This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: JvM8hfQPKSiG1pPlfwjECTaI5EMpkyXdMj0fglqd9xk=
Subject key identifier: 94:96:E6:5D:54:EF:7E:17:79:C0:2A:D7:B0:16:75:32:37:A8:40:F9
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 0161
Signing time: Sun 21 Dec 2025 03:14:36 +0000
Manifest this update: Sun 21 Dec 2025 03:14:35 +0000
Manifest next update: Sun 28 Dec 2025 03:14:35 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: CD//BCSCrFt8znenRn4PtsxPh2uRfR9tKw88ZQPcomY=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Dec 21 03:14:35 2025 GMT
Not After : Dec 28 03:14:35 2025 GMT
Subject: CN=6947661c-cd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:13:b2:4f:36:ee:13:75:4a:f5:72:7f:c3:
ca:65:2d:83:c8:da:c5:f2:f0:81:35:6f:68:d2:27:
f1:4b:5a:71:df:5b:eb:ae:ff:f5:02:1e:69:28:60:
c2:83:d4:c9:b2:8d:32:2b:fc:f0:01:58:d1:0f:77:
68:b6:be:97:a3:6b:49:e7:90:82:6e:79:f6:66:ac:
cc:e1:2c:d5:18:38:fb:7c:28:20:6f:01:53:d2:ee:
98:5e:70:a4:51:1c:bf:19:b8:83:09:f5:88:b0:33:
02:2c:6f:cc:69:d1:83:ae:4d:46:94:d5:ac:14:45:
92:2d:95:25:6b:55:e5:1f:ae:24:58:e8:97:fc:9e:
93:b7:a2:27:0e:bc:33:1c:e2:7c:e6:4f:aa:f3:45:
28:48:86:40:0f:d7:ce:71:5a:ff:b7:7f:14:f5:b2:
d2:cb:a8:a4:66:e6:38:31:57:50:b3:b6:69:43:e8:
09:18:0a:28:49:71:b7:b4:45:8f:43:d3:4d:64:35:
5f:8a:8c:01:60:4d:c4:25:d5:91:96:31:88:e9:34:
d9:65:b1:ce:1b:16:eb:af:bc:39:6a:26:e6:bf:a3:
41:2a:3f:93:74:b3:ac:8a:e0:ce:c6:3f:10:4d:84:
bc:72:63:1d:a4:49:07:de:6e:8a:ce:92:58:71:a1:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:E6:5D:54:EF:7E:17:79:C0:2A:D7:B0:16:75:32:37:A8:40:F9
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:81:f8:01:fe:01:9d:55:90:bd:46:b7:d9:39:82:53:43:
d2:63:07:8a:66:fa:1d:63:6e:c1:45:02:90:2e:16:f1:6a:98:
d7:7a:a7:a2:7f:aa:4c:b9:c2:f9:72:d7:b8:67:51:b3:5a:6d:
17:61:79:54:b5:0c:64:35:e0:0c:e7:b3:75:0f:f0:bb:20:f1:
90:6e:2a:4d:50:af:3b:9b:d9:8f:6d:ea:31:d3:48:82:5a:c2:
d9:ef:06:3d:54:07:81:52:44:72:cf:9c:d4:fd:5b:24:1d:a7:
6a:81:2b:b9:0a:c3:01:70:f9:a8:ae:a3:31:b9:8e:72:1a:26:
ee:5f:4a:a1:c4:6b:0d:6c:b6:1b:ad:d4:53:48:01:c1:c1:d6:
af:d1:a2:0b:c9:39:51:07:6d:e6:1e:b7:79:e9:13:30:89:0e:
eb:12:b8:26:26:a5:15:05:b7:4c:ef:66:75:13:52:e7:ac:f5:
f9:4e:e7:d1:c2:1b:00:50:54:0c:c0:16:ac:8c:7a:2e:4e:17:
70:33:04:b4:04:0b:1a:93:c6:89:3e:e1:3a:37:bb:35:95:3d:
ac:96:35:e9:28:ea:b9:67:93:7b:cc:2e:79:2a:ab:be:d6:5c:
37:46:2c:cc:35:d0:5c:d7:43:3e:03:00:a4:74:0d:01:43:0c:
00:18:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:00:01 2025 by rpki-client