This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier: 6prddaawyPUvXw29WeIWT8Ofh6Qt1l79ooorzOMrXAw=
Subject key identifier: 09:C6:FC:42:71:85:04:C7:F8:2B:6E:5B:19:EB:D6:AB:94:F5:0C:F1
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number: 6D
Signing time: Sun 21 Dec 2025 05:57:41 +0000
Manifest this update: Sun 21 Dec 2025 05:57:41 +0000
Manifest next update: Sun 28 Dec 2025 05:57:41 +0000
Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: fKLk6mGR1YzckqklF0qxrL75Lvsi5GVmp+oPfLGGAZU=)
2: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=)
3: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Validity
Not Before: Dec 21 05:57:41 2025 GMT
Not After : Dec 28 05:57:41 2025 GMT
Subject: CN=69478c55-b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:6f:46:e9:b1:96:ae:70:13:e8:a8:fb:00:
4e:6c:46:30:1e:b0:5b:c7:42:49:7e:d0:5d:4b:46:
ef:29:13:4f:1f:45:02:f9:93:bb:72:ad:64:64:17:
a9:06:ef:9f:d0:c1:6a:43:04:8f:29:58:23:f7:94:
fe:76:32:c9:27:9d:c6:4a:2e:fc:f6:d0:eb:96:87:
90:a3:4c:0e:45:73:73:7b:18:ac:aa:a6:34:b4:1c:
e6:2d:a4:dc:75:57:d0:9c:e1:90:56:cc:5a:b1:48:
e3:33:87:d5:db:fe:3b:c2:13:38:30:62:95:1c:12:
4a:c2:b8:16:c3:3e:dc:29:38:6c:20:93:83:ee:1a:
99:ca:22:22:1c:34:28:9e:de:4c:6d:22:e4:fa:b0:
27:71:1a:fe:8e:af:0f:14:8a:bc:5a:79:36:e0:ee:
e5:a7:8e:62:e1:a0:e4:aa:c5:9a:b6:f3:db:a4:d2:
16:11:6b:81:ff:a0:9d:55:73:23:7b:13:9f:08:5b:
29:47:26:29:d0:16:2f:ab:b9:12:31:e2:70:b2:aa:
64:ea:de:08:4a:a9:5a:be:53:d1:57:30:19:d3:77:
85:e1:af:28:a2:0d:32:80:ef:6f:b2:34:24:53:82:
5b:15:7b:42:3c:a4:16:59:a1:81:61:a2:37:a6:e5:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:FC:42:71:85:04:C7:F8:2B:6E:5B:19:EB:D6:AB:94:F5:0C:F1
X509v3 Authority Key Identifier:
keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:90:0a:b4:df:32:cd:03:fb:20:88:76:19:3c:0c:f0:12:21:
99:40:d1:24:bb:ac:e7:a5:7f:7c:63:de:77:ae:a0:24:e7:bf:
a7:f4:bf:7b:9d:c6:6c:91:83:14:fb:08:34:03:2c:86:f5:12:
d4:be:82:85:9e:7b:30:8f:ff:d1:96:80:f2:a7:ae:f2:ca:e6:
f6:fc:7e:5f:04:6c:b4:3e:a6:df:aa:83:49:9f:fc:26:f1:54:
bf:9d:5d:f1:7d:76:ee:47:65:92:68:5f:86:55:67:22:f2:e1:
1d:9e:2f:62:8e:be:49:61:29:60:b8:ba:40:40:d9:6b:de:da:
b1:b8:c4:40:4e:bc:d5:81:ee:53:c7:86:68:65:8b:6f:7f:3d:
dc:f8:b7:94:83:9d:8d:b8:4b:5b:dd:8b:eb:65:c6:13:9c:35:
29:ad:13:5e:0b:e9:72:d7:c8:6e:d8:54:1c:be:7c:40:22:56:
a9:9b:ec:d9:40:23:db:ad:8e:c6:9a:57:c3:16:fe:18:49:f9:
c4:aa:95:16:c5:0b:6e:70:d7:cb:c1:a3:da:51:cd:40:fd:c3:
0e:4d:ba:59:a3:b4:b3:0d:19:dd:74:59:a8:19:93:7c:cb:1b:
30:4c:98:b8:06:b8:68:cd:92:2a:52:07:7f:01:1f:94:7c:9c:
2c:90:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:16:21 2025 by rpki-client