This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier: YIywHJKF4/CT8EoXdH4zrxYiPo2iDtjZo0vCR8hhFdU=
Subject key identifier: 6F:59:DF:F2:C3:AB:64:84:C9:8C:D9:BB:8A:54:1F:5B:B7:14:F0:49
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number: 65
Signing time: Fri 05 Dec 2025 04:55:16 +0000
Manifest this update: Fri 05 Dec 2025 04:55:16 +0000
Manifest next update: Fri 12 Dec 2025 04:55:16 +0000
Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: zvJy58r8ksDR7cT2ShI2z5iowBagXxcacrJfLsOkBj4=)
2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=)
3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Validity
Not Before: Dec 5 04:55:16 2025 GMT
Not After : Dec 12 04:55:16 2025 GMT
Subject: CN=693265b4-e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:48:ce:6c:b6:a5:4d:e8:19:43:7c:92:3d:
a1:f0:b3:63:e5:e8:b3:82:ac:e3:44:d1:45:29:24:
a5:24:b0:52:19:2a:fc:b4:ff:16:1d:88:5a:2a:84:
bc:cd:95:2c:0e:b3:43:9c:94:ac:80:df:1c:59:5c:
dc:8d:ef:bb:c2:f3:9a:9f:3d:07:0a:9b:07:7a:5f:
ef:2e:4b:72:28:fd:c5:33:e6:db:0c:ca:d6:7c:42:
6b:8a:32:f0:db:ae:52:54:2a:f5:51:43:c3:d7:dd:
5f:1e:80:22:c8:d1:27:11:63:cf:10:51:ec:6f:cf:
c2:4b:cf:f8:25:c7:76:b6:87:be:52:3b:87:75:d6:
67:17:ee:74:d8:60:14:d9:19:c3:74:23:10:6f:e0:
d1:00:a9:2c:91:ee:ee:61:a1:c3:24:80:c0:d7:70:
ba:92:f7:07:4a:2c:93:00:17:94:a4:6e:90:ed:21:
24:c2:ea:e3:eb:b9:d3:6d:28:3b:5e:34:17:f8:76:
95:39:72:0e:e9:6d:4d:2f:62:b8:b5:bf:4c:6d:83:
f9:8d:74:cb:49:a7:89:b1:4c:50:62:55:71:31:82:
3f:88:78:e2:0e:ef:a8:f1:7b:70:e2:da:37:6d:27:
30:47:66:71:c9:c8:8b:83:cb:c1:ee:8d:66:16:c3:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:DF:F2:C3:AB:64:84:C9:8C:D9:BB:8A:54:1F:5B:B7:14:F0:49
X509v3 Authority Key Identifier:
keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3b:b0:5d:81:8a:47:65:3b:80:d6:de:95:24:ea:ad:44:0d:
ae:f1:3a:64:da:5a:8a:8e:01:fd:de:f9:b4:74:ad:c8:d0:d1:
f4:75:ff:99:8f:87:21:d4:ee:0f:3d:2b:e0:e5:f0:eb:b7:f1:
2b:90:df:6b:ed:9f:09:a4:67:57:87:ab:bb:04:3f:3f:c3:cd:
22:b7:e2:39:b2:63:57:93:f3:72:de:94:39:9a:3d:29:ac:c4:
83:ca:6f:3c:73:16:63:3b:34:fe:c9:ae:56:a5:9c:ec:c9:c7:
4a:65:24:51:a6:d4:99:bf:3c:05:08:8e:d1:8e:21:d2:93:8b:
08:e8:1f:b5:bd:79:85:10:14:3d:1f:b2:cd:0a:33:75:ad:0d:
e4:07:f8:54:fa:52:f7:e7:1a:6c:b2:f0:e3:00:5c:61:ed:34:
22:56:57:e6:c5:1a:e2:ba:24:9f:c6:69:e2:b7:8c:3a:2b:44:
05:ab:40:eb:93:5f:83:43:1a:d5:1d:a1:94:f5:32:c5:82:85:
49:c3:59:2c:20:08:41:27:b6:e7:bf:00:b5:65:f9:53:4f:b7:
e6:fb:31:a2:47:ba:84:91:d2:2c:a5:b9:c1:72:83:c1:3d:63:
fd:bf:84:14:b1:bc:df:27:35:02:7d:92:da:1a:b0:59:d1:50:
4b:60:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:50 2025 by rpki-client