This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier: QU2mnu/WGexmC+pLr49kHnekmTIpxeCp9PdmLM6HiKs=
Subject key identifier: 07:D5:96:4A:54:28:47:A4:36:4B:F5:5B:6A:43:CF:C4:9E:BF:35:0B
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial: 079A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number: 0791
Signing time: Sat 20 Dec 2025 20:53:43 +0000
Manifest this update: Sat 20 Dec 2025 20:53:43 +0000
Manifest next update: Sat 27 Dec 2025 20:53:43 +0000
Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: NOGSF3pzPVzei9DdmmKtJvE6e6k8t3krKU92KHwi3vY=)
2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: g4K9selBUQfcqVmjGlsofsYbqF6mIa5tubfOUJ/ha24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Validity
Not Before: Dec 20 20:53:43 2025 GMT
Not After : Dec 27 20:53:43 2025 GMT
Subject: CN=69470cd7-a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:02:b9:15:d2:63:4b:bf:38:db:39:13:d9:
58:22:fa:f1:41:aa:38:46:41:e6:72:fc:3a:fb:03:
6a:f5:44:8f:c8:2e:f9:7f:72:f1:6f:94:63:99:58:
4f:20:d5:31:74:89:d2:9f:6c:8f:bf:d7:22:e1:cb:
c3:57:73:d1:48:04:b6:a2:75:91:6c:e0:e9:03:1a:
e1:3b:21:a5:a7:e1:52:37:19:e9:94:0f:02:0f:8a:
b4:de:dd:4e:7a:dd:11:48:9a:7d:a6:4d:03:33:1d:
df:6b:0d:3c:e4:e4:2f:b4:b7:07:ce:cb:07:78:57:
b4:71:05:c2:53:de:a1:80:54:0c:5c:43:e0:36:29:
6a:77:3a:7a:79:00:3b:f5:00:ab:b7:08:18:37:22:
47:2a:3a:94:c9:c6:f4:52:a9:58:67:6b:7e:8e:4d:
cb:b2:39:e4:eb:49:c7:1c:c4:55:b4:15:33:be:4d:
5d:47:9c:ce:cb:b1:4e:f0:d5:5a:2e:54:18:92:96:
b5:20:0b:ee:4b:2f:8c:04:74:02:67:92:16:da:a5:
74:ed:f7:81:27:00:ed:b3:4f:6c:cc:25:c7:e5:4a:
07:27:06:78:de:c5:c5:2c:e3:e0:26:c8:6c:75:38:
c3:cd:3c:be:7b:34:ef:c7:b0:45:66:28:64:57:e8:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:96:4A:54:28:47:A4:36:4B:F5:5B:6A:43:CF:C4:9E:BF:35:0B
X509v3 Authority Key Identifier:
keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:2e:a9:eb:52:d8:18:7f:05:8a:7d:82:ac:0f:32:04:0d:53:
1c:6f:eb:d2:33:a3:c1:7e:61:69:ba:de:42:c4:bb:06:66:f7:
b2:b4:f2:11:1b:ec:ae:c9:39:3b:d0:d1:af:31:be:9b:da:fc:
72:2c:f0:6f:f9:e3:f9:c1:8e:ca:84:f6:3f:e7:28:60:34:82:
41:82:97:32:66:88:09:e0:a5:2a:11:66:71:63:c2:a2:68:f2:
53:b4:90:42:d7:53:34:7e:bb:5a:a9:fc:b1:a6:70:3d:c4:72:
bc:dc:3d:ef:8b:e4:ce:2a:26:7e:47:ea:0c:23:10:4e:15:c5:
75:8e:c7:ba:f5:1c:46:ca:24:da:38:3f:1a:ce:18:1b:ec:dc:
3e:bd:c4:20:bb:68:23:71:51:b8:c5:bc:39:ec:45:1d:46:28:
30:ce:55:86:10:79:b2:98:01:bc:4e:3c:c8:42:14:48:e4:d7:
ef:f5:80:a6:0a:36:da:34:4c:fc:5f:7e:fd:11:88:50:a8:43:
70:59:ad:fb:74:3e:d5:d2:00:d9:52:ba:f4:55:21:13:41:57:
af:d1:a6:fd:93:7a:db:8d:78:80:74:ce:07:43:29:ae:77:33:
01:64:f8:46:b3:d2:4a:c6:d6:28:24:27:32:23:9c:7e:c6:ee:
27:58:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:05:52 2025 by rpki-client