This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier: bEcbacxUx1gU/6F/b+mTP5wDa+AmTl0AUiJhZDfbte8=
Subject key identifier: DE:19:A2:EA:68:AC:FF:90:30:42:D2:C1:8A:83:89:28:C6:3B:56:A6
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer: /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial: 0B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number: 0B83
Signing time: Sat 06 Dec 2025 18:21:11 +0000
Manifest this update: Sat 06 Dec 2025 18:21:11 +0000
Manifest next update: Sat 13 Dec 2025 18:21:11 +0000
Files and hashes: 1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: N998XjTTo91jta/tB4Q13cftppjbRf1R9uz9Ah+xYHc=)
2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Validity
Not Before: Dec 6 18:21:11 2025 GMT
Not After : Dec 13 18:21:11 2025 GMT
Subject: CN=69347417-072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:97:a0:03:70:1f:b2:8e:27:93:6b:36:cc:
e6:0c:1b:3e:9c:04:4f:db:f6:92:14:ab:57:4e:83:
21:c8:47:e4:07:2a:da:b8:40:9c:53:63:33:1d:3e:
c5:f6:bd:3a:a8:20:1f:c3:13:8b:1f:2e:f3:ff:93:
57:d3:d8:44:49:bb:ce:98:fa:c2:f9:46:eb:e5:b7:
50:48:53:2f:b3:f0:d6:25:68:a8:67:79:c6:58:ec:
c3:8c:48:fb:ef:75:71:83:e2:b7:3c:27:8e:e4:67:
08:34:68:ea:87:fd:9a:00:31:9e:c7:13:63:eb:43:
64:7f:c5:9e:00:89:ba:52:c1:85:e7:8f:64:69:94:
14:26:54:d2:3e:a8:cd:c8:0c:ad:0e:89:42:6e:db:
18:c1:11:7b:f5:24:ed:68:e0:8d:29:87:92:22:63:
58:3d:db:75:62:2c:60:b7:a3:f4:31:e1:e5:e4:3d:
82:54:8f:98:39:51:55:38:1c:a0:bf:f4:4a:c8:73:
42:bc:02:c7:2f:80:30:33:9f:21:d0:4d:db:dc:f7:
4e:83:23:1e:06:29:d7:10:3f:fe:91:27:a5:9d:42:
6a:6f:1f:4e:df:42:fc:8b:b9:eb:55:43:a7:15:81:
f4:d6:4b:5d:6c:72:c2:b0:e4:bf:a2:24:4a:b6:0c:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:A2:EA:68:AC:FF:90:30:42:D2:C1:8A:83:89:28:C6:3B:56:A6
X509v3 Authority Key Identifier:
keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:9a:1f:36:f5:f1:7d:59:84:04:9f:cf:43:6a:84:96:1d:32:
d5:99:9b:60:4a:a7:16:bd:bd:6b:7e:b0:08:ed:1c:1a:4f:e7:
d0:5d:53:c1:e6:08:c5:ad:62:c1:5b:82:96:7f:e9:c6:a6:21:
76:d8:53:72:2c:a9:9e:78:c7:6d:af:de:06:be:67:15:df:32:
be:18:be:01:d7:52:c3:63:45:64:a2:f8:a2:12:b2:7c:ea:e7:
7c:aa:99:1c:f8:18:c3:e8:a9:9f:eb:16:ed:73:96:55:cc:57:
da:07:6b:37:34:7f:ca:b6:5f:bc:34:78:bc:f8:f3:30:58:22:
3d:28:79:2b:ab:28:de:64:89:ae:22:36:ea:15:70:21:ef:e5:
d6:04:af:b4:fa:a3:6d:94:1c:d3:60:eb:d0:6d:22:d5:ac:9b:
dc:b4:e0:93:e4:c5:d8:78:4c:e0:95:da:a5:b2:c7:c4:1e:c0:
cb:68:20:e3:ab:38:fd:95:20:fb:02:aa:96:c7:6c:d2:88:a8:
ed:7e:c3:23:dd:5f:80:18:87:75:dc:87:5c:7b:3e:e5:e7:60:
cc:ec:bb:fb:c3:f5:70:fa:29:20:7c:38:08:ef:ae:61:33:25:
30:28:9d:28:e1:91:8a:50:ef:37:52:4d:96:c1:81:1b:a5:83:
fd:2f:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:11 2025 by rpki-client