This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File: 8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier: epf47b5qbQCBCEZ8wMI2uTSiL0t1DlLOn0IC5BIXRYE=
Subject key identifier: 60:D7:BA:CF:36:3E:FE:80:CD:95:13:01:10:C0:D5:72:C0:8E:A4:CD
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer: /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial: 0C793461CAA2AD4AADE0DB856A92E607E4228CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number: 6A
Signing time: Fri 05 Dec 2025 12:43:49 +0000
Manifest this update: Fri 05 Dec 2025 12:38:49 +0000
Manifest next update: Sat 06 Dec 2025 14:00:49 +0000
Files and hashes: 1: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
2: 34392e3231332e36332e302f32342d3234203d3e20313534313535.roa (hash: lxmJhnE/3u/mEMAudnAPfckbhfAAPLZoqr3Lo3NuO8c=)
3: AS154185.asa (hash: xW7GnBx56SfJdYNlrU/w1PbVhWMkbLQHK0Zou3F050g=)
4: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: W17lmujhBr9T58X9qk/8rUvmCQPQb/ewRt9naCGPEDQ=)
5: 34392e3231332e36322e302f32342d3234203d3e20323130343430.roa (hash: iyW/ljRQsKCO9JHAhgKUjRKGu4Bwdq2FqesU5BPiDEE=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:79:34:61:ca:a2:ad:4a:ad:e0:db:85:6a:92:e6:07:e4:22:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Validity
Not Before: Dec 5 12:38:49 2025 GMT
Not After : Dec 6 14:00:49 2025 GMT
Subject: CN=60D7BACF363EFE80CD95130110C0D572C08EA4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7e:a4:5e:5b:85:a6:75:7d:97:8a:da:bf:21:
f2:75:d1:2e:f8:fa:04:56:24:f8:f0:6c:a6:97:d4:
3b:8d:3e:87:c3:9d:e7:ea:98:e7:72:55:c3:07:fd:
46:6a:47:1d:a2:a1:45:1e:9f:95:74:84:97:94:b5:
41:9e:50:06:e0:cf:8e:96:3d:a4:8d:23:c5:e4:7f:
9c:46:ee:d7:df:cf:97:47:ec:cc:60:b1:5a:4c:f7:
59:e6:f0:e1:61:0b:ff:60:a4:89:22:43:01:53:fc:
ea:4b:22:99:21:39:bc:48:76:63:67:4e:ce:4a:55:
7d:03:b1:3d:7c:a8:d2:ef:b3:88:73:6e:0b:d8:ca:
c1:5e:e6:7b:a6:40:0b:26:1a:02:d0:a6:be:cc:f9:
54:ff:62:b2:c7:42:78:d1:20:48:09:5f:09:46:0e:
75:a0:8c:ea:4e:26:97:0b:35:f9:90:b1:e4:a1:88:
e4:07:46:fa:ab:b3:b8:c7:b6:95:52:ee:d0:52:db:
c0:95:ec:43:0d:52:03:f8:4b:af:3f:0c:37:fe:67:
2f:dd:83:32:69:63:ea:99:43:9c:b3:b4:a4:18:be:
8f:31:cc:86:85:b9:ec:af:34:27:0f:1e:3b:86:f8:
2e:66:5b:19:8d:a0:5b:a6:e7:b5:64:89:f8:32:3b:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:BA:CF:36:3E:FE:80:CD:95:13:01:10:C0:D5:72:C0:8E:A4:CD
X509v3 Authority Key Identifier:
keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:9c:90:08:69:f8:ac:49:1e:15:6e:59:98:d0:0c:5c:1d:
80:94:7c:4a:ad:8f:cc:04:e7:82:96:4d:10:f7:e7:3a:5e:da:
f3:54:e4:e1:00:ae:d7:b9:8f:eb:c7:db:ca:c0:03:00:65:16:
f6:93:87:bc:4b:a6:e1:26:66:be:cd:b8:24:e7:de:26:b7:4f:
ca:14:41:83:b3:97:8d:96:5f:66:7b:4a:b9:a4:a7:0c:08:54:
86:b4:fe:c4:ab:30:14:42:1b:3c:57:1f:b8:ce:c8:fd:44:6b:
69:fe:63:35:7a:ee:00:08:19:10:72:8d:01:71:b9:a5:f3:a8:
44:10:05:23:08:f6:29:28:42:fe:5f:f9:aa:b2:dd:11:bf:a7:
53:6c:28:04:d5:bd:29:16:68:ed:8a:88:60:de:b0:5e:58:c2:
a8:65:b5:8f:85:be:b9:32:e9:d8:8f:ea:75:c5:e5:82:f4:02:
05:60:96:3f:f3:1b:b4:fb:45:26:ca:97:8e:2c:40:df:50:eb:
8b:1e:02:1a:b9:3f:c7:e3:98:c2:83:fa:67:3b:a8:da:c7:ec:
0c:da:ae:fe:4f:61:d4:79:75:73:5a:4b:61:b4:6a:d7:0d:25:
62:f5:04:77:d4:99:92:e9:49:20:9e:ec:23:00:96:7a:03:95:
b0:93:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:52:27 2025 by rpki-client