This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json)
Hash identifier: EzCFyIX1T2VuvZiSUQnNBX3GJix9fVmTJ60hzpAizXo=
Subject key identifier: 7C:9A:E9:BA:E1:F0:3E:F3:50:3E:C6:26:A9:46:4E:96:A6:04:44:DC
Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Certificate serial: 07D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
Manifest number: 07CB
Signing time: Thu 18 Dec 2025 20:47:24 +0000
Manifest this update: Thu 18 Dec 2025 20:47:24 +0000
Manifest next update: Thu 25 Dec 2025 20:47:24 +0000
Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: X6Y4xXwengHrc2oDeCvBuekQXK7NnzC5nzAJclL1EVY=)
2: D39C89F8B85D11F08E813B1BC4F9AE02.roa (hash: CKukLwiY2YCCZ2/mXRrRk0YTk3jfh0JJwF1Hg6Cz4Og=)
3: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: Dkqf9iSh4QQJs2mZkJEMgbT0BzwzhORuJVYaCkXmjeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Validity
Not Before: Dec 18 20:47:24 2025 GMT
Not After : Dec 25 20:47:24 2025 GMT
Subject: CN=6944685c-3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:1d:94:57:fe:8c:40:69:75:c2:e8:13:15:
05:b9:01:e9:06:b8:b6:40:b1:79:b8:17:3c:ce:8b:
0b:60:50:aa:a9:63:8e:e3:d6:71:63:a6:70:d2:29:
75:23:e5:3c:8f:2d:02:85:89:11:a6:b2:37:bc:f8:
e3:57:a5:e0:a7:e5:3e:02:8e:8a:39:4e:9a:6c:69:
f9:2a:34:fd:fe:25:52:2c:7a:eb:9a:ee:3b:01:4c:
e3:64:6c:68:81:cf:1a:82:d7:03:9e:13:2d:b3:48:
b3:d5:80:f5:fc:28:85:50:ef:c2:e3:30:d7:2b:19:
f7:7f:93:cd:2a:96:50:30:98:f8:7f:0e:47:e2:b0:
6c:d6:c2:f8:8a:97:4a:61:27:d0:1d:be:a4:ac:cb:
da:41:b1:2a:9a:45:24:65:96:02:5c:ab:bc:c3:03:
8b:96:23:27:6c:2d:99:20:d5:39:b9:ec:e4:9c:a4:
55:bd:21:13:e3:b5:e4:4a:d2:6f:ae:ea:4d:95:10:
79:d9:87:e9:c8:a8:0b:13:b3:57:82:04:9c:cd:74:
4f:ff:48:4a:1b:1b:b3:fd:a6:4d:97:dc:de:ac:c2:
ea:88:02:03:e7:ef:66:8a:d9:33:7d:6f:e2:8c:a3:
f5:dc:42:7a:20:f7:23:74:1c:30:02:1f:1b:25:e2:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:E9:BA:E1:F0:3E:F3:50:3E:C6:26:A9:46:4E:96:A6:04:44:DC
X509v3 Authority Key Identifier:
keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:0e:21:23:54:8a:3a:e6:f4:fb:12:b3:71:5c:50:41:a1:
fb:c7:dd:43:66:26:81:34:2c:1f:a8:b0:41:8a:25:a8:47:2a:
39:60:27:4a:b5:75:be:5d:87:7c:be:ce:ad:4e:be:c3:d3:99:
2c:fd:6b:0c:c2:1c:8a:0e:ec:ea:99:b4:98:1d:4a:b8:1b:ce:
10:83:eb:a7:d8:11:f7:45:be:b7:c7:fe:63:73:7c:01:75:92:
ff:5d:ca:83:0e:6e:36:43:f3:52:5d:0e:b4:02:f5:e3:de:63:
10:cc:f8:35:35:25:c4:9c:f3:26:0f:5a:6e:5a:9d:84:af:6d:
c3:4d:09:6b:3c:cc:b5:8c:65:d2:3c:c1:78:1d:ca:17:24:8e:
46:3a:a3:b8:89:df:29:11:c6:3a:5e:09:02:12:3a:cc:27:bd:
91:a1:6b:a5:b1:1e:db:8a:97:2f:c8:fb:c2:57:7b:54:b7:6b:
14:ea:31:d1:6e:0c:66:70:73:64:73:9b:12:bd:d9:04:f9:d9:
4a:32:71:eb:24:73:12:d1:9f:e6:06:03:41:f1:e4:2f:58:fd:
83:75:36:95:d0:4f:95:78:a7:80:0b:9f:71:9b:bf:ef:ee:ff:
cb:22:5c:a5:09:38:f8:46:c8:31:53:69:bc:81:f6:c9:92:76:
4f:2f:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:12 2025 by rpki-client