This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier: XEtJiQJkZq3JcGrL8D4YOspSoqc/zwxj/0dRZ8JkAk4=
Subject key identifier: F2:2C:1C:90:6E:52:28:C8:F8:0D:40:C7:60:3E:B5:07:8B:39:44:81
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number: 60BF
Signing time: Thu 04 Dec 2025 14:15:19 +0000
Manifest this update: Thu 04 Dec 2025 14:15:19 +0000
Manifest next update: Thu 11 Dec 2025 14:15:19 +0000
Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: Y3fEoHye1oKmFipU86BsshjnqELQEdXeB6woeIfz3zM=)
2: 813E372A946711F081C10711C4F9AE02.roa (hash: kExd4zSpp7AjmXFgOmX60/PfKSK3ZoaisYrs5b1dJbk=)
3: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: hZakqVHe8O4RVi1dDA3NxvC3rtRxeZVjqvS+/bKAPhU=)
4: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Wde+/tbwO6emtqEAbVU9kd5LqQ/7rRJAB/r7M8LU5/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Dec 4 14:15:19 2025 GMT
Not After : Dec 11 14:15:19 2025 GMT
Subject: CN=69319777-a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:a5:12:45:81:18:f5:85:6e:a6:c8:27:4a:
64:e3:f4:c5:cd:3c:a6:7f:eb:6c:58:62:8e:8f:02:
5f:38:75:29:c1:a4:3d:b2:d9:e7:4f:c6:c7:63:35:
a0:5e:d7:fc:a1:c8:87:11:66:b1:e0:72:31:dd:9f:
1e:29:26:78:e2:23:08:18:b9:52:f2:2a:c0:7f:e5:
57:3a:24:0c:e8:49:03:25:aa:fb:fb:af:7c:f6:45:
3d:5b:da:d3:f1:ca:a8:dd:05:3d:4e:0d:80:aa:c3:
62:42:e6:fa:e3:90:0c:66:07:fc:3b:96:e3:26:aa:
96:e3:d7:3d:e9:e6:01:a0:02:69:01:41:d2:a8:5f:
7d:ce:88:ce:03:e5:22:17:b5:1b:45:98:86:7d:04:
79:f9:cc:9c:d4:39:37:71:0c:a7:ff:6e:ca:86:2d:
4d:33:80:ef:27:af:56:db:59:a5:b2:30:d0:cd:3d:
64:ab:d1:bd:4e:d4:90:f6:2c:70:1e:35:c0:35:db:
c1:ae:ef:ed:6a:db:47:fa:3c:57:55:50:3e:82:e0:
14:61:a4:9f:d7:2f:7b:eb:7f:b8:48:38:9a:f6:d5:
29:db:eb:74:53:d6:0b:73:b9:d6:8f:01:8f:71:90:
a9:a6:bc:72:11:33:00:55:b8:dd:20:e8:70:80:07:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:1C:90:6E:52:28:C8:F8:0D:40:C7:60:3E:B5:07:8B:39:44:81
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:24:13:74:98:ab:cd:dd:7c:8b:15:93:37:5e:08:6a:fd:
db:42:30:9b:a3:6a:3e:fb:6e:e3:b4:9c:ea:24:0d:f0:e1:3c:
4e:86:41:48:1e:1c:84:31:0d:23:54:be:6a:36:c6:8a:db:5c:
80:54:b8:78:e2:a4:72:3d:4b:3b:91:cd:d6:3c:b1:bd:27:32:
fe:6d:b6:3c:b3:36:04:40:55:75:52:09:17:72:33:85:21:21:
43:6e:fb:a9:2f:8e:af:2f:ef:c2:c1:e5:02:3a:d2:35:71:98:
b1:32:5d:d1:71:6b:a1:4f:01:24:9d:8f:57:05:69:e6:5a:57:
41:d9:14:0a:aa:b7:83:9f:e8:b2:79:e1:c2:a7:1b:6f:36:2b:
e6:ef:81:d4:13:19:75:13:7c:c3:15:52:8f:5e:03:de:1d:12:
f0:ec:51:6f:4e:b6:bf:36:9e:d2:bd:a1:d4:e8:6d:36:b6:04:
64:ea:89:4e:d1:51:6e:00:32:c9:ec:e1:4a:5d:c2:97:c6:e8:
c2:29:47:f7:e8:f6:22:a5:f1:c7:b2:53:41:c4:59:ff:f1:86:
2b:7c:1d:73:60:c5:49:61:1e:1b:88:42:18:8a:0b:ab:ec:1f:
1d:3f:d3:c9:cc:dd:5c:99:ed:63:ab:30:54:eb:81:76:96:ba:
8b:1b:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:09:35 2025 by rpki-client