This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
File: 8bck5A2FxU9R1iHHL4lskXXJsRk.mft (raw, json)
Hash identifier: FUQk45ya1+z6036qqNwRLoO+4WSz4RB+47l/qBY5MC0=
Subject key identifier: 78:0B:CF:F1:C0:CE:9C:E0:AE:DC:5D:3D:A1:E5:FA:3B:75:27:84:B3
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Certificate issuer: /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
Manifest number: 0A6B
Signing time: Mon 22 Dec 2025 19:04:15 +0000
Manifest this update: Mon 22 Dec 2025 19:04:14 +0000
Manifest next update: Mon 29 Dec 2025 19:04:14 +0000
Files and hashes: 1: 8bck5A2FxU9R1iHHL4lskXXJsRk.crl (hash: 3WPXWjqVYS3AcvVsVB6uZbdhSNWJn89ZhLvT0h9t8bg=)
2: 354725E6763311EABAE64466C4F9AE02.roa (hash: bs2WaiU2EHsdavOyCOj936j3V7QF3geo8o9d56rg2ig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3F5, serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Validity
Not Before: Dec 22 19:04:14 2025 GMT
Not After : Dec 29 19:04:14 2025 GMT
Subject: CN=6949962e-7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:a2:3e:6b:2f:93:0f:35:40:18:32:9b:20:
77:5b:16:a8:da:58:a4:94:0a:16:50:98:8d:94:a1:
91:4f:c4:b6:b9:75:6a:b1:ae:ab:88:ae:09:14:46:
06:04:3a:8d:73:be:25:30:be:e7:70:23:b2:c5:9b:
8b:99:10:32:8f:7a:73:e6:7e:1c:0f:ef:88:f8:c6:
65:f3:83:60:c2:9a:a8:e5:26:e2:52:31:43:05:1d:
d0:e0:7f:08:07:a3:c8:a5:4c:91:40:73:9d:04:9c:
68:f2:0d:0b:33:c4:d0:ab:df:b6:0e:d5:d6:53:93:
f7:19:72:28:19:84:12:78:ba:a5:9d:0f:00:d5:1a:
eb:dc:5e:55:48:1b:58:6c:89:8f:1c:c5:56:8e:83:
c9:66:4b:a3:d4:f6:96:c1:c2:fe:69:8e:78:6a:1b:
77:00:06:b6:53:52:a1:be:30:98:3c:ad:5c:be:b9:
6d:bf:69:5a:85:ac:75:eb:f5:2b:4f:62:4b:c6:0b:
e3:8c:40:1d:68:1d:84:3f:eb:ac:9c:ed:7d:ec:74:
4e:3e:d2:7c:18:77:41:ac:fa:b0:32:02:30:44:d2:
9e:cd:99:b4:23:48:60:9a:07:9d:b9:dd:d9:a5:14:
b5:42:77:44:e8:72:6a:15:0c:0a:55:12:15:f2:22:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:CF:F1:C0:CE:9C:E0:AE:DC:5D:3D:A1:E5:FA:3B:75:27:84:B3
X509v3 Authority Key Identifier:
keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:2e:d8:11:2c:1a:15:24:93:91:8c:cd:a4:44:ba:68:ec:
9c:c0:8e:b0:d9:26:88:90:60:a9:87:42:1d:79:45:c9:9e:0e:
df:49:ad:4e:67:24:58:07:5f:f5:0b:30:8b:3e:ff:50:11:fd:
fb:7f:13:8e:18:f9:9d:5d:5b:09:0e:04:19:f1:5e:f1:c3:83:
53:0d:ea:36:85:d1:40:60:ed:c7:8f:a1:5b:35:7f:8d:9b:96:
c9:0b:67:e3:02:1e:82:43:52:e3:72:79:f5:22:6e:5a:8e:58:
2f:f8:96:c6:87:69:bb:6b:e9:05:55:f3:95:6e:d6:76:53:c5:
cd:d6:86:7a:f3:3d:7c:b9:67:9a:b7:02:a6:a5:01:21:7a:54:
c9:42:75:a6:3d:a8:3a:44:9d:40:26:9c:39:b3:79:32:84:2e:
11:95:a8:58:b0:52:3e:90:66:48:b7:6c:62:7b:8c:a7:a8:06:
ec:55:6e:ac:8d:41:95:55:27:2c:e9:ab:2e:d1:f2:fc:e1:a0:
00:cb:bc:bc:29:de:7f:63:73:da:b4:b3:2d:25:6d:fc:de:d3:
e2:f1:01:ce:ad:af:66:9d:6b:ff:f3:44:c7:b2:ee:95:32:3b:
37:b0:d7:44:ea:e2:7d:c0:34:5a:ab:f3:a6:d8:c4:62:78:45:
62:76:d5:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUzRjUxMTAvBgNVBAUTKEYxQjcyNEU0MEQ4NUM1NEY1MUQ2MjFDNzJGODk2Qzkx
NzVDOUIxMTkwHhcNMjUxMjIyMTkwNDE0WhcNMjUxMjI5MTkwNDE0WjAYMRYwFAYD
VQQDDA02OTQ5OTYyZS03MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnL2iPmsvkw81QBgymyB3Wxao2liklAoWUJiNlKGRT8S2uXVqsa6riK4JFEYG
BDqNc74lML7ncCOyxZuLmRAyj3pz5n4cD++I+MZl84Ngwpqo5SbiUjFDBR3Q4H8I
B6PIpUyRQHOdBJxo8g0LM8TQq9+2DtXWU5P3GXIoGYQSeLqlnQ8A1Rrr3F5VSBtY
bImPHMVWjoPJZkuj1PaWwcL+aY54aht3AAa2U1KhvjCYPK1cvrltv2lahax16/Ur
T2JLxgvjjEAdaB2EP+usnO197HROPtJ8GHdBrPqwMgIwRNKezZm0I0hgmgedud3Z
pRS1QndE6HJqFQwKVRIV8iI7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgLz/HA
zpzgrtxdPaHl+jt1J4SzMB8GA1UdIwQYMBaAFPG3JOQNhcVPUdYhxy+JbJF1ybEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGNS84MTFCNjA0Qzc2
MzExMUVBOTcxNUY4NjBDNEY5QUUwMi84YmNrNUEyRnhVOVIxaUhITDRsc2tYWEpz
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhiY2s1QTJGeFU5UjFpSEhMNGxza1hYSnNSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTNGNS84MTFCNjA0Qzc2MzExMUVBOTcxNUY4NjBDNEY5QUUwMi84YmNrNUEyRnhV
OVIxaUhITDRsc2tYWEpzUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZDS7YESwaFSSTkYzNpES6aOycwI6w2SaIkGCph0IdeUXJng7fSa1O
ZyRYB1/1CzCLPv9QEf37fxOOGPmdXVsJDgQZ8V7xw4NTDeo2hdFAYO3Hj6FbNX+N
m5bJC2fjAh6CQ1Ljcnn1Im5ajlgv+JbGh2m7a+kFVfOVbtZ2U8XN1oZ68z18uWea
twKmpQEhelTJQnWmPag6RJ1AJpw5s3kyhC4RlahYsFI+kGZIt2xie4ynqAbsVW6s
jUGVVScs6asu0fL84aAAy7y8Kd5/Y3PatLMtJW383tPi8QHOra9mnWv/80THsu6V
Mjs3sNdE6uJ9wDRaq/Om2MRieEVidtW2
-----END CERTIFICATE-----
Generated at Tue Dec 23 18:35:14 2025 by rpki-client