This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft
File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json)
Hash identifier: vmn4oEL3FkpA5Qb2noPifVsqlTdHZVTkmwGg3rPPpLk=
Subject key identifier: 8C:BC:50:DE:94:CF:26:71:CB:03:69:77:04:0C:26:3E:B1:72:62:61
Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61
Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61
Certificate serial: 0501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft
Manifest number: 04FA
Signing time: Sat 20 Dec 2025 22:59:13 +0000
Manifest this update: Sat 20 Dec 2025 22:59:13 +0000
Manifest next update: Sat 27 Dec 2025 22:59:13 +0000
Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: /8xs1HXfB0Xce5OeVxjO2YhD2QZPj4EpU1gDGxVXBPY=)
2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl
rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61
Validity
Not Before: Dec 20 22:59:13 2025 GMT
Not After : Dec 27 22:59:13 2025 GMT
Subject: CN=69472a41-ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:11:53:be:41:b3:6d:e2:e6:2a:3e:e2:a3:
d0:ae:3f:dc:d0:f0:7f:6e:d1:dd:62:0a:c3:b0:06:
b9:0c:b8:87:5a:2c:36:3c:0a:46:9e:a7:99:c6:96:
c1:6d:43:cd:8c:28:a5:73:33:5a:d6:cf:d9:b7:61:
f3:18:0b:f0:64:5a:15:48:38:cb:b5:77:2c:29:5b:
3c:1d:dd:7e:b9:9e:d8:06:01:01:5c:48:36:ba:8e:
40:36:a9:aa:d5:92:1a:14:f6:fd:1e:5c:73:1c:7e:
eb:4b:3c:d3:08:26:81:e0:0f:d4:61:9f:e6:7c:eb:
1a:72:b8:a8:16:11:69:25:c4:3e:49:2c:04:bc:58:
f3:e0:ce:e1:9c:0c:4f:13:59:91:da:98:75:47:72:
9d:8e:cf:bb:4e:79:4f:77:49:98:c5:40:88:32:4f:
2f:5d:f7:d6:2b:cd:e2:61:0d:83:05:94:43:e3:3d:
30:e2:31:97:49:b6:ea:87:62:41:34:7e:4c:da:34:
57:60:08:76:db:23:aa:65:a4:a1:f0:fc:7a:cf:58:
14:55:54:f4:a5:cb:c2:4c:ec:35:0c:ec:d6:47:32:
c3:64:da:f0:02:74:4b:16:18:e6:ea:50:3b:1b:f4:
d5:34:11:c7:d3:45:af:28:f4:cc:ff:72:58:d0:42:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:50:DE:94:CF:26:71:CB:03:69:77:04:0C:26:3E:B1:72:62:61
X509v3 Authority Key Identifier:
keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c1:a7:24:e4:1d:da:b9:7d:59:cb:84:98:44:e6:2d:4b:48:
e8:05:5e:88:37:39:fb:da:81:21:12:60:17:0b:e1:7b:0c:b0:
2b:2f:7d:aa:79:07:60:8a:2c:12:2b:51:3b:60:93:1f:f8:9c:
2a:c3:b0:67:a0:1d:16:9c:70:00:f5:d2:2a:64:5d:99:19:ed:
14:2f:df:ff:d7:96:3b:0f:66:d4:b4:df:00:86:87:d9:8f:f6:
db:a7:31:36:92:83:66:b8:05:d7:7a:f2:82:04:54:ea:fd:16:
25:47:c1:2d:bc:24:b9:da:96:a8:ff:36:fe:ec:d2:29:72:55:
35:82:93:17:c9:db:fb:7b:e4:39:98:73:cf:39:6a:8e:14:9e:
e9:f7:a9:f1:4c:f8:fb:fa:b1:e6:c0:61:72:55:fc:f3:05:e1:
17:ee:ac:e2:87:1d:9d:26:65:2f:3a:47:8a:91:79:40:f4:0f:
e0:fc:5e:c2:28:9a:d4:13:31:4c:66:ff:b7:6a:fb:f3:b0:42:
be:6f:1e:a6:cf:89:c3:44:bd:3c:77:26:18:2b:d6:ff:da:55:
96:15:72:3d:41:0f:fc:26:60:ce:cd:5b:d5:04:ec:93:84:37:
18:cc:5e:92:41:c4:9a:3b:fe:57:f1:ac:98:a1:db:29:b3:e8:
9d:22:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:42:28 2025 by rpki-client