This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier: vA+zFjUsoSDRzrZ0fXJWWMybk1Q4MGg59ROfXKFupx0=
Subject key identifier: F5:AB:DE:13:52:E7:3F:1C:D3:BF:AE:62:68:4B:06:CE:B5:B9:8B:BC
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number: 0373
Signing time: Thu 04 Dec 2025 23:17:26 +0000
Manifest this update: Thu 04 Dec 2025 23:17:26 +0000
Manifest next update: Thu 11 Dec 2025 23:17:26 +0000
Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: XzdIA6Ugroe2CvFOP4jHlNhZglcvbIjmS+cnx2e19Es=)
2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Validity
Not Before: Dec 4 23:17:26 2025 GMT
Not After : Dec 11 23:17:26 2025 GMT
Subject: CN=69321686-95c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:7e:7e:da:88:a9:54:b0:dd:26:ab:d5:a8:
51:16:fb:fe:af:e0:83:b2:1e:88:4c:62:a7:f0:c2:
a2:6d:ac:68:10:32:ff:45:32:b6:83:4d:fd:94:70:
32:9d:ae:3f:7b:23:74:31:b6:b5:df:4b:a5:5c:a0:
61:18:8c:54:89:67:7e:53:57:1b:8c:27:59:82:54:
15:93:06:cd:dd:cb:d4:34:8a:9e:02:25:10:d7:c6:
c9:f1:45:8a:ed:ad:53:99:7f:fb:56:97:84:93:3a:
6f:0a:e1:77:c3:56:3d:e2:84:f7:2f:d1:bf:8b:12:
66:16:d4:0c:5c:3c:0c:2b:bf:2c:18:6f:79:dc:13:
4c:f3:f6:ef:91:c7:76:31:2b:67:2e:37:d8:e9:cf:
d8:5f:e6:f0:e5:26:0d:8a:8b:0b:a4:ed:b2:31:a4:
07:df:2b:62:1a:48:8e:52:68:6a:28:15:45:03:d5:
c9:50:68:37:ab:92:06:95:cd:1a:c1:d1:97:69:92:
76:66:7e:ea:ac:f6:da:60:c9:4b:1f:d0:93:3e:7b:
fb:1c:6c:b3:5a:5a:af:79:b4:f6:56:ee:2a:84:ce:
66:bd:a7:a6:95:f6:a7:f4:f7:12:96:de:c5:ca:aa:
9a:a3:f7:c4:e1:c7:e3:66:82:9a:35:d4:07:0c:1a:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:DE:13:52:E7:3F:1C:D3:BF:AE:62:68:4B:06:CE:B5:B9:8B:BC
X509v3 Authority Key Identifier:
keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:87:0b:96:62:43:5d:61:e0:f4:27:8e:e9:3f:32:0c:e9:
57:c8:2c:1e:d6:fa:3e:f6:3e:88:00:0f:66:bc:e7:53:82:a1:
7c:bb:03:6d:12:9d:ad:03:d0:89:09:e0:d7:27:67:fd:05:26:
94:c4:c3:8f:46:19:ec:48:27:76:de:2e:b3:6d:53:b9:9d:b8:
ce:31:d9:bc:f0:a5:12:6a:7f:c9:d2:86:58:89:1f:d1:07:c3:
be:58:2a:b6:6e:b9:4a:6f:68:c3:88:37:69:83:73:bb:05:61:
eb:e5:5f:31:35:8f:c9:47:52:ef:71:c9:9f:a8:bd:fa:c8:5c:
3e:7c:92:4e:45:64:9e:42:d9:67:56:3e:88:52:a4:ec:32:f8:
ab:b0:93:af:a3:f2:88:3f:79:a9:7e:86:c2:5f:3c:fc:d2:09:
15:91:d8:1b:7b:84:11:c6:11:60:b3:2e:9e:d8:23:7b:9a:f9:
ec:83:08:c2:d3:0f:5e:70:f1:c1:e0:8f:06:d6:25:13:42:c9:
2c:f5:32:81:59:fe:a3:79:ec:e5:56:96:8e:4d:b7:52:9a:7d:
d7:55:b8:e6:d2:67:f4:d5:80:4d:2b:50:1a:9e:d2:1d:26:ee:
4a:ca:4d:61:2e:85:69:a4:65:cd:07:01:e0:41:43:bb:f3:7f:
2e:bf:db:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3
Q0Y4Qzg4RjgwHhcNMjUxMjA0MjMxNzI2WhcNMjUxMjExMjMxNzI2WjAYMRYwFAYD
VQQDEw02OTMyMTY4Ni05NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAycx+ftqIqVSw3Sar1ahRFvv+r+CDsh6ITGKn8MKibaxoEDL/RTK2g039lHAy
na4/eyN0Mba130ulXKBhGIxUiWd+U1cbjCdZglQVkwbN3cvUNIqeAiUQ18bJ8UWK
7a1TmX/7VpeEkzpvCuF3w1Y94oT3L9G/ixJmFtQMXDwMK78sGG953BNM8/bvkcd2
MStnLjfY6c/YX+bw5SYNiosLpO2yMaQH3ytiGkiOUmhqKBVFA9XJUGg3q5IGlc0a
wdGXaZJ2Zn7qrPbaYMlLH9CTPnv7HGyzWlqvebT2Vu4qhM5mvaemlfan9PcSlt7F
yqqao/fE4cfjZoKaNdQHDBrN2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWr3hNS
5z8c07+uYmhLBs61uYu8MB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw
MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2
RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeaocLlmJDXWHg9CeO6T8yDOlXyCwe1vo+9j6IAA9mvOdTgqF8uwNt
Ep2tA9CJCeDXJ2f9BSaUxMOPRhnsSCd23i6zbVO5nbjOMdm88KUSan/J0oZYiR/R
B8O+WCq2brlKb2jDiDdpg3O7BWHr5V8xNY/JR1LvccmfqL36yFw+fJJORWSeQtln
Vj6IUqTsMvirsJOvo/KIP3mpfobCXzz80gkVkdgbe4QRxhFgsy6e2CN7mvnsgwjC
0w9ecPHB4I8G1iUTQsks9TKBWf6jeezlVpaOTbdSmn3XVbjm0mf01YBNK1AantId
Ju5Kyk1hLoVppGXNBwHgQUO7838uv9u7
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:30:33 2025 by rpki-client