This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
File: o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft (raw, json)
Hash identifier: ikux4VonBYJvbtSbAIsK/NFE4w6lWiDUMmLG6LVNJyg=
Subject key identifier: 66:3A:B7:F5:3B:89:16:32:E4:98:57:C9:52:8D:CB:8C:27:3E:23:BF
Authority key identifier: A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
Certificate issuer: /CN=A914E3B7/serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
Manifest number: 06
Signing time: Tue 02 Dec 2025 15:03:30 +0000
Manifest this update: Tue 02 Dec 2025 15:03:29 +0000
Manifest next update: Tue 09 Dec 2025 15:03:29 +0000
Files and hashes: 1: o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl (hash: M8YRhasrnitBR8FCBq5eDGE2kwvSkGLAP2MPb/hlsJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Validity
Not Before: Dec 2 15:03:29 2025 GMT
Not After : Dec 9 15:03:29 2025 GMT
Subject: CN=692effc1-ee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:a4:20:d0:af:30:f2:34:75:dc:59:34:05:
0e:0f:d3:71:45:3b:26:89:28:9d:aa:86:29:da:70:
90:a8:6c:97:4e:e9:cc:f1:64:25:8c:8b:b3:56:6b:
54:32:50:30:10:e7:36:35:c2:d5:8a:2d:59:e9:1f:
65:3f:4a:a4:a8:ab:d6:c9:61:4e:9f:10:59:8e:fe:
02:44:39:30:52:48:5c:3c:12:55:58:a3:f7:f0:61:
1a:93:0d:b9:29:14:8e:15:5b:f7:2b:28:d6:0c:29:
e1:68:b2:fd:17:8a:85:bb:23:1a:2d:fa:61:ba:45:
44:df:05:27:fe:a6:db:93:f2:b8:ea:aa:22:c9:1e:
a2:2f:c6:e8:2d:a4:a6:79:d7:74:c8:8b:21:4a:3a:
e8:ce:cf:d6:3a:e9:da:1f:88:de:9f:8b:66:a3:80:
f0:1d:63:3a:6d:5f:f1:9a:3e:71:25:d5:8d:dc:3b:
de:3b:79:c0:49:6b:2d:ef:70:bc:74:26:05:9e:15:
1a:ee:f1:f6:87:ce:43:9c:42:9d:3d:10:f6:37:dd:
ef:a9:31:a9:fe:17:19:c9:10:c3:f0:8e:b2:45:11:
60:8f:13:63:2c:8b:08:59:ac:3c:19:7a:ff:8a:bd:
51:b7:67:16:69:dd:d0:fa:6a:24:7b:87:b1:7a:a1:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:B7:F5:3B:89:16:32:E4:98:57:C9:52:8D:CB:8C:27:3E:23:BF
X509v3 Authority Key Identifier:
keyid:A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:c8:57:7b:6b:82:c3:2c:c1:cf:13:73:cd:56:02:7e:5a:
aa:ff:a2:fe:df:85:b1:dd:06:6a:fc:2c:47:d8:d8:a1:85:64:
99:ff:90:46:9c:cc:26:ad:a3:a5:07:8b:ac:92:29:5e:3f:80:
bb:2f:44:f3:e9:bd:6f:5b:c5:db:57:cc:42:bf:06:fb:fc:0a:
ab:7b:39:75:1b:84:c9:21:48:77:03:70:66:9f:4f:ca:82:67:
32:35:81:3e:48:66:44:cf:ef:14:06:11:4f:a3:4d:c9:6e:cd:
7b:99:f9:86:c7:8c:d9:58:1c:1b:6f:2b:49:b5:ff:9e:08:27:
74:f3:ec:ac:f2:e8:c1:6f:56:5c:5c:07:69:24:fb:79:f9:7f:
b7:cc:6b:b5:96:b1:af:79:72:d4:7e:5d:50:0c:7a:cd:65:9d:
da:3b:bb:99:33:8e:aa:5a:5e:d7:35:2b:35:10:84:b1:0c:c3:
cb:82:6b:d3:99:87:63:57:c7:d8:aa:04:38:75:51:79:08:9b:
d9:2d:fd:83:98:64:d9:7e:7d:71:48:52:bf:e5:a1:8e:71:73:
e7:11:82:51:60:27:d0:73:ce:93:e8:d1:a4:a4:71:ca:cd:3f:
b7:37:77:29:48:9c:d2:c8:9a:8b:3b:91:8a:a0:d8:a7:79:1a:
13:22:6b:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTNCNzExMC8GA1UEBRMoQTNBRDgyQjI0QzdGRjhFRkY1NEM5Mjc5ODhDN0NBM0E1
QThDNDQ1RTAeFw0yNTEyMDIxNTAzMjlaFw0yNTEyMDkxNTAzMjlaMBgxFjAUBgNV
BAMTDTY5MmVmZmMxLWVlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnKaQg0K8w8jR13Fk0BQ4P03FFOyaJKJ2qhinacJCobJdO6czxZCWMi7NWa1Qy
UDAQ5zY1wtWKLVnpH2U/SqSoq9bJYU6fEFmO/gJEOTBSSFw8ElVYo/fwYRqTDbkp
FI4VW/crKNYMKeFosv0XioW7Ixot+mG6RUTfBSf+ptuT8rjqqiLJHqIvxugtpKZ5
13TIiyFKOujOz9Y66dofiN6fi2ajgPAdYzptX/GaPnEl1Y3cO947ecBJay3vcLx0
JgWeFRru8faHzkOcQp09EPY33e+pMan+FxnJEMPwjrJFEWCPE2MsiwhZrDwZev+K
vVG3ZxZp3dD6aiR7h7F6oXoRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZjq39TuJ
FjLkmFfJUo3LjCc+I78wHwYDVR0jBBgwFoAUo62Cskx/+O/1TJJ5iMfKOlqMRF4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFM0I3L0VGNDQyMzFFQzlB
MTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9fMVRKSjVpTWZLT2xxTVJG
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbzYyQ3NreF8tT18xVEpKNWlNZktPbHFNUkY0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
M0I3L0VGNDQyMzFFQzlBMTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9f
MVRKSjVpTWZLT2xxTVJGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFZPyFd7a4LDLMHPE3PNVgJ+Wqr/ov7fhbHdBmr8LEfY2KGFZJn/kEac
zCato6UHi6ySKV4/gLsvRPPpvW9bxdtXzEK/Bvv8Cqt7OXUbhMkhSHcDcGafT8qC
ZzI1gT5IZkTP7xQGEU+jTcluzXuZ+YbHjNlYHBtvK0m1/54IJ3Tz7Kzy6MFvVlxc
B2kk+3n5f7fMa7WWsa95ctR+XVAMes1lndo7u5kzjqpaXtc1KzUQhLEMw8uCa9OZ
h2NXx9iqBDh1UXkIm9kt/YOYZNl+fXFIUr/loY5xc+cRglFgJ9BzzpPo0aSkccrN
P7c3dylInNLImos7kYqg2Kd5GhMiayo=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:04 2025 by rpki-client