This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
File: 8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json)
Hash identifier: ZVnWxY+5r6VPNYOQt5Wv5pBPk1f+juMNutRVz0+H3ao=
Subject key identifier: AA:E0:C8:73:BA:4B:CE:26:8B:9D:3B:55:A5:1C:4E:21:A6:E5:06:35
Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
Manifest number: 0182
Signing time: Sun 07 Dec 2025 02:05:05 +0000
Manifest this update: Sun 07 Dec 2025 02:05:04 +0000
Manifest next update: Sun 14 Dec 2025 02:05:04 +0000
Files and hashes: 1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: 29xKA8bbjGCQ15LIaRqKdbEa5mTi8X9U7nPfLAojPPc=)
2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: rmSlyhnDPvPSFvbFMmRCs9JHSxTZmt3FdyC7wK+xTxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6
Validity
Not Before: Dec 7 02:05:04 2025 GMT
Not After : Dec 14 02:05:04 2025 GMT
Subject: CN=6934e0d1-4274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:46:ea:71:43:c6:66:f1:c7:d4:dc:fd:4c:
06:b7:3d:d4:c6:c2:e6:4e:68:9b:9b:7a:ff:d1:36:
89:61:1b:c8:eb:c8:30:cc:7e:ec:1e:2a:62:b0:2a:
7c:e1:bb:7d:6f:34:62:95:9f:d5:69:5a:a3:3f:9b:
cb:1c:1a:ea:c8:1b:d1:8e:72:e9:97:1f:17:ad:2d:
3a:ed:07:97:6d:c0:fa:38:2e:5c:c2:aa:9b:c2:64:
31:2b:7a:72:78:0c:45:fb:b0:6a:ab:53:f5:b2:cb:
7c:d0:76:83:f8:6b:cb:29:9e:44:e5:6f:84:b1:47:
9e:5f:04:70:4e:d4:a3:f3:5f:12:5e:3f:f9:e3:5e:
67:c9:46:04:7e:68:af:1a:5e:7d:32:28:ec:48:ec:
11:84:30:ce:b6:f4:38:c9:11:b9:28:4a:8a:42:e3:
2d:bb:48:6c:23:cf:03:26:a1:50:8e:3f:df:3f:3d:
52:8b:c0:79:be:77:83:c7:4d:03:3d:0b:4b:6f:0d:
3a:69:4b:a8:fe:b1:de:40:a9:8f:04:81:87:44:de:
ab:f6:bc:a4:68:07:3a:c5:e2:23:78:d6:79:0e:c7:
4f:9d:0f:72:d1:c3:58:46:21:be:22:42:e6:97:f2:
21:38:37:4a:cd:60:68:8c:70:22:e2:97:31:0b:fc:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:C8:73:BA:4B:CE:26:8B:9D:3B:55:A5:1C:4E:21:A6:E5:06:35
X509v3 Authority Key Identifier:
keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:b0:dd:e8:9d:65:16:7a:3b:9d:ff:2b:76:57:4f:04:71:
74:b7:04:6b:26:81:6a:98:00:79:bf:6e:2d:f6:e4:9a:6e:0a:
42:a5:49:65:00:c8:37:6e:b8:ff:2a:a3:51:d0:34:dd:85:47:
3d:a4:16:25:9c:5e:22:8e:b7:9b:af:2a:80:bb:31:25:a9:5a:
61:d5:a7:9e:fa:ff:80:af:d7:e2:d6:dc:1c:73:db:17:4b:ed:
00:fc:e5:91:4e:59:1c:16:59:cb:28:fe:2a:1e:99:a2:50:48:
e1:17:c2:b9:d9:66:d1:83:5b:1a:8d:ce:d6:37:f4:a2:5c:4f:
6f:11:8a:46:28:05:ac:c5:38:55:8f:74:32:67:d1:e8:3f:8d:
d7:b2:b7:19:1d:53:74:93:23:f2:5e:d7:f9:53:70:7f:ed:6c:
a4:3f:91:85:e2:cd:e3:d5:bc:b7:fc:aa:0a:47:9c:32:60:79:
f2:b1:1d:dc:3e:78:2a:40:88:99:21:47:4a:3f:18:c8:81:b0:
98:da:6c:31:72:b9:ad:2d:03:86:fb:b3:5e:0e:7a:d1:ab:df:
52:3c:68:ab:37:ae:2b:38:1f:a9:9e:ee:1a:18:6c:b4:3e:eb:
73:d4:55:d3:f0:ad:92:cc:dc:98:af:d5:f5:cb:52:15:da:10:
95:e1:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:14:23 2025 by rpki-client