This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: R4myMYZT0CGyKVll1znRzCiTYKD/4rBjiw9XyX3JhwQ=
Subject key identifier: 22:72:C5:48:EC:5C:A5:80:B8:DE:D5:25:03:46:2E:E2:D2:D4:64:B9
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 04F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 04DC
Signing time: Thu 04 Dec 2025 22:26:18 +0000
Manifest this update: Thu 04 Dec 2025 22:26:18 +0000
Manifest next update: Thu 11 Dec 2025 22:26:18 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: MKq6jhj5dUe0KGv3jWTfdq7sNEyhezyHacf+aXZljRA=)
2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: iwDIeTH9jAKRmJy5+E9fAG3VbE729VNzq/7AMrBopsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Dec 4 22:26:18 2025 GMT
Not After : Dec 11 22:26:18 2025 GMT
Subject: CN=69320a8a-04dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:97:06:70:09:9b:67:d1:85:e2:ac:7a:b6:
6e:0f:ca:fb:e8:e4:93:3c:c7:e7:43:26:79:98:f3:
91:01:59:0b:2c:7b:6b:f2:47:7d:f7:9a:3c:fd:ac:
03:c1:03:8b:d5:64:1f:0d:3b:27:0b:1b:65:3e:1a:
55:48:7c:62:22:54:8f:7d:2d:3a:3f:80:71:cb:79:
d1:93:3e:23:e9:0a:62:01:11:95:8c:ff:b5:49:fe:
8d:51:b8:ca:fb:80:20:f7:5a:28:40:ee:5c:0f:09:
09:cd:a8:fd:18:32:e1:53:40:fe:70:26:e6:1e:fd:
0e:2c:ef:27:c2:90:9d:d4:47:0c:61:ae:5b:dd:d2:
ed:3d:44:34:f0:c6:90:ea:dc:61:5d:53:3a:46:9d:
c6:33:c2:75:1d:46:96:ba:e3:4d:e7:43:3e:58:5f:
6a:00:78:6a:de:d8:dd:2d:74:38:e5:35:91:ce:80:
e0:d5:41:e0:20:75:b8:e0:d7:1c:f8:61:a7:b2:2d:
fc:8b:1b:6b:cc:d4:87:31:78:bd:b5:6e:73:0c:ee:
36:8a:b8:9c:d9:7a:97:56:8f:62:85:41:c3:d1:00:
6a:1f:cb:35:f4:58:dd:f2:b3:df:1d:b1:6c:52:6d:
89:5d:4f:5d:b6:32:70:2c:e5:5f:16:fa:97:45:13:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:C5:48:EC:5C:A5:80:B8:DE:D5:25:03:46:2E:E2:D2:D4:64:B9
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:8c:a0:cb:4b:0a:8b:4c:75:f8:e0:1c:d4:07:06:a7:69:
8d:b0:fc:7e:34:07:6d:d3:1b:3b:a6:37:a7:67:7e:6c:b4:40:
e8:66:1b:b0:e7:88:c8:bc:7e:2d:3f:26:03:df:85:c7:13:8b:
ab:b8:96:15:b9:c0:b6:08:5b:c0:df:be:ac:a1:e8:7d:b8:96:
93:b9:a8:c1:f2:47:d2:c1:d6:dd:ac:a3:6f:75:0e:4b:e1:1c:
b6:31:01:1a:74:b8:ca:07:db:cc:14:e5:e5:f7:a7:6a:ed:cd:
60:68:0e:db:28:b6:62:06:95:d2:10:f9:8a:a2:5e:e7:32:48:
44:5d:d6:9e:f4:28:68:dd:5c:43:9e:95:95:24:82:dd:40:19:
bd:35:ca:72:94:62:40:6a:50:52:df:aa:a2:7e:fd:c6:c4:46:
d0:56:a8:b8:b4:63:45:db:2c:b6:c7:d3:17:2b:1b:94:89:0b:
13:e9:99:5c:c6:22:7f:a8:6a:39:1e:06:75:5d:09:7f:6e:dc:
5c:78:ce:6e:d8:11:a2:98:2f:6e:32:e2:f4:c0:1f:de:59:95:
a5:39:4a:25:46:55:4d:fe:a0:a7:b4:c3:7f:a5:e8:21:ee:f9:
d7:df:67:36:2c:53:15:5b:cf:bb:6c:7e:bd:dc:ac:52:3d:75:
d7:27:52:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy
QTNEQTUxMUUwHhcNMjUxMjA0MjIyNjE4WhcNMjUxMjExMjIyNjE4WjAYMRYwFAYD
VQQDEw02OTMyMGE4YS0wNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvX2XBnAJm2fRheKserZuD8r76OSTPMfnQyZ5mPORAVkLLHtr8kd995o8/awD
wQOL1WQfDTsnCxtlPhpVSHxiIlSPfS06P4Bxy3nRkz4j6QpiARGVjP+1Sf6NUbjK
+4Ag91ooQO5cDwkJzaj9GDLhU0D+cCbmHv0OLO8nwpCd1EcMYa5b3dLtPUQ08MaQ
6txhXVM6Rp3GM8J1HUaWuuNN50M+WF9qAHhq3tjdLXQ45TWRzoDg1UHgIHW44Ncc
+GGnsi38ixtrzNSHMXi9tW5zDO42iric2XqXVo9ihUHD0QBqH8s19Fjd8rPfHbFs
Um2JXU9dtjJwLOVfFvqXRRPgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJyxUjs
XKWAuN7VJQNGLuLS1GS5MB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy
OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz
bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+Voygy0sKi0x1+OAc1AcGp2mNsPx+NAdt0xs7pjenZ35stEDoZhuw
54jIvH4tPyYD34XHE4uruJYVucC2CFvA376soeh9uJaTuajB8kfSwdbdrKNvdQ5L
4Ry2MQEadLjKB9vMFOXl96dq7c1gaA7bKLZiBpXSEPmKol7nMkhEXdae9Cho3VxD
npWVJILdQBm9NcpylGJAalBS36qifv3GxEbQVqi4tGNF2yy2x9MXKxuUiQsT6Zlc
xiJ/qGo5HgZ1XQl/btxceM5u2BGimC9uMuL0wB/eWZWlOUolRlVN/qCntMN/pegh
7vnX32c2LFMVW8+7bH693KxSPXXXJ1LB
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:51 2025 by rpki-client