This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier: EzLZoeYqZrKuH8v0puJul/i6yO8mJLGBr78O4D/Hdo0=
Subject key identifier: 6F:6C:E7:99:55:E9:CA:96:2D:C6:26:59:0B:FD:26:89:B8:2A:E0:66
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number: 05F0
Signing time: Sat 20 Dec 2025 22:18:22 +0000
Manifest this update: Sat 20 Dec 2025 22:18:21 +0000
Manifest next update: Sat 27 Dec 2025 22:18:21 +0000
Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: ZlVXG5UoS9KECWne/7Bm6zHkhlLRadwgqk2nEpVhFVM=)
2: 660A349884C511EFB2831C16C4F9AE02.roa (hash: K5rdCvcUlROQ0BuNDtcUQ3F8rgeuD4032+cfZuPHo+g=)
3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: eZp28/ZhhARP0YeFheqkwTLrrVm+pDubRXIX/coSMO4=)
4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: UjG7oDUQ214221eoKLkpu49JL/kh+6CSjcDdtuUyQv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Validity
Not Before: Dec 20 22:18:21 2025 GMT
Not After : Dec 27 22:18:21 2025 GMT
Subject: CN=694720ae-b112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:e2:c2:4f:d3:a5:b1:af:39:ba:e5:f5:7b:
3a:98:04:87:98:29:91:bf:68:8c:2c:b0:61:d8:93:
2e:d9:b8:7d:9d:81:14:0d:c3:a5:e7:95:6c:97:00:
01:87:be:40:2a:64:b3:1b:fe:99:63:0d:94:79:72:
41:9b:8f:83:06:e6:1e:b1:7e:51:f5:4d:ac:05:cc:
50:7c:37:85:f2:b2:ea:2a:da:fc:a2:9e:68:f2:fe:
bb:04:5b:2a:7f:00:2b:77:03:39:c5:43:9f:7d:46:
5b:83:62:99:19:d1:a6:3a:49:61:0d:4a:d3:fd:9c:
b7:5e:85:c2:ea:2a:8f:f5:d4:13:c8:66:8c:82:93:
f7:4a:dd:29:80:e1:10:29:c1:9e:c0:3d:5d:c7:fc:
f1:83:c8:e0:a6:c4:3f:c5:1d:12:da:18:36:3e:77:
3f:03:2c:7f:92:07:8f:e3:80:55:f4:89:5c:6a:77:
5d:3e:71:b3:9b:9e:f6:60:aa:cd:41:79:7c:2c:5d:
43:d0:09:87:68:2b:f6:cf:2d:8b:b5:2c:3d:8f:37:
66:88:77:fe:66:8c:4b:21:d8:fe:b8:9d:82:0c:8c:
ef:3e:4c:07:c1:d6:fe:3d:91:a7:a9:71:ef:13:14:
13:70:09:46:4b:99:93:5f:ea:99:a8:c6:f3:0c:2d:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:E7:99:55:E9:CA:96:2D:C6:26:59:0B:FD:26:89:B8:2A:E0:66
X509v3 Authority Key Identifier:
keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:d6:b8:26:41:9b:8a:96:00:44:7a:1d:61:5e:05:51:a9:
8b:f2:78:4e:1c:ab:02:02:09:a2:69:4d:21:9c:74:02:9e:1c:
9f:77:a4:7d:4f:c2:d9:de:f8:58:82:c3:5c:9d:75:6e:b9:5a:
d5:23:ac:dc:82:60:fe:eb:52:95:62:c9:0f:4c:7d:a4:db:08:
92:29:f7:d8:f3:85:1b:05:8e:4a:5f:cb:12:e3:e8:68:8b:20:
06:93:49:86:b2:39:fe:d5:b7:39:6b:66:aa:a0:43:2a:c8:44:
8f:a6:0f:5b:ff:41:4d:ea:3a:d5:ed:aa:6c:0f:b8:2b:92:f8:
89:f4:96:7c:56:c6:81:ee:31:68:f2:42:8a:39:8c:30:08:93:
40:b4:92:13:02:80:2b:1d:87:33:51:cb:62:a9:f8:f6:92:bc:
bf:99:c7:32:3a:e1:20:26:3d:f0:a8:8e:9a:db:62:d9:0f:07:
1e:0d:13:31:d6:12:13:63:4b:9f:ca:b9:b3:dd:87:fd:f2:7a:
24:77:68:60:d9:ea:35:33:0a:38:76:70:17:ac:0f:05:ec:57:
16:31:aa:cf:51:a6:46:97:72:25:63:70:2c:33:0e:38:69:2e:
87:55:e1:15:cd:f7:78:f4:98:3a:99:3a:98:ee:f4:d9:92:28:
fb:83:06:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz
MzcxNzcyRUQwHhcNMjUxMjIwMjIxODIxWhcNMjUxMjI3MjIxODIxWjAYMRYwFAYD
VQQDDA02OTQ3MjBhZS1iMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAjiwk/TpbGvObrl9Xs6mASHmCmRv2iMLLBh2JMu2bh9nYEUDcOl55VslwAB
h75AKmSzG/6ZYw2UeXJBm4+DBuYesX5R9U2sBcxQfDeF8rLqKtr8op5o8v67BFsq
fwArdwM5xUOffUZbg2KZGdGmOklhDUrT/Zy3XoXC6iqP9dQTyGaMgpP3St0pgOEQ
KcGewD1dx/zxg8jgpsQ/xR0S2hg2Pnc/Ayx/kgeP44BV9IlcanddPnGzm572YKrN
QXl8LF1D0AmHaCv2zy2LtSw9jzdmiHf+ZoxLIdj+uJ2CDIzvPkwHwdb+PZGnqXHv
ExQTcAlGS5mTX+qZqMbzDC0r+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9s55lV
6cqWLcYmWQv9Jom4KuBmMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF
ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB
T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUPda4JkGbipYARHodYV4FUamL8nhOHKsCAgmiaU0hnHQCnhyfd6R9
T8LZ3vhYgsNcnXVuuVrVI6zcgmD+61KVYskPTH2k2wiSKffY84UbBY5KX8sS4+ho
iyAGk0mGsjn+1bc5a2aqoEMqyESPpg9b/0FN6jrV7apsD7grkviJ9JZ8VsaB7jFo
8kKKOYwwCJNAtJITAoArHYczUctiqfj2kry/mccyOuEgJj3wqI6a22LZDwceDRMx
1hITY0ufyrmz3Yf98nokd2hg2eo1Mwo4dnAXrA8F7FcWMarPUaZGl3IlY3AsMw44
aS6HVeEVzfd49Jg6mTqY7vTZkij7gwah
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:16:45 2025 by rpki-client