This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File: mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier: jQ+cxg+IwCG0WO1iM0CCJoTYlu68jAAxbdjdNaGsxgI=
Subject key identifier: F4:2E:40:9F:FE:08:D7:26:7A:0F:40:88:35:F3:F4:66:D0:B4:A4:EB
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer: /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial: 07C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number: 07BC
Signing time: Mon 22 Dec 2025 20:43:43 +0000
Manifest this update: Mon 22 Dec 2025 20:43:42 +0000
Manifest next update: Mon 29 Dec 2025 20:43:42 +0000
Files and hashes: 1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: dhj46zkkE08mPtOOWFbSriYwfg3qWUuh2STCdWy2+XI=)
2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: VuRfNVBZwbR+ucX5LeWc2BXr4+CtK5OzMpCV0KJbLkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
Validity
Not Before: Dec 22 20:43:42 2025 GMT
Not After : Dec 29 20:43:42 2025 GMT
Subject: CN=6949ad7f-eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:66:d3:2a:1f:f9:f4:c8:d0:15:e7:d3:6b:
46:67:ef:fb:56:aa:f9:57:58:0f:1b:77:82:4a:03:
95:b6:29:79:f8:df:d5:8b:fa:f3:5a:76:c9:06:ea:
07:49:e7:99:9b:5c:5c:28:10:7c:33:75:8e:b2:ff:
3d:76:0d:bc:e2:e7:91:b3:3a:ed:79:3a:36:11:ac:
ec:b0:c2:8f:4b:75:7d:b2:49:f3:1e:6e:60:5a:67:
fc:bb:7c:f8:d5:e0:bf:61:60:68:8a:3a:6c:05:d9:
2b:52:c2:e8:5d:14:dc:1c:eb:87:aa:f7:a8:88:99:
1c:3f:a3:86:a0:bf:2a:1c:70:d6:56:12:52:62:7c:
ad:b0:a4:90:3b:f5:bb:a9:28:13:53:0a:d4:e2:f0:
f8:76:61:ad:b5:7f:2e:b1:f1:76:85:02:17:ef:d3:
e9:0d:48:33:c4:71:1f:1f:97:38:71:27:d3:8d:6b:
fb:e4:ce:f9:f9:e3:31:41:12:5d:a6:06:2b:29:8b:
ef:c8:a0:53:c4:75:6e:f9:30:9e:67:e2:f2:6e:7e:
7a:22:7a:53:a8:f7:88:1d:60:30:ab:c2:84:09:f6:
08:e6:a9:c9:88:12:30:bb:03:d5:9f:40:7f:78:22:
1b:20:6d:a6:d3:5c:36:f5:a7:6b:c9:55:f7:1f:c4:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:40:9F:FE:08:D7:26:7A:0F:40:88:35:F3:F4:66:D0:B4:A4:EB
X509v3 Authority Key Identifier:
keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fb:2a:bf:f0:b8:e1:02:33:ca:58:b3:53:ae:dd:35:05:37:
86:ef:9d:b8:18:58:6f:4c:25:a7:e5:cd:b8:4e:fd:6c:1c:35:
4c:b2:6c:fc:83:a5:b5:a2:64:34:44:44:6c:42:9c:a7:ea:80:
42:01:8b:1e:c3:3d:0d:b8:2b:f2:a0:2c:78:c9:ef:c7:4b:31:
9b:1d:38:5d:57:08:fd:b0:e4:c3:7a:08:c7:39:d6:a1:75:f9:
92:de:1f:4a:2b:cc:c5:20:6b:56:93:94:7e:9f:c5:52:a1:e9:
dc:ae:aa:d2:5b:9d:3f:1f:ca:b9:15:21:c6:e9:34:5e:ba:9e:
2d:48:e9:c6:6b:37:92:e3:3b:52:b6:5a:8b:71:25:3e:e5:fa:
d2:2d:48:92:14:36:4a:14:c5:b1:4e:5f:74:7a:e9:7b:d2:56:
69:25:d5:b0:34:a5:17:1c:ae:ac:f1:6a:e2:cb:16:10:a4:27:
46:c3:86:c4:d6:ec:97:d3:b7:49:c9:f6:74:19:4d:4f:3e:50:
f0:c9:ac:ed:86:fc:f8:38:39:64:b5:d5:f6:16:d2:51:29:fd:
f0:6c:4d:69:cd:51:7f:ec:31:b0:89:e9:fb:ca:b0:bc:62:ed:
1b:64:f8:dc:c0:56:1c:29:83:db:15:31:eb:7b:56:70:cf:f9:
59:a2:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:21 2025 by rpki-client