This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier: CAnP7VRrfFeJxVtVvCuF6qB4NLmihFbQ9IwQ8UrMKs4=
Subject key identifier: 67:80:6A:15:C2:C3:74:03:78:EA:86:06:17:AA:C9:E4:FB:30:B8:50
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number: C5
Signing time: Fri 05 Dec 2025 03:51:08 +0000
Manifest this update: Fri 05 Dec 2025 03:51:07 +0000
Manifest next update: Fri 12 Dec 2025 03:51:07 +0000
Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: ++otjNscUFAzUxZf64tS3687BHjFRgIKKZ0jXk1NPTY=)
2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Dec 5 03:51:07 2025 GMT
Not After : Dec 12 03:51:07 2025 GMT
Subject: CN=693256ab-523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:a3:10:b8:07:40:13:86:44:c6:60:2f:a1:
2a:84:d3:5a:97:33:f6:d4:95:07:87:68:81:ae:1e:
17:b6:3f:c4:80:c7:d1:a6:4f:66:09:0c:b2:60:48:
ce:2e:78:9e:2b:b5:cc:a3:ab:8c:fa:d2:19:48:d1:
d6:e5:71:8f:69:98:16:4d:22:0b:c6:09:ff:3b:a9:
47:a8:1b:e8:bb:fe:15:14:94:f7:9c:72:c7:ee:8a:
42:ae:cb:1f:e7:1b:28:e3:2e:34:35:ec:ba:82:b1:
44:7f:33:f8:96:64:95:0d:ba:67:13:94:db:91:d0:
6f:22:bd:84:50:ac:35:0e:83:8d:ee:f4:81:57:57:
96:e6:70:64:66:d1:fb:91:91:75:08:ce:e7:89:fb:
5f:a9:cb:3a:4a:5c:43:65:17:7e:0d:16:21:44:f8:
ec:40:8f:9a:7e:6a:75:e9:96:4d:45:89:33:19:3e:
b1:69:63:01:61:1e:3e:bc:75:a0:5b:13:89:ab:57:
97:97:30:43:bd:e1:1e:70:37:09:df:db:13:8e:62:
dc:e6:53:ec:08:a2:fb:57:53:05:79:14:31:1f:a4:
f7:d2:b5:b1:17:a4:85:aa:5c:2f:f9:74:46:bd:f9:
98:03:c6:63:b0:7a:d4:ad:ec:fa:c8:00:18:2a:7f:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:6A:15:C2:C3:74:03:78:EA:86:06:17:AA:C9:E4:FB:30:B8:50
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:53:ce:4b:b3:a4:69:01:8d:0d:34:3b:c0:86:02:89:98:2b:
80:e0:6f:ad:58:f3:61:cc:16:4b:0f:31:e1:f7:f6:3b:93:0d:
a4:d0:0c:22:b4:e6:be:5c:63:33:10:d8:c9:5e:fd:29:c4:d7:
ec:f7:ee:b4:9c:d8:da:cd:db:85:85:8b:9f:7a:b4:44:90:40:
c8:bf:67:e0:47:f2:37:a3:bb:ba:f8:e4:43:8d:fc:46:ab:be:
47:1b:d5:03:de:94:19:94:5a:4d:8f:0c:c9:93:95:50:48:90:
1e:98:56:c6:f7:a0:69:ad:d4:48:02:f6:a7:aa:ff:f0:67:22:
75:98:8a:ca:d4:e3:6e:4e:02:b7:19:d5:b0:07:d6:14:f6:0c:
f2:a3:cd:9c:53:4b:70:91:90:69:28:f3:76:7d:a2:ac:3b:4c:
c6:a7:b3:3d:3b:3b:b9:fe:ff:1c:9a:a2:0f:47:42:e5:d3:aa:
cc:7e:b6:a9:5d:52:d5:9a:5a:a2:2e:17:e1:89:7d:a9:b4:64:
60:1d:e9:34:25:2a:74:da:3a:5b:9c:4b:61:f7:cf:b2:8b:da:
de:bf:02:f2:9a:45:b6:b7:21:0f:ea:4e:5f:15:e4:26:27:3a:
f9:25:7c:b7:df:60:97:59:72:be:d3:51:d8:d2:19:47:42:3e:
70:14:1d:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE
QzlFRTlGNzgwHhcNMjUxMjA1MDM1MTA3WhcNMjUxMjEyMDM1MTA3WjAYMRYwFAYD
VQQDEw02OTMyNTZhYi01MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzT6jELgHQBOGRMZgL6EqhNNalzP21JUHh2iBrh4Xtj/EgMfRpk9mCQyyYEjO
LnieK7XMo6uM+tIZSNHW5XGPaZgWTSILxgn/O6lHqBvou/4VFJT3nHLH7opCrssf
5xso4y40Ney6grFEfzP4lmSVDbpnE5TbkdBvIr2EUKw1DoON7vSBV1eW5nBkZtH7
kZF1CM7niftfqcs6SlxDZRd+DRYhRPjsQI+afmp16ZZNRYkzGT6xaWMBYR4+vHWg
WxOJq1eXlzBDveEecDcJ39sTjmLc5lPsCKL7V1MFeRQxH6T30rWxF6SFqlwv+XRG
vfmYA8ZjsHrUrez6yAAYKn9yOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeAahXC
w3QDeOqGBheqyeT7MLhQMB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy
ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVEOS9DRDU0RDczOEEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2
c2d2Z0hvX0h5UTdjbnVuM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClU85Ls6RpAY0NNDvAhgKJmCuA4G+tWPNhzBZLDzHh9/Y7kw2k0Awi
tOa+XGMzENjJXv0pxNfs9+60nNjazduFhYuferREkEDIv2fgR/I3o7u6+ORDjfxG
q75HG9UD3pQZlFpNjwzJk5VQSJAemFbG96BprdRIAvanqv/wZyJ1mIrK1ONuTgK3
GdWwB9YU9gzyo82cU0twkZBpKPN2faKsO0zGp7M9Ozu5/v8cmqIPR0Ll06rMfrap
XVLVmlqiLhfhiX2ptGRgHek0JSp02jpbnEth98+yi9revwLymkW2tyEP6k5fFeQm
Jzr5JXy332CXWXK+01HY0hlHQj5wFB2I
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:54 2025 by rpki-client