This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
File: 8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json)
Hash identifier: Qxmo5x/28IjoS6NmSOEq/4Da7N2Ab2kPYJJas82HuY8=
Subject key identifier: AD:A2:F0:AD:EB:58:1D:E6:AC:6A:AF:48:DB:06:BC:16:61:45:72:E5
Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
Certificate issuer: /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
Manifest number: A4
Signing time: Sun 21 Dec 2025 05:20:56 +0000
Manifest this update: Sun 21 Dec 2025 05:20:55 +0000
Manifest next update: Sun 28 Dec 2025 05:20:55 +0000
Files and hashes: 1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: R4YFBf5Ws1/CSzWl7/jUoYHaNOsJr74PkG9nxjJp/kc=)
2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Validity
Not Before: Dec 21 05:20:55 2025 GMT
Not After : Dec 28 05:20:55 2025 GMT
Subject: CN=694783b7-f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:67:d9:52:52:74:c2:81:f3:2c:53:f7:bc:
b9:ed:bf:bd:c2:00:68:a4:b1:9c:63:9b:f9:e4:e3:
be:59:06:7a:8d:84:81:ed:38:a8:03:ca:e9:ce:6b:
48:c8:81:c3:ba:53:c2:01:14:1a:30:a5:2e:4a:da:
93:59:4b:1b:a1:4f:6f:91:d9:2e:3f:9d:9e:45:4e:
c0:43:45:8d:3d:e2:d5:0f:10:c1:07:26:e3:c8:91:
3f:84:ef:6d:05:15:07:e3:72:08:11:60:af:5c:c2:
80:0f:3d:53:c0:93:da:78:4c:07:e4:3d:26:eb:e5:
8f:a7:e9:79:37:63:e5:a0:81:92:40:64:eb:bc:cc:
cd:02:2e:c4:4c:0e:b5:c0:7a:15:8e:00:c8:8b:f8:
5b:d7:ed:fa:b4:34:fe:d0:34:e8:82:b7:fb:20:e0:
51:ff:56:fe:32:71:ea:48:c6:ea:00:d0:52:a3:2e:
3b:83:8a:74:ba:73:de:12:e2:4b:65:7a:3e:3a:e2:
aa:a5:86:56:59:3a:fa:8d:82:2e:2f:86:56:05:22:
97:c9:87:94:9c:24:27:bd:fc:e1:a1:0f:6b:01:90:
79:0e:32:3c:31:c6:b9:2c:43:e3:f2:7e:13:2d:68:
1d:ce:99:37:16:45:c1:49:1c:2c:c0:d3:df:2d:22:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:F0:AD:EB:58:1D:E6:AC:6A:AF:48:DB:06:BC:16:61:45:72:E5
X509v3 Authority Key Identifier:
keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:f1:78:42:b6:15:91:10:70:63:0a:05:95:88:07:4a:de:
8c:eb:67:8b:0c:79:65:31:49:c5:5d:1a:09:fc:31:76:47:cf:
5d:88:40:48:25:36:1e:5d:44:c9:ce:e2:58:b2:d2:6f:7a:a4:
53:d7:30:60:be:4b:b1:a9:a6:38:97:59:f5:02:66:a3:a5:93:
fa:b7:23:58:4a:63:9b:94:1c:27:f9:6d:41:c4:fa:b4:64:74:
e3:52:6a:c4:4c:85:dc:95:cd:1b:a7:4a:85:30:3c:f8:aa:11:
1d:e7:9d:df:8d:b5:83:23:f7:85:9e:1d:59:53:43:66:bd:10:
d3:88:2e:b6:5f:d5:2c:bf:d2:74:b4:e3:8c:0f:ef:a8:20:6e:
50:dd:69:6e:8d:ed:23:ab:66:4f:9c:99:b5:66:b8:bf:a5:e9:
49:cb:50:b1:04:96:89:e2:7f:bd:76:82:c1:ff:95:d6:a3:c4:
6b:a4:5c:83:30:cf:45:ca:6a:7e:7e:88:54:a2:16:c6:c3:5d:
f1:27:80:c7:65:7c:6e:b8:dd:36:b4:8c:c1:a1:7c:cc:04:03:
0e:60:bb:06:0d:f7:6b:9f:10:36:b9:e0:cc:ab:f6:91:3a:04:
14:ac:37:2b:64:6f:f8:d3:71:7b:f2:f8:0a:85:69:47:42:da:
b0:c3:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:43:50 2025 by rpki-client