This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: fF+6jyofMxwDmr3RiGJARFXb5Cw1dS/f3gXQSBT01FY=
Subject key identifier: CE:07:B1:3C:A4:41:63:AD:DD:0D:98:D4:F3:0C:15:EA:7E:C9:6A:C1
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 0500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 04E4
Signing time: Sat 20 Dec 2025 23:08:37 +0000
Manifest this update: Sat 20 Dec 2025 23:08:36 +0000
Manifest next update: Sat 27 Dec 2025 23:08:36 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: H5iDHv5DTBAgcIaQn8i/0gnlik1Pcu1mEZR5HOfT/gw=)
2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: iwDIeTH9jAKRmJy5+E9fAG3VbE729VNzq/7AMrBopsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Dec 20 23:08:36 2025 GMT
Not After : Dec 27 23:08:36 2025 GMT
Subject: CN=69472c75-3d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:ff:90:83:42:1b:df:2b:25:82:ef:96:48:
c2:15:88:a3:b9:1d:27:36:ec:f3:a5:06:96:e4:f7:
0b:57:e2:17:9a:20:44:62:cf:0d:ab:18:95:67:5e:
e6:0a:4c:96:38:fc:34:14:5c:c6:17:c4:dc:45:85:
1b:b1:a8:0f:e7:ed:f7:3d:e3:be:da:de:ba:95:c1:
fb:2e:d6:8e:02:0e:ff:5c:d9:ea:c6:bb:fd:05:a6:
83:fe:15:3b:1b:04:3d:77:37:02:d8:2b:0b:bf:3a:
92:61:8c:71:74:5b:90:22:2c:cf:a4:73:29:d9:a5:
ac:e4:ea:58:69:f6:2c:58:95:92:fb:57:43:33:a7:
89:5f:fd:14:39:da:15:53:96:63:b0:26:e6:35:05:
72:c6:8c:9b:c3:0f:c4:be:a8:20:30:76:e4:92:28:
33:37:70:f6:a7:0e:04:ed:29:fb:0a:68:84:b3:33:
1d:a1:7f:97:3e:ec:70:de:9f:bb:1a:2a:ec:18:1e:
f5:27:a2:30:33:2f:75:c3:39:e5:eb:78:20:8b:a3:
b6:33:48:9d:8f:44:87:c8:8d:e8:59:ea:dc:d5:32:
de:b6:9a:56:2d:ca:27:9a:35:bb:2b:89:52:f4:30:
83:90:46:9b:76:3a:e6:8b:43:f4:41:fb:be:64:9b:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:B1:3C:A4:41:63:AD:DD:0D:98:D4:F3:0C:15:EA:7E:C9:6A:C1
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:37:a5:32:ab:a5:0e:95:94:8a:85:e1:95:f2:ec:52:7f:ec:
3c:a0:9e:c9:76:0f:57:af:81:13:a7:f6:1e:31:bb:48:2f:5b:
43:a8:1c:81:60:21:17:89:0a:7d:67:94:24:82:fd:74:7a:4f:
1f:6c:62:14:32:3e:ae:30:68:61:27:ca:bb:43:da:a5:5f:7a:
1a:9a:b6:81:90:a5:72:10:3d:bf:be:40:27:32:a8:35:79:f5:
f3:7c:f6:ce:22:e4:d8:6b:2c:9c:8c:e4:61:0d:9a:ed:e6:d1:
15:76:1f:33:20:e9:dd:bd:c0:22:9d:4c:d7:15:0c:83:15:78:
cc:9c:bd:d2:fc:c1:80:6d:59:41:8f:e5:79:af:44:e8:85:2f:
c8:da:4b:0e:e3:85:25:5d:c0:ff:c5:30:95:3e:f1:5e:09:03:
62:80:cb:b8:c0:09:92:13:37:4a:0b:ce:9b:23:77:93:77:38:
13:ed:8d:ce:9c:fa:8d:0b:55:be:9b:40:59:68:10:ba:fa:fb:
4e:f7:9b:a7:c8:cc:0a:06:75:66:49:c5:0e:54:8b:39:44:08:
68:7a:33:b1:3b:fb:e7:34:a2:a1:00:70:a4:aa:b3:da:db:f6:
f0:a9:2c:c4:95:e2:c6:8e:c1:86:65:88:d8:21:bc:48:ab:0c:
fa:90:41:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy
QTNEQTUxMUUwHhcNMjUxMjIwMjMwODM2WhcNMjUxMjI3MjMwODM2WjAYMRYwFAYD
VQQDDA02OTQ3MmM3NS0zZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQn/kINCG98rJYLvlkjCFYijuR0nNuzzpQaW5PcLV+IXmiBEYs8NqxiVZ17m
CkyWOPw0FFzGF8TcRYUbsagP5+33PeO+2t66lcH7LtaOAg7/XNnqxrv9BaaD/hU7
GwQ9dzcC2CsLvzqSYYxxdFuQIizPpHMp2aWs5OpYafYsWJWS+1dDM6eJX/0UOdoV
U5ZjsCbmNQVyxoybww/EvqggMHbkkigzN3D2pw4E7Sn7CmiEszMdoX+XPuxw3p+7
GirsGB71J6IwMy91wznl63ggi6O2M0idj0SHyI3oWerc1TLetppWLconmjW7K4lS
9DCDkEabdjrmi0P0Qfu+ZJsLDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4HsTyk
QWOt3Q2Y1PMMFep+yWrBMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy
OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz
bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8N6Uyq6UOlZSKheGV8uxSf+w8oJ7Jdg9Xr4ETp/YeMbtIL1tDqByB
YCEXiQp9Z5Qkgv10ek8fbGIUMj6uMGhhJ8q7Q9qlX3oamraBkKVyED2/vkAnMqg1
efXzfPbOIuTYayycjORhDZrt5tEVdh8zIOndvcAinUzXFQyDFXjMnL3S/MGAbVlB
j+V5r0TohS/I2ksO44UlXcD/xTCVPvFeCQNigMu4wAmSEzdKC86bI3eTdzgT7Y3O
nPqNC1W+m0BZaBC6+vtO95unyMwKBnVmScUOVIs5RAhoejOxO/vnNKKhAHCkqrPa
2/bwqSzEleLGjsGGZYjYIbxIqwz6kEEw
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:35:03 2025 by rpki-client