This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier: PS8ZmnxAfJmKkavg1HbDBAch/HWNFp1QSt+27rvurAY=
Subject key identifier: 21:DB:07:81:6D:0F:7A:C8:EB:0D:12:62:31:23:9B:FB:42:66:81:2A
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial: 0E42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number: 0E3C
Signing time: Sat 06 Dec 2025 17:14:18 +0000
Manifest this update: Sat 06 Dec 2025 17:14:18 +0000
Manifest next update: Sat 13 Dec 2025 17:14:18 +0000
Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: cgn9VCmwR/3uqKnmlnlFaxie7hJTpYevVfGRuNkCIqw=)
2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3650 (0xe42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Validity
Not Before: Dec 6 17:14:18 2025 GMT
Not After : Dec 13 17:14:18 2025 GMT
Subject: CN=6934646a-e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:98:42:9f:62:35:43:ff:68:d8:42:d1:14:
58:46:0f:c0:74:52:08:66:5b:18:4f:f5:96:48:c5:
27:82:78:a3:53:ae:f9:fe:0b:34:5d:75:f2:c4:39:
68:d2:e0:5f:24:54:c4:80:54:58:9d:12:84:be:22:
13:14:10:22:cf:f9:e9:18:51:6b:32:73:7f:25:2f:
c3:a9:a7:7f:23:cb:15:9f:ea:3c:0f:f2:b4:97:5d:
a6:6a:fe:71:ec:32:9a:ec:d5:e1:4d:16:cf:96:20:
5d:6c:e0:28:42:20:77:e5:c7:a1:56:d5:c0:5d:c7:
a5:65:2c:76:cb:2d:36:86:96:49:9c:d2:b4:16:e1:
cc:42:62:c4:73:52:82:51:f9:99:80:f0:82:ca:ba:
e5:52:8d:8b:b1:4b:7d:10:7e:49:b5:79:5d:f5:d3:
56:eb:c3:49:41:11:07:2c:22:71:8d:5b:cb:f2:e1:
5e:89:47:ef:1e:f9:fd:78:22:4c:75:4c:d6:e7:38:
1b:86:fc:56:2a:9b:bf:cc:a7:9e:51:26:99:c1:64:
34:6b:e9:9c:c2:9c:ba:fa:97:2d:a1:f0:fd:d5:38:
97:e8:f6:04:92:0d:19:80:87:bd:48:05:02:93:93:
62:dd:f7:5a:4e:8a:a1:4a:f3:05:71:a6:ed:99:7a:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:07:81:6D:0F:7A:C8:EB:0D:12:62:31:23:9B:FB:42:66:81:2A
X509v3 Authority Key Identifier:
keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:88:30:96:52:28:61:71:77:33:d6:90:5b:c1:14:06:f1:
25:aa:b0:5b:24:37:46:73:31:cf:db:d3:66:7c:1c:f6:08:56:
b1:15:77:13:f5:41:ee:ca:d9:6e:ea:e0:ad:db:45:04:74:e2:
d4:25:b7:52:fe:db:e3:2c:c2:3a:29:3b:50:db:39:da:db:e6:
04:0a:63:e0:9e:4c:b2:ba:a4:67:d6:ec:21:8d:6f:1e:a1:8f:
bc:5b:f3:95:86:07:89:fa:b8:7e:80:3a:c2:d9:76:db:47:ec:
17:4b:bb:56:70:26:19:6a:85:b7:4f:52:4a:5e:b5:73:49:b9:
70:9a:46:ea:d8:9c:9a:f3:37:13:6e:2d:6e:38:e8:21:14:c6:
bf:ce:00:78:09:e8:b4:cd:90:30:9f:b0:ab:46:45:be:6b:d9:
a1:8e:64:25:e5:2c:48:5b:ae:5b:51:55:99:fe:8a:7d:0d:8e:
47:9b:ac:c6:48:78:85:c7:28:41:42:89:69:7f:a4:47:44:7c:
27:a9:5f:43:22:97:3d:a9:f5:dc:de:dc:33:b8:82:b0:8c:11:
12:48:0e:b7:3f:ba:80:ac:d0:b6:68:e7:da:58:d6:9d:81:d6:
ea:d8:d6:e6:bc:95:ae:02:54:e8:65:5d:2a:c3:a6:45:72:f8:
bc:de:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:45:25 2025 by rpki-client