This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier: BD9YiyHjr30pg/ZQEybtZaPSY4oeUm0Qxm+uqwAlLwE=
Subject key identifier: E8:69:70:E8:39:67:97:19:C4:52:D0:0D:3C:E2:43:24:07:91:19:09
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial: 0706
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number: 0700
Signing time: Thu 18 Dec 2025 21:20:21 +0000
Manifest this update: Thu 18 Dec 2025 21:20:20 +0000
Manifest next update: Thu 25 Dec 2025 21:20:20 +0000
Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: VD9uyOo6RGuKLm3WRzpJnDdYBp02VeVvm+UttV5rKW8=)
2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Validity
Not Before: Dec 18 21:20:20 2025 GMT
Not After : Dec 25 21:20:20 2025 GMT
Subject: CN=69447015-5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:a0:21:0f:fe:e7:95:1f:25:41:97:5c:0d:
ae:34:b0:24:82:cc:7d:68:06:b2:2b:f6:77:12:b1:
34:65:a0:f0:84:f0:44:dd:78:dc:7a:69:23:35:94:
43:f5:f5:6b:a4:28:5a:87:28:43:c5:ff:9e:e3:6f:
9b:31:17:3f:cb:00:14:e0:c3:2a:5b:1f:d8:0a:ce:
1d:9a:71:25:66:e6:74:8e:eb:8c:0d:d8:a2:d7:1a:
de:3c:28:90:9e:7b:d6:c8:2c:9f:62:33:b7:21:5a:
01:39:4a:72:f3:89:25:0f:97:64:e6:b7:d1:7b:c9:
51:35:70:48:ae:3f:d9:3e:34:ae:76:91:99:f7:4a:
dd:95:76:bc:30:25:9f:b6:53:75:7b:c0:2a:67:6a:
43:92:89:bc:ce:ec:b2:28:ce:5b:f6:e6:47:45:0f:
73:c3:e1:af:b7:0a:82:64:92:cd:8e:d6:58:53:7b:
d5:bf:75:b7:dc:6a:1d:87:5d:50:76:75:36:7a:0a:
36:14:26:ea:76:0e:65:95:ca:b1:b5:11:68:04:7f:
74:34:f0:43:73:f1:6b:4a:ce:65:b7:8c:e0:06:1a:
79:6f:9f:85:9a:e1:26:6d:f9:44:c3:3b:6e:30:c4:
b0:37:64:c8:ac:7b:a0:70:dd:79:a1:74:d2:d9:6f:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:70:E8:39:67:97:19:C4:52:D0:0D:3C:E2:43:24:07:91:19:09
X509v3 Authority Key Identifier:
keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:d5:1d:a5:0d:e0:cd:35:50:10:77:4b:b5:8f:e7:3b:a9:
27:9c:37:78:7e:01:9e:87:e0:06:83:f6:53:5f:04:c8:fb:9b:
a3:8e:f5:b7:76:cb:a7:dd:f4:77:90:65:3a:5c:26:43:3d:3f:
99:d0:ba:47:99:1a:ef:06:be:bd:9e:7a:3a:b5:c8:33:05:b6:
ac:6c:28:77:e3:4a:79:db:7d:26:8f:55:ad:8c:fb:15:c1:ec:
88:70:72:f4:6b:67:df:e0:05:7f:7c:05:e5:10:32:02:53:8f:
c4:f7:ed:bb:a7:bf:ce:71:62:74:7e:e7:db:a5:73:97:ae:46:
fc:77:ff:87:b5:d4:e4:13:cd:e1:61:4b:e9:8f:b0:4c:65:0b:
05:ca:6c:7a:7d:fe:10:f1:c6:06:ef:a7:64:f4:3c:5e:3c:6a:
e4:95:6a:0f:44:5c:db:30:3d:c8:8f:d9:54:97:f8:54:08:35:
8e:bd:f0:ce:92:4c:96:c8:e3:d4:75:df:cb:f9:89:a1:87:ab:
96:bf:69:14:65:9f:3b:0e:05:09:a6:3d:aa:05:8d:63:8a:25:
14:3f:cf:fe:81:5e:db:19:b9:cc:31:9b:6d:4e:9a:dd:41:e8:
dd:ec:40:ef:ad:48:73:41:24:3c:9e:2c:18:75:62:e2:53:01:
d0:1c:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:54 2025 by rpki-client