:1f:4f:79:cb:45:4c:ac:23:a6:81:be:2e:f9:37:5e:9b:0d:
90:5c:34:2e:2d:1e:2f:ce:3a:b1:1a:a8:ec:22:ab:b0:7e:9b:
de:ad:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:03 2025 by rpki-client