This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier: 6NhCOBtnGPcoRFwHHrQ5+tKDdr3ySsGqdltKQYwW7Bw=
Subject key identifier: 91:34:8E:5B:4E:5E:79:FC:10:1A:5B:E3:B0:43:54:23:76:DC:C8:D6
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number: 015D
Signing time: Sat 27 Dec 2025 03:03:48 +0000
Manifest this update: Sat 27 Dec 2025 03:03:48 +0000
Manifest next update: Sat 03 Jan 2026 03:03:48 +0000
Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: 0dVZiXv6gXArF2nwi92ejv3kgAGivMdhyQhoz5D3hbU=)
2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: OyE30n/5T2aP2dUzdX/x+6s1iB5G8Z+cghgCmYn5BRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Validity
Not Before: Dec 27 03:03:48 2025 GMT
Not After : Jan 3 03:03:48 2026 GMT
Subject: CN=694f4c94-2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:49:d0:a5:33:f1:2a:8b:52:f2:dc:cf:5a:
44:13:43:63:af:85:5f:95:07:0c:a8:e4:ca:55:7b:
54:03:f1:bd:62:e6:65:90:18:34:fc:80:99:46:25:
55:a0:3d:11:72:95:a2:de:4d:e9:aa:62:80:e2:92:
59:52:3c:df:51:7d:37:e4:b7:09:1c:6e:6c:e9:60:
b8:a2:cf:15:fe:ee:3f:95:ed:a0:74:d5:d0:6c:41:
35:e4:87:90:77:e9:d8:5c:3a:df:5a:16:e2:59:7c:
80:72:a5:6f:4a:9c:02:a8:93:97:5c:88:4e:41:d2:
48:8c:a3:4b:6f:ef:67:10:95:3d:84:38:ba:0f:d2:
c2:7f:86:c5:41:ae:20:86:c6:77:f7:ed:7a:2a:c9:
d0:f7:b9:20:df:3f:f8:73:03:98:f1:4a:2b:0b:05:
f9:5a:eb:8d:ce:2c:9c:b0:df:3c:d6:db:c2:35:d0:
48:46:08:06:61:b1:e0:50:b0:79:df:74:e5:6a:81:
54:de:63:51:5e:3e:dc:a6:bd:d1:fc:0f:d8:cb:91:
71:ff:06:49:8c:73:8c:ba:40:f7:33:29:29:e1:72:
02:53:98:0c:9e:fa:1b:93:bb:3e:0b:34:e3:00:e7:
50:c9:12:af:50:bc:ee:f2:a3:e8:d6:97:c5:e7:22:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:8E:5B:4E:5E:79:FC:10:1A:5B:E3:B0:43:54:23:76:DC:C8:D6
X509v3 Authority Key Identifier:
keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:9c:7e:84:4d:5a:5a:d1:9e:9a:cd:5e:08:a8:3b:63:ad:ab:
ef:93:e4:af:85:78:3a:e5:7a:2b:61:0d:f8:a8:7f:e4:27:39:
a9:56:bc:e8:96:88:04:19:16:4c:40:d9:e9:33:37:36:af:55:
69:e0:ad:33:e9:bb:05:d7:f1:ad:9f:fe:ba:bf:a6:59:0e:0c:
dc:65:2a:b4:c4:36:cb:48:f5:e3:a7:a2:65:5e:66:0e:37:bd:
86:48:95:a8:46:5c:e7:8d:a2:66:4d:79:ec:99:d2:dc:9f:5f:
21:38:b1:36:4d:a0:d5:91:3e:cc:ed:1f:98:52:73:48:32:0b:
43:cd:76:26:f9:b8:23:3b:19:d5:b3:24:67:c4:a2:df:08:12:
81:cc:e9:c7:06:fb:d5:8e:cf:50:b2:bb:93:10:b4:80:9d:14:
76:ef:07:c9:5d:ca:33:8c:ff:64:91:07:7c:40:67:23:03:53:
45:2b:43:7d:e2:39:a9:40:1b:1f:19:9c:11:ce:fb:82:09:6f:
52:69:49:c7:ef:ba:66:44:ce:8e:b2:be:38:d4:c7:80:13:a6:
a3:74:25:de:61:46:64:ac:70:1d:79:f4:81:24:73:89:b6:7d:
69:cc:ba:0b:eb:76:77:99:81:8d:6c:05:ce:ef:aa:7e:59:48:
dd:9b:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:12:33 2025 by rpki-client