This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier: zPUPZcDriMytZtsMOvW1yY8zqGU3XWfyB6t/PtEnoRo=
Subject key identifier: 8B:72:10:35:5C:74:91:21:15:38:66:6F:72:A8:4C:93:ED:CF:EC:C3
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial: 0813
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number: 0854
Signing time: Thu 04 Dec 2025 20:01:27 +0000
Manifest this update: Thu 04 Dec 2025 20:01:27 +0000
Manifest next update: Thu 11 Dec 2025 20:01:27 +0000
Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: L8m8oVb2fdH0/wPFA7QCe0kQOvdEp1Bk+szvuLancx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Validity
Not Before: Dec 4 20:01:27 2025 GMT
Not After : Dec 11 20:01:27 2025 GMT
Subject: CN=6931e897-eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:c4:42:94:33:ca:24:cd:ef:d4:a0:c4:29:
bc:87:be:75:6e:b7:c3:98:32:13:84:8a:13:0a:4e:
02:10:cd:c3:52:fb:c3:da:e0:84:b4:38:c5:ae:fc:
de:42:f6:d3:b0:dd:46:f2:c7:89:98:08:03:51:84:
db:b6:e3:9a:bd:a5:6f:eb:2f:de:4a:28:a6:66:c7:
ee:41:f6:9f:bd:de:64:35:31:cd:9e:d5:d1:9f:60:
cd:e0:a5:91:53:aa:3e:06:50:c2:33:c0:e6:90:e9:
ff:86:c9:d8:70:eb:29:8f:68:6c:92:83:d4:ce:52:
4d:c5:91:b6:80:29:99:5b:4c:29:b7:85:0f:60:69:
b9:5e:19:34:0f:11:e8:e5:50:16:34:40:34:41:9d:
a6:6c:05:0e:4a:0a:de:59:89:d2:5b:77:47:91:1f:
f7:45:33:52:c7:a1:87:a6:4e:ab:98:c2:d1:6d:6f:
75:d2:3b:6a:16:19:d8:a1:2b:d1:fe:d3:9f:c8:c0:
73:5b:ad:1a:77:bf:d5:8d:8b:5a:c6:b8:f5:9d:27:
e6:8b:43:18:84:14:5a:d9:54:4b:03:9e:4a:0f:a8:
33:69:02:e3:d2:00:9c:a1:71:50:1d:9e:73:11:60:
ff:9f:2f:0b:fa:1b:02:35:7c:97:24:4a:89:49:ce:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:10:35:5C:74:91:21:15:38:66:6F:72:A8:4C:93:ED:CF:EC:C3
X509v3 Authority Key Identifier:
keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:ed:68:e9:a9:a5:f0:7b:66:c6:7b:34:b0:58:71:43:78:
2c:51:d6:cb:bb:73:1e:fb:17:1a:8c:ce:32:4b:12:04:56:c5:
a5:1a:8e:c2:2c:af:d4:84:3c:34:02:4a:5c:13:e2:c8:73:37:
5c:1f:49:8f:40:f0:b2:c5:71:bd:8a:7e:b3:0d:dd:fe:f0:e8:
bb:3b:56:24:fd:ab:f5:5e:49:d0:35:44:b9:5a:dc:ca:5a:8a:
b2:9d:cb:bc:ff:46:55:11:41:65:b2:6f:41:19:80:7b:ff:ad:
57:3e:c0:8c:5e:0c:4f:f7:f2:54:28:3d:d9:12:3b:0a:20:f1:
5f:60:b0:47:69:a8:a4:2c:5f:ff:c6:f2:aa:a8:c7:a3:d9:af:
1a:93:cb:50:8b:f3:00:48:e3:9b:e7:c5:10:65:f3:fb:ad:db:
ce:e7:c9:54:82:67:0f:b1:9b:9d:25:d7:0b:ba:52:18:1b:4f:
c2:53:f9:1c:dc:b3:b1:eb:2e:15:5e:ab:5e:74:1e:dc:cf:8d:
2c:84:cc:fb:e5:14:3a:4a:36:5c:b6:47:4e:9c:f4:78:bc:8d:
27:47:59:a7:7a:d6:bb:7a:f5:77:03:95:35:6c:fb:43:71:27:
40:b3:51:da:10:0f:a2:96:3f:5a:2a:a2:26:b0:a4:11:5f:ef:
a2:de:2e:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE
M0ZDOTM3NEIwHhcNMjUxMjA0MjAwMTI3WhcNMjUxMjExMjAwMTI3WjAYMRYwFAYD
VQQDEw02OTMxZTg5Ny1lYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3rEQpQzyiTN79SgxCm8h751brfDmDIThIoTCk4CEM3DUvvD2uCEtDjFrvze
QvbTsN1G8seJmAgDUYTbtuOavaVv6y/eSiimZsfuQfafvd5kNTHNntXRn2DN4KWR
U6o+BlDCM8DmkOn/hsnYcOspj2hskoPUzlJNxZG2gCmZW0wpt4UPYGm5Xhk0DxHo
5VAWNEA0QZ2mbAUOSgreWYnSW3dHkR/3RTNSx6GHpk6rmMLRbW910jtqFhnYoSvR
/tOfyMBzW60ad7/VjYtaxrj1nSfmi0MYhBRa2VRLA55KD6gzaQLj0gCcoXFQHZ5z
EWD/ny8L+hsCNXyXJEqJSc6c7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItyEDVc
dJEhFThmb3KoTJPtz+zDMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy
NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY
Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXQu1o6aml8Htmxns0sFhxQ3gsUdbLu3Me+xcajM4ySxIEVsWlGo7C
LK/UhDw0AkpcE+LIczdcH0mPQPCyxXG9in6zDd3+8Oi7O1Yk/av1XknQNUS5WtzK
Woqyncu8/0ZVEUFlsm9BGYB7/61XPsCMXgxP9/JUKD3ZEjsKIPFfYLBHaaikLF//
xvKqqMej2a8ak8tQi/MASOOb58UQZfP7rdvO58lUgmcPsZudJdcLulIYG0/CU/kc
3LOx6y4VXqtedB7cz40shMz75RQ6SjZctkdOnPR4vI0nR1mneta7evV3A5U1bPtD
cSdAs1HaEA+ilj9aKqImsKQRX++i3i53
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:47 2025 by rpki-client