This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json)
Hash identifier: aXC5vtz7iuVQuUl3NoXodFIGdQ+PGvViMBnJN0+qaG0=
Subject key identifier: D4:CB:DA:6F:21:11:3A:56:1C:59:90:48:1A:FD:EB:A8:DB:50:17:1C
Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Certificate serial: 2482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
Manifest number: 246C
Signing time: Sat 06 Dec 2025 15:32:31 +0000
Manifest this update: Sat 06 Dec 2025 15:32:30 +0000
Manifest next update: Sat 13 Dec 2025 15:32:30 +0000
Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: iqcQYJo78inbkuQ86QCQSys8ganktL8EbXLt00XU3EA=)
2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=)
3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=)
4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9346 (0x2482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Validity
Not Before: Dec 6 15:32:30 2025 GMT
Not After : Dec 13 15:32:30 2025 GMT
Subject: CN=69344c8f-23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:20:14:1e:6e:d5:d0:e6:9b:af:d3:21:3c:2e:
20:5f:3f:59:db:6f:8b:b5:88:47:77:6d:81:73:d0:
dd:58:a3:a5:ce:6b:72:6b:33:a2:47:8b:3d:82:cd:
a8:97:41:fa:0b:5c:58:fb:3d:32:aa:86:56:1d:f1:
0f:12:96:f4:dc:c7:80:8f:ee:54:77:00:c2:fc:e7:
b6:ef:ce:42:3d:e6:57:00:35:91:db:88:0d:79:7c:
98:b9:f4:eb:ec:93:a0:55:95:ce:0e:5b:05:c6:f8:
4d:c2:73:3e:0e:e8:08:c5:16:bb:32:ab:81:b6:8b:
54:7e:cc:c8:74:f9:cc:f9:83:68:31:fe:47:2c:a9:
fa:c3:84:d5:0a:12:20:5e:3c:c3:89:73:70:62:99:
a3:62:b8:a1:31:b8:04:bc:ec:02:e0:ff:23:6b:7c:
fb:7c:87:c7:5b:0c:c2:6d:d6:eb:e7:62:97:a9:f1:
c4:8d:7e:d4:99:28:12:4d:6b:60:e7:f7:4b:11:04:
ef:e2:e8:1f:b2:8c:f7:33:f5:0f:9e:75:25:09:71:
26:2b:a3:b7:01:5e:f9:3d:b4:77:5e:25:db:cc:23:
53:04:ad:9e:81:13:01:a9:c2:68:53:a9:4d:2b:de:
ce:92:a8:d5:a1:ec:9c:49:b3:50:dd:99:0c:47:a8:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:DA:6F:21:11:3A:56:1C:59:90:48:1A:FD:EB:A8:DB:50:17:1C
X509v3 Authority Key Identifier:
keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:57:59:24:da:83:f1:78:6f:7b:0c:60:b3:28:6a:19:13:
22:d4:fc:48:8e:af:8b:9e:ee:c7:d4:b1:cf:4b:90:d3:85:9b:
ef:b7:5c:19:f4:86:fe:c6:5a:8a:5a:37:6b:dc:d7:a2:5f:30:
fc:5c:74:32:27:ed:52:97:d1:37:31:7a:0a:7c:d3:99:3d:8d:
f5:23:63:87:c6:77:58:ff:21:a0:89:26:e1:3f:54:61:82:78:
6a:eb:d2:c8:34:01:a9:9c:f9:ef:f7:cb:d7:b3:19:94:57:04:
ac:2a:bc:16:9d:9a:c3:2f:b6:3e:93:46:e7:bb:08:c1:8d:c0:
2b:30:70:e3:42:bf:9c:d4:fc:ef:b8:46:d5:7e:e9:48:0c:3b:
f7:91:71:ca:29:58:23:6c:1f:b8:8a:15:4a:6d:46:93:e1:69:
ae:59:e4:4c:e8:23:e1:f6:70:f3:78:8e:d5:ca:70:35:0e:39:
13:d0:70:f3:9c:e8:c1:82:7d:ce:a6:18:c2:9a:2a:4b:32:a8:
f5:a9:6c:aa:41:a5:a5:97:5c:bc:b7:34:44:34:d8:87:99:e1:
81:85:b5:12:3b:9b:1f:6a:8c:f3:53:3c:53:3b:94:56:58:43:
97:19:dc:17:d6:a1:e0:30:c6:98:56:41:26:7d:16:eb:e2:d2:
41:e0:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:07:30 2025 by rpki-client