This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier: tk37Td7YCYgx4CcD1+r6AeI+As+AO7fj3mo/xVAsUkA=
Subject key identifier: A9:A8:F1:67:11:F2:A3:20:0C:F2:0B:96:A9:55:49:C4:46:EC:68:D9
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number: 07FE
Signing time: Thu 18 Dec 2025 22:05:22 +0000
Manifest this update: Thu 18 Dec 2025 22:05:21 +0000
Manifest next update: Thu 25 Dec 2025 22:05:21 +0000
Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 39j6Hnjh6HgGTQATjJ3dw5tbbG3EgMpazf+jA/3yRtc=)
2: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: aHhZ09FyTGWuPL21l6sEGdPpH/ZI8e7Ar6oNdRPw5Co=)
3: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: 2+pMen1/mVG17axHfaJf6K4zr5VFlLkq/JD7aEzO63s=)
4: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: KrHRF1GAdSejuwJPh8FeCiH4WaaXz6aXNUfwd0PIsqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Dec 18 22:05:21 2025 GMT
Not After : Dec 25 22:05:21 2025 GMT
Subject: CN=69447aa2-1ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:9d:a8:ae:bd:3f:10:30:1b:50:fa:db:37:
fe:91:e2:71:5d:50:da:35:92:ea:53:2b:3f:89:52:
51:80:fe:4e:98:8a:db:9a:d6:bc:b8:16:4c:4e:b5:
f7:17:b7:bc:6a:bb:e4:08:8c:72:65:7a:14:c2:c7:
59:e3:92:0a:b3:1e:a3:20:19:9a:26:93:4d:fd:c9:
13:86:e3:b6:37:6c:6f:bf:3b:90:59:15:d4:51:e2:
06:a3:12:21:4d:21:df:05:d3:88:cc:57:82:de:26:
4f:38:cc:d9:57:ac:44:79:02:92:7e:f7:e1:ec:94:
27:7b:eb:0b:aa:85:f6:de:51:95:43:2a:f6:85:47:
62:b5:86:74:65:09:a6:52:27:b6:e9:12:81:8c:a7:
96:b7:2b:64:3a:e5:94:fd:6c:d9:66:75:fd:fd:06:
99:98:73:02:30:16:06:e1:4c:1b:70:11:51:ad:9c:
00:e6:80:86:82:a9:ad:2e:18:db:7b:76:5e:e7:e7:
f5:18:66:16:04:0e:2b:04:44:6d:df:d5:ad:88:e2:
f8:f1:f4:f0:9a:e5:49:45:cb:fb:63:40:cc:b2:12:
ea:a1:f2:e7:4e:87:bd:68:37:a8:15:cc:a7:7e:92:
35:8d:e8:42:b4:ab:1d:23:8c:07:37:90:b8:32:48:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A8:F1:67:11:F2:A3:20:0C:F2:0B:96:A9:55:49:C4:46:EC:68:D9
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:37:f0:e0:2c:7b:a6:2e:6c:af:04:cf:cd:3b:3b:90:01:
7c:85:3f:be:45:0a:2d:5f:7c:40:dc:c8:ae:fc:a2:25:08:f4:
29:e1:5e:f3:6b:97:37:0a:95:af:be:05:74:ee:ca:d3:86:2d:
0c:b2:fe:d3:74:a0:ba:59:fa:72:62:2c:68:a5:be:e3:68:2e:
d3:68:60:73:9c:6b:52:ce:8f:2f:01:a2:b2:85:92:41:5c:68:
23:08:12:80:75:06:cf:28:f4:64:36:87:69:fe:0e:b2:7b:25:
1c:b0:1b:2b:4d:3d:53:29:5b:5d:8a:65:cf:62:2e:d2:c2:42:
3d:cf:3b:86:48:fb:24:06:73:3b:6f:18:a5:95:2f:97:4e:67:
c3:e6:b2:ba:73:67:7e:b2:60:69:6e:b2:62:3e:50:b9:31:3b:
16:08:57:50:4b:af:9d:92:9e:92:a6:ca:83:01:db:df:9d:b4:
8e:16:51:71:66:8d:14:03:db:09:96:9f:1a:18:1a:e8:aa:1d:
e4:1c:4a:e5:6c:16:01:d4:02:a3:47:1c:40:fc:9e:4d:c6:21:
a4:36:8d:de:45:f2:a3:03:9a:eb:e9:97:02:10:aa:89:46:15:
71:38:32:0a:27:5e:ef:fb:1c:b4:96:1e:b4:c5:37:1d:f1:99:
3f:83:d2:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG
MDYzMkEwNDkwHhcNMjUxMjE4MjIwNTIxWhcNMjUxMjI1MjIwNTIxWjAYMRYwFAYD
VQQDDA02OTQ0N2FhMi0xYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssOdqK69PxAwG1D62zf+keJxXVDaNZLqUys/iVJRgP5OmIrbmta8uBZMTrX3
F7e8arvkCIxyZXoUwsdZ45IKsx6jIBmaJpNN/ckThuO2N2xvvzuQWRXUUeIGoxIh
TSHfBdOIzFeC3iZPOMzZV6xEeQKSfvfh7JQne+sLqoX23lGVQyr2hUditYZ0ZQmm
Uie26RKBjKeWtytkOuWU/WzZZnX9/QaZmHMCMBYG4UwbcBFRrZwA5oCGgqmtLhjb
e3Ze5+f1GGYWBA4rBERt39WtiOL48fTwmuVJRcv7Y0DMshLqofLnToe9aDeoFcyn
fpI1jehCtKsdI4wHN5C4MkjOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmo8WcR
8qMgDPILlqlVScRG7GjZMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB
QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3
Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7MDfw4Cx7pi5srwTPzTs7kAF8hT++RQotX3xA3Miu/KIlCPQp4V7z
a5c3CpWvvgV07srThi0Msv7TdKC6WfpyYixopb7jaC7TaGBznGtSzo8vAaKyhZJB
XGgjCBKAdQbPKPRkNodp/g6yeyUcsBsrTT1TKVtdimXPYi7SwkI9zzuGSPskBnM7
bxillS+XTmfD5rK6c2d+smBpbrJiPlC5MTsWCFdQS6+dkp6SpsqDAdvfnbSOFlFx
Zo0UA9sJlp8aGBroqh3kHErlbBYB1AKjRxxA/J5NxiGkNo3eRfKjA5rr6ZcCEKqJ
RhVxODIKJ17v+xy0lh60xTcd8Zk/g9KK
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:06 2025 by rpki-client