This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier: Hlw2v0w3OJSnyGn1SI/le5VioQDxiPgXIptYZEKveTQ=
Subject key identifier: 9A:9F:BC:03:B0:19:EF:5B:7B:88:02:21:D8:25:1B:CB:8F:D4:23:73
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number: 06FA
Signing time: Sat 06 Dec 2025 20:53:57 +0000
Manifest this update: Sat 06 Dec 2025 20:53:56 +0000
Manifest next update: Sat 13 Dec 2025 20:53:56 +0000
Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: rowlnW3hx4aDFmpPBnxKL9K3OjCIMcX+7f1sJWSsWmI=)
2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Validity
Not Before: Dec 6 20:53:56 2025 GMT
Not After : Dec 13 20:53:56 2025 GMT
Subject: CN=693497e4-8283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:10:c3:f4:ad:58:d5:08:78:20:90:1e:0d:
b7:44:cc:10:ff:36:a6:8d:7a:0b:db:3e:6f:92:63:
1d:20:3a:72:08:d3:40:fe:e5:17:7a:ac:f0:94:e5:
6c:71:5d:d4:39:61:6c:dd:04:b4:79:5d:22:1d:64:
26:81:fe:8a:54:19:99:cf:b0:da:be:37:ff:af:85:
10:ed:c8:63:9a:1b:aa:ab:1c:c8:f6:1c:97:9f:e1:
00:6d:a5:06:58:60:ac:f8:88:c4:b8:5f:7b:c4:06:
0e:28:0b:54:b9:e0:59:63:43:be:27:6e:03:31:9f:
fd:0b:3d:f5:11:8f:d2:8a:5a:ee:89:f0:23:e6:f4:
d3:35:e3:d6:8c:ee:83:44:4c:dd:b6:f7:a5:88:e5:
a4:b7:7a:10:16:6e:ef:f6:ec:3b:7a:c4:01:e1:2d:
a1:a2:4e:31:7b:69:1a:1d:ef:60:97:c7:35:cf:53:
dd:a0:50:95:6d:f4:5a:a8:ef:ef:e8:fb:81:c3:bb:
91:c5:7f:0e:32:a5:ec:96:79:d1:8e:d4:fe:eb:d1:
44:8a:35:23:a3:b6:f7:0c:a4:ca:63:9c:9a:30:fc:
4b:e9:f3:67:da:ce:a5:10:f6:68:a1:75:43:36:e9:
39:c5:54:99:18:35:07:8e:7c:dd:72:a1:22:f1:2d:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:BC:03:B0:19:EF:5B:7B:88:02:21:D8:25:1B:CB:8F:D4:23:73
X509v3 Authority Key Identifier:
keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c9:e5:a8:e1:60:98:5e:fd:f3:ca:e6:34:2f:ec:88:6f:5d:
f3:f6:86:59:81:c1:65:9d:c0:8c:2b:10:66:7d:b4:9c:57:11:
83:f5:23:2b:a7:57:d1:a8:06:de:7f:2a:90:e8:3a:af:9e:81:
4c:89:6b:99:39:9f:e4:e7:32:b2:15:79:0c:89:b3:f6:02:3d:
c9:9b:3e:37:cf:68:ce:a8:14:e0:e7:8b:32:c9:89:01:28:78:
6e:01:53:24:b0:44:06:5f:eb:04:e8:6e:2e:c9:8a:bf:e3:e7:
c7:05:34:20:8c:60:cc:c2:3c:d6:a9:d1:23:bf:d2:0f:c5:8f:
f0:76:27:24:40:9d:78:54:78:0d:bc:c5:a9:d5:cb:e3:a1:4f:
22:41:1f:a8:23:78:2e:52:05:83:d5:a3:2d:35:e8:d9:ef:37:
e8:b2:ad:4f:0d:df:31:44:5a:4a:03:01:dc:7c:43:31:27:6a:
d1:b1:b7:16:0e:66:67:f0:c1:04:f3:38:32:7c:e4:6e:52:4e:
6b:23:45:04:ab:c5:80:72:9d:2e:53:27:4f:c1:4c:b2:e9:67:
d9:39:b8:bd:e9:dc:67:22:39:6c:8d:54:d6:4a:f5:f6:34:73:
9d:44:6b:70:2e:97:44:ce:dd:2b:4b:41:8f:e8:46:84:00:7b:
b4:f7:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:07 2025 by rpki-client