This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier: 0y4Po8wtdNhLRFm5IL+lUHZPD8LCvQTKxwV64Sp7jng=
Subject key identifier: CE:7B:A8:E2:00:50:E8:A7:3A:F0:A0:D0:17:80:E3:72:09:B6:95:6E
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number: 0804
Signing time: Sat 06 Dec 2025 20:04:47 +0000
Manifest this update: Sat 06 Dec 2025 20:04:47 +0000
Manifest next update: Sat 13 Dec 2025 20:04:47 +0000
Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: 0ROh6zuRvXwg2lQX3pGyclWbtngO4kN4847mUCilxmM=)
2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Validity
Not Before: Dec 6 20:04:47 2025 GMT
Not After : Dec 13 20:04:47 2025 GMT
Subject: CN=69348c5f-5e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:fa:83:53:d0:c6:d4:04:b3:44:3e:0a:0e:
6b:be:1a:ec:30:29:d0:7e:9f:10:6f:ba:36:15:66:
f0:6b:c6:5e:72:bf:5a:dc:50:5e:8c:05:43:13:18:
19:9c:e2:63:3f:75:63:a1:15:fe:d8:62:03:f1:17:
e8:85:1e:68:4b:70:58:01:a3:6d:49:60:2b:47:e2:
7b:17:c9:0f:d1:97:43:29:ea:5b:3a:07:78:bd:6c:
7a:de:74:8b:ff:7e:3f:7d:de:49:9f:ad:71:ca:f0:
27:da:47:d7:83:c5:65:25:9f:8a:94:1b:a8:44:c2:
8d:7f:47:92:28:b5:d1:93:ed:0e:90:93:22:5f:03:
91:b7:aa:3e:fd:7c:a0:41:81:c1:9f:bf:22:80:27:
9b:49:6a:fc:63:a8:b9:fa:cf:e0:55:a0:43:91:be:
ed:30:9f:34:a8:77:39:ae:3f:74:a2:9e:2a:06:81:
42:97:95:b2:80:45:c3:1e:57:74:70:b6:a8:5e:30:
6c:0f:a7:a1:8c:0c:a9:7d:34:c7:31:e7:7f:36:38:
dc:a3:b7:25:9b:f0:62:de:8a:30:e8:01:61:7d:75:
da:51:aa:bd:28:71:d5:0d:37:c6:0b:d6:53:44:46:
f1:d9:49:0f:e9:3d:a3:34:44:0a:83:81:b9:7d:9f:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:A8:E2:00:50:E8:A7:3A:F0:A0:D0:17:80:E3:72:09:B6:95:6E
X509v3 Authority Key Identifier:
keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:7b:82:71:86:a7:22:b9:e7:0b:16:c6:9e:74:78:a3:cd:
fd:0d:1f:22:08:de:c2:91:0b:ba:07:ce:70:0e:1d:60:ae:d8:
d8:eb:99:59:65:01:f0:08:4a:9f:47:d6:02:24:bc:33:0f:60:
9b:f6:36:6b:2a:8a:27:75:b2:1f:86:9f:60:0a:39:78:26:84:
48:ce:31:76:97:f1:26:19:54:73:ca:04:83:36:a7:bf:62:d7:
13:4a:ed:57:ff:84:bd:5e:e5:bf:23:fe:14:46:c2:2b:35:cf:
0f:07:bc:86:50:b8:0d:21:1e:4f:e0:3b:0a:cc:89:3f:3b:66:
ae:a5:65:06:80:3a:f6:bf:28:10:f3:39:13:ef:53:d2:8d:60:
5f:b4:54:e3:93:c4:66:fd:6b:72:ad:e5:dc:e6:aa:0b:ba:51:
11:18:5b:b5:67:43:e2:0a:40:fc:6c:18:8a:17:be:9b:5c:61:
fa:bf:a6:0c:87:35:27:c9:7d:f8:91:25:6a:8f:bd:8c:b0:92:
8d:4e:b8:63:98:9c:2f:3a:6d:eb:20:f2:ad:23:2a:0e:e6:52:
ba:5e:13:0c:91:1f:e7:fa:45:81:40:00:05:5f:1c:99:f1:12:
fc:3a:a6:a6:8e:85:4f:ee:9a:18:cf:a2:c8:1d:c9:fd:8c:64:
35:3b:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:17 2025 by rpki-client