This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: dAzydBjKaBZMcz5BNtoNjr0qCXWKUKpyyGLZD9iARy8=
Subject key identifier: BD:2C:59:7A:C0:E9:8C:D0:C4:FF:86:98:21:B9:A7:0C:D6:7F:5F:B8
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 0742
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 073C
Signing time: Thu 04 Dec 2025 20:39:03 +0000
Manifest this update: Thu 04 Dec 2025 20:39:02 +0000
Manifest next update: Thu 11 Dec 2025 20:39:02 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: lclUw6aLPMz9mp6IPDHk2LgxwfaUTnnrUezXQwjPe5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Dec 4 20:39:02 2025 GMT
Not After : Dec 11 20:39:02 2025 GMT
Subject: CN=6931f167-9e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:7a:6b:23:2a:3a:3c:7b:39:cc:1d:df:f4:
13:d3:eb:ae:d5:63:8a:0e:71:97:e6:9b:f2:08:9a:
f8:94:72:11:3a:93:04:cf:87:1f:69:da:8b:f4:52:
f6:86:f9:38:9d:f5:f2:ed:62:42:00:49:49:97:b9:
60:6f:d7:d3:e6:f1:cb:7f:9d:48:30:e0:9c:de:a5:
c4:5e:fe:f4:f7:16:a5:63:0c:37:17:0f:9d:81:b2:
f2:e5:72:28:55:dd:5a:4b:e3:22:2d:f2:d4:2c:79:
e6:35:e4:33:ae:69:ff:ec:67:c5:ee:3b:a3:eb:02:
cf:2e:21:09:b7:56:34:f5:43:b6:fd:f9:7c:43:ff:
95:e9:67:1a:4c:dd:12:f3:2b:43:0b:30:18:61:60:
dc:a1:b2:76:31:1e:c2:32:2d:85:8e:75:fe:e7:33:
2e:69:ac:dc:67:68:75:2f:cf:64:58:98:3e:70:fa:
be:6a:51:9a:c4:d3:46:a2:38:bc:c3:7a:e9:3f:bc:
49:10:17:ae:aa:9c:82:a3:08:2c:20:96:be:37:55:
81:ce:9d:62:00:46:3b:bf:fa:fe:7c:2d:26:77:f7:
08:fe:1a:49:4c:f6:3f:94:29:f5:97:88:5f:88:bd:
59:a6:d9:74:8c:95:0c:56:ac:c1:04:6e:f3:59:55:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2C:59:7A:C0:E9:8C:D0:C4:FF:86:98:21:B9:A7:0C:D6:7F:5F:B8
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:1a:bb:cf:ff:6b:6f:03:b5:32:59:b7:30:79:70:76:47:
c7:86:38:2e:e9:8e:e4:69:5c:c6:2b:a6:18:9b:9b:70:e4:4f:
7b:a9:38:78:e9:d0:5b:6e:b2:6f:5e:d2:b2:f0:af:47:cf:16:
48:6e:f6:05:e9:b9:e8:d6:09:b0:a7:7a:ff:26:22:26:b8:83:
91:46:e7:32:82:b2:c5:7f:6a:0b:2c:ac:ef:09:59:24:14:e6:
a6:fd:90:3f:54:a5:05:bd:25:4c:c9:2b:78:5a:99:4b:e6:1b:
ab:46:6b:e7:b5:55:68:17:f4:d7:cc:5b:80:b7:72:96:39:c8:
0b:9f:5b:5e:01:74:b7:66:0f:07:ee:2e:bf:5f:33:b0:09:02:
52:f5:db:92:01:ea:6e:9a:5d:3e:1f:ae:17:2e:1e:53:13:c3:
58:1b:f7:43:21:85:cb:1e:cb:44:fd:7f:ad:e5:9d:7a:ec:ae:
99:82:03:d3:66:5d:67:d3:8e:5c:df:96:17:e5:03:96:4e:7d:
7e:6a:8a:91:00:85:ba:23:2c:fc:5b:82:83:99:74:75:10:6f:
c3:bb:35:c3:74:e2:7b:c7:c7:d9:c0:87:bf:c9:55:04:f3:7a:
ce:81:56:7d:bf:e9:09:e4:c4:98:49:d9:5d:5c:27:90:b0:37:
f7:0b:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:16 2025 by rpki-client