This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier: OxXBH6SLdXeH5PjBLgLNKBuRCcR2QMzhZZxrIOSGop0=
Subject key identifier: DF:AD:78:46:E8:75:1F:38:9D:7D:B6:09:19:8A:A7:77:D4:27:71:48
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number: 65
Signing time: Fri 05 Dec 2025 04:53:47 +0000
Manifest this update: Fri 05 Dec 2025 04:53:46 +0000
Manifest next update: Fri 12 Dec 2025 04:53:46 +0000
Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: 9UEfS3UxfL1E+Ex/Cs0qLluBmEOoMIzoNxziNjHAvkU=)
2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=)
3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Validity
Not Before: Dec 5 04:53:46 2025 GMT
Not After : Dec 12 04:53:46 2025 GMT
Subject: CN=6932655a-e7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:5b:84:af:6a:a5:99:55:e4:ac:cf:37:a4:
28:41:eb:1b:7d:30:3d:c3:39:dd:20:dc:92:bc:c0:
28:01:33:5c:b8:8a:04:28:93:70:bf:e0:4b:e0:f2:
b3:43:76:5c:a5:0a:8b:e0:d5:c0:d0:af:c5:bc:71:
bc:79:e4:d0:d7:03:9d:af:e2:24:6d:15:43:53:12:
cf:1c:ea:f1:74:67:60:24:c9:8d:37:97:a9:35:18:
b5:98:5a:d3:15:06:a4:0d:f3:d8:b5:e0:f8:b7:db:
c5:d7:47:d0:e5:51:00:95:15:23:a2:aa:98:05:76:
f3:d9:f4:a9:6f:5f:64:64:e1:6b:20:26:85:36:2e:
7a:83:09:32:c8:2b:80:e6:af:37:0c:8e:6a:00:29:
f1:26:f2:09:9b:8c:4b:10:43:c0:8c:82:3c:77:b5:
8c:29:d2:95:a6:f2:4a:05:0e:66:aa:19:e6:0e:79:
f8:f7:fc:d7:9c:51:de:7a:cd:98:25:31:10:51:e9:
91:f8:38:5a:40:42:48:fe:00:af:06:c3:1f:ec:a6:
80:84:1c:33:12:b6:9a:8c:79:6b:4b:66:65:85:31:
f7:d7:e9:fe:ce:48:b7:0f:cc:4e:fd:9d:55:67:c9:
a7:4d:cc:c8:33:36:a2:f3:67:7b:11:7b:ed:e4:f7:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:78:46:E8:75:1F:38:9D:7D:B6:09:19:8A:A7:77:D4:27:71:48
X509v3 Authority Key Identifier:
keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:16:37:ec:8b:db:46:b1:d0:c2:7e:a0:96:2f:4f:eb:f5:74:
46:e7:38:83:79:0e:4a:07:17:0b:40:b2:21:64:62:99:06:e4:
92:2a:db:aa:48:ca:96:25:5a:9e:80:d0:e0:ea:54:38:7d:c9:
24:18:e7:6f:ac:e2:03:00:70:52:ba:10:65:11:4d:a1:15:04:
40:b5:9f:0e:fb:64:ac:19:21:30:d3:67:6d:cd:99:e0:55:9e:
39:05:12:d5:51:f0:22:ef:8a:17:65:0b:f8:0a:21:ba:98:81:
62:19:32:0a:74:df:a7:16:cb:d3:3c:d3:37:9b:60:2d:bd:ad:
57:0a:f3:14:28:fe:ed:12:6d:9d:ca:70:91:c2:1f:2f:af:5e:
69:56:ff:06:c4:48:fe:e8:4d:33:f5:22:5c:ad:62:78:e5:d2:
ec:f9:c4:28:1e:09:ff:ba:11:7d:0a:9e:f6:91:6f:36:6a:54:
f8:0a:8f:8b:11:f1:e5:f8:8a:fd:d3:1b:a4:42:8c:8f:2c:51:
75:d7:4b:83:c8:7e:7b:fe:75:84:bc:bd:d7:57:f1:8f:12:10:
ea:16:81:52:10:ea:cd:c4:94:9c:bb:42:10:53:c8:16:94:20:
1d:81:c9:90:e0:16:bd:91:1e:0c:78:9a:94:db:85:d8:ed:69:
a4:31:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:52:18 2025 by rpki-client