This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json)
Hash identifier: Vq4KwhdGSlYyHWcef00AQY5QY9oCHmPcQlH0+EeIMq4=
Subject key identifier: 94:65:8C:64:0C:05:FF:4F:28:AD:65:D4:2B:A9:AD:6D:30:43:14:81
Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D
Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
Certificate serial: 0668
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
Manifest number: 0A59
Signing time: Sat 06 Dec 2025 21:30:48 +0000
Manifest this update: Sat 06 Dec 2025 21:30:48 +0000
Manifest next update: Sat 13 Dec 2025 21:30:48 +0000
Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: LhaUnZBA2yTUfzB3lAFsGCERFHneBZJOysAR8B6vjXg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
Validity
Not Before: Dec 6 21:30:48 2025 GMT
Not After : Dec 13 21:30:48 2025 GMT
Subject: CN=6934a088-4f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:07:04:81:eb:b5:d6:56:2c:c4:59:ac:09:
23:5d:7c:96:39:8c:89:e8:55:08:ec:38:e5:b2:d4:
04:94:9c:3f:9b:ed:7a:6d:0a:eb:fc:52:e1:9b:e3:
e7:f3:61:c1:e9:1c:59:af:f7:11:44:8b:99:68:c3:
6e:ad:28:3b:1e:40:96:67:21:a9:0b:03:f2:7b:14:
3a:2d:3e:4f:0f:4c:df:fd:2d:8c:6b:55:b7:0f:37:
d3:bc:c7:d1:49:23:b0:c5:d7:5e:af:de:ed:cf:fd:
42:52:fb:94:8e:97:c6:bc:21:df:1c:fd:66:92:6a:
9f:e8:ef:31:59:f8:44:04:3a:c4:51:c1:47:c4:66:
a7:98:3b:85:96:b5:b6:d0:27:01:b8:61:1e:a7:9c:
45:7b:a2:ac:bd:c7:d8:e6:ef:ba:fc:45:87:97:52:
0a:c7:e7:08:42:9d:48:6a:66:66:f2:58:e5:7c:b3:
2d:08:ff:14:18:5e:0d:fb:84:3d:7c:66:00:ea:9a:
30:75:95:4f:51:bb:c5:08:60:83:05:10:c8:b9:4c:
3f:a9:dd:dd:19:18:96:ca:17:b2:f3:75:a4:0b:29:
11:6b:42:b1:2d:fc:ef:2e:fe:ec:09:d4:fd:3a:3a:
a5:e1:e1:9e:e7:2d:97:b4:e5:15:e7:df:09:d4:c2:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:8C:64:0C:05:FF:4F:28:AD:65:D4:2B:A9:AD:6D:30:43:14:81
X509v3 Authority Key Identifier:
keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:94:a2:ac:92:7c:a3:f0:6f:ff:4c:2d:40:46:0d:f3:e1:
33:93:a2:02:bc:5a:b5:f3:bf:5e:fa:6e:4e:ab:5b:a0:55:6e:
7d:da:7a:f5:15:a3:f6:ec:73:05:33:80:b1:6d:02:32:82:7a:
e0:0d:08:f4:59:61:c5:e1:55:f5:6f:0b:f0:7d:eb:b1:fe:4b:
07:1b:32:c5:d3:62:26:46:9b:c4:ee:14:a6:a7:db:c5:86:55:
d9:1a:4f:89:f4:6b:d8:d6:76:8e:81:54:94:4b:9c:fc:bc:12:
61:83:50:25:17:1f:60:d5:fc:1e:9d:6b:70:3e:0f:3c:d3:e5:
d2:c0:61:94:e2:40:10:92:e7:11:21:33:28:95:58:c9:ad:8f:
94:0e:47:8a:47:b8:e6:0d:04:86:55:56:ee:68:d5:e8:66:ec:
c4:a0:b8:3c:f0:45:e8:45:ce:66:eb:2e:f0:9f:89:48:b4:ca:
b9:e6:9c:c6:ad:92:2d:32:4b:ce:e0:1c:c8:7d:58:ec:98:2a:
0e:73:cc:05:1c:15:cd:22:0f:3f:21:ec:64:40:1e:ea:94:d8:
80:b8:6f:73:d0:c8:ee:84:95:83:e1:a9:23:ce:cc:20:d4:6f:
53:1a:f5:89:14:cc:cf:03:53:d6:63:b1:4a:d2:56:ca:4b:9e:
4d:df:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:19 2025 by rpki-client