This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier: lGQcPFoHki+A3gzuqn+VTJguzCL+d7/rRmAoLV0+4MI=
Subject key identifier: 45:68:EB:48:7F:4A:87:0E:94:DF:59:D8:2E:27:A9:02:71:D6:52:4D
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number: 014E
Signing time: Tue 23 Dec 2025 03:26:33 +0000
Manifest this update: Tue 23 Dec 2025 03:26:33 +0000
Manifest next update: Tue 30 Dec 2025 03:26:33 +0000
Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 7ty8YY1BGvNw9RAMu57zMcn9jc5yIeY7taY+yXzTBN8=)
2: 1E5C2C5AB29611F09FBA3C5FC4F9AE02.roa (hash: HO455dnGSFFv71vVWjqwuOo42txHTtv1EfogsEGoJTI=)
3: B7B28B24B29611F091864D65C4F9AE02.roa (hash: R+HTfU3ExQBNMZ+axibvvpKJt+DXstKCKz/X+iou2Bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Validity
Not Before: Dec 23 03:26:33 2025 GMT
Not After : Dec 30 03:26:33 2025 GMT
Subject: CN=694a0be9-e95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:6f:93:d8:d4:9d:fa:45:5f:a4:5a:46:73:
3e:68:4d:14:5b:3b:0a:c1:70:c5:ee:43:e5:8b:8e:
c3:c1:6b:95:44:0a:d8:5d:e8:a0:51:e1:3e:2a:b2:
bb:ee:55:7a:42:da:0a:68:13:20:30:88:51:c9:a6:
44:38:ae:ab:27:4a:dc:50:12:35:c6:c5:e1:f5:0f:
93:84:38:16:36:18:e2:17:48:b2:93:cb:0b:67:b8:
15:4f:65:5a:61:86:47:a9:24:d1:c3:0c:02:38:0b:
c0:1d:04:0d:5e:45:c9:2f:64:d7:75:49:82:17:e7:
c8:b6:5f:35:f6:37:13:db:90:ba:4a:48:60:a8:21:
97:f6:fc:05:c7:98:73:cc:86:f3:09:5b:70:fa:8a:
8f:ec:09:f5:e0:d0:4e:c3:80:61:4e:74:32:fd:6c:
76:db:3d:39:2d:b6:76:b2:40:aa:d4:1b:cd:9e:c2:
35:01:5a:93:a1:45:4f:f4:45:85:cd:4b:c4:8c:43:
fb:4e:87:2a:4c:31:1e:f7:74:10:38:29:3d:f9:58:
f5:17:3c:0b:14:9a:5c:7f:30:9b:cc:bb:d6:13:16:
d9:12:17:0a:4a:a2:42:b4:44:e5:a9:2b:8e:ef:e9:
46:9b:ad:77:92:2d:14:b6:a0:42:9b:be:20:96:9e:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:EB:48:7F:4A:87:0E:94:DF:59:D8:2E:27:A9:02:71:D6:52:4D
X509v3 Authority Key Identifier:
keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:9a:5c:4a:84:0c:b0:5b:dd:81:9e:4e:aa:e2:4c:b8:ff:6a:
fc:45:a9:fe:5f:8c:90:0b:90:6f:3b:f2:7e:2c:b6:dc:f7:dd:
0a:e4:4f:7d:6c:b8:cf:76:2c:0e:8e:55:a8:1c:2c:ed:a2:5c:
44:96:b6:ba:40:73:63:0d:45:51:f5:00:77:59:69:20:34:c2:
ac:48:94:af:c5:dd:c2:40:89:88:c8:ff:db:5a:a1:59:c1:ee:
d5:0e:33:2b:91:1c:18:aa:bf:2d:0a:90:fb:6a:b4:07:67:96:
25:4a:84:2a:21:cb:1c:04:08:ed:9a:9d:1d:bb:71:c2:96:df:
92:91:df:28:43:cd:a4:d0:44:1a:df:2f:5f:9d:01:6a:63:ac:
bb:23:d7:3a:97:27:03:57:df:84:df:de:fd:af:ac:00:e0:94:
bb:15:e4:1d:a3:21:5f:89:7b:fb:0a:9b:29:43:10:98:83:68:
f8:b5:e2:ae:9c:22:67:fd:ad:7f:37:2d:f1:c4:e8:fe:16:63:
f8:64:fe:c2:38:84:4d:3e:1e:e4:34:84:4b:08:d6:6e:4a:9c:
73:c5:d5:6a:fc:96:5f:f6:e6:80:d9:1e:d2:05:f3:c8:f4:01:
09:ca:61:10:81:b6:35:55:f9:6b:88:e8:d1:b7:53:a2:ad:1e:
06:42:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:15:03 2025 by rpki-client