This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier: X69ZhX3QolIT4mveX78AhUzQK8Y6ZNr3YRFvJHskKVU=
Subject key identifier: B8:EF:7C:A8:CD:C1:46:D7:D6:73:A2:30:2F:42:39:21:8D:20:18:45
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number: 0240
Signing time: Fri 05 Dec 2025 00:15:13 +0000
Manifest this update: Fri 05 Dec 2025 00:15:13 +0000
Manifest next update: Fri 12 Dec 2025 00:15:13 +0000
Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: NUzmIkakM+iCHDCbMAfgRnLUSnKtP1UJjgfrcBOQ56Y=)
2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: 93Fu4NJ+c74voGtnReTAbw0AMG9XfrkIqJTzM1zuS7E=)
3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: ZjsRW8EqZpvCIXMwCzwN2hfnGnkK/xWG3xWMJinw25M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Validity
Not Before: Dec 5 00:15:13 2025 GMT
Not After : Dec 12 00:15:13 2025 GMT
Subject: CN=69322411-5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:19:90:31:95:28:ab:f6:6b:2a:8a:92:69:
39:db:27:4e:d0:6a:54:25:fb:69:8f:e9:de:c7:d1:
31:f3:51:a6:27:b5:f4:91:89:76:76:06:0c:e0:06:
59:e3:aa:a2:dd:be:df:c8:a9:12:7b:de:9d:15:0f:
47:ea:87:e9:8a:e9:47:d5:cc:7c:44:14:4a:7a:43:
ec:89:39:d9:fa:b0:00:0a:2b:9c:49:aa:04:ba:d4:
77:95:68:53:cc:09:5b:19:65:80:ff:05:97:13:36:
c1:49:72:b6:dd:29:ba:87:f4:c7:e8:31:ad:4e:fb:
33:0d:86:50:06:60:b6:3f:c0:ae:f9:80:54:7e:96:
04:13:26:60:1a:63:5f:a2:88:a2:67:a8:3b:7f:92:
23:1d:02:7b:d0:bf:c9:c1:9a:6d:ea:b2:64:40:ff:
dd:3b:28:9c:79:dd:2e:41:bd:bb:2f:72:d7:3a:f0:
12:e9:0c:9c:74:6b:08:ce:f1:0f:78:1e:bb:d5:de:
4b:56:3f:2f:22:43:13:cf:24:36:6e:b9:ee:a7:4f:
e2:24:17:8e:d3:b8:e5:da:f1:40:f6:97:6a:9c:b8:
3e:ea:73:ed:10:29:49:95:3e:7a:bc:17:7b:01:67:
2a:22:d3:af:47:c8:14:77:be:63:2f:d4:14:33:4a:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:7C:A8:CD:C1:46:D7:D6:73:A2:30:2F:42:39:21:8D:20:18:45
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cb:b2:83:d5:0b:ec:62:a5:61:a3:41:e8:9b:f5:e9:21:5c:
f2:5c:a8:de:be:f4:15:86:92:a1:ac:df:a7:65:2f:b1:81:60:
74:bf:c3:39:68:d5:dc:07:74:53:de:f8:94:25:19:b5:cb:ce:
06:a4:18:81:66:5b:61:3a:93:91:5f:3c:9b:7f:1c:75:a6:b1:
13:fa:7d:d2:5e:e9:db:3e:1d:72:f6:41:e6:0e:04:8e:0f:90:
38:0a:0d:ba:cb:30:4b:b3:34:c3:93:91:f2:d9:95:f8:2b:83:
6f:c6:bc:da:8e:f2:65:d7:26:44:23:6b:2b:a7:3f:e6:0f:8a:
e7:d3:50:25:61:1d:c0:ed:b3:d0:6b:7a:31:e3:11:6e:90:94:
64:68:11:f4:96:c9:8c:2d:1b:32:b2:75:31:62:62:b2:34:e5:
00:3d:90:16:db:c6:5e:36:71:a7:a1:14:eb:26:e5:f7:b6:c1:
c3:0e:a0:2d:62:f0:08:60:3c:ad:8e:b2:02:5f:4f:5b:17:5c:
24:74:b6:ba:05:02:53:e1:1e:b4:24:de:75:69:52:ab:0d:4c:
77:98:c2:59:7f:0a:ae:8d:8f:2e:23:93:1f:6f:e6:40:38:47:
b1:f5:fd:d1:e3:72:4d:e8:91:4b:24:f4:9f:1e:2e:9b:1e:ac:
b8:aa:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:15 2025 by rpki-client