This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier: SJ8w+IJGnaFs2xWjWX5pxx9Xp8Akb9wrlGzoYf1/I3s=
Subject key identifier: D2:76:34:5B:5A:45:51:D3:19:83:2A:DB:77:E6:CD:22:2B:C8:69:DA
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number: 0161
Signing time: Wed 03 Dec 2025 02:29:50 +0000
Manifest this update: Wed 03 Dec 2025 02:29:49 +0000
Manifest next update: Wed 10 Dec 2025 02:29:49 +0000
Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: v6tLvFjYD5/llU5QLu2YHXeX/ubMMRt6QlvkZOJ1lCM=)
2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Validity
Not Before: Dec 3 02:29:49 2025 GMT
Not After : Dec 10 02:29:49 2025 GMT
Subject: CN=692fa09e-8072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:c7:7e:ca:91:9d:62:94:87:13:eb:32:f8:
d0:27:ad:7e:b3:df:8c:86:24:6c:ef:47:5a:b8:0d:
b1:9e:a9:a2:76:08:95:43:96:cf:10:39:ef:11:a9:
e4:86:16:60:7d:8d:9b:de:b3:1c:17:c3:00:b4:b9:
db:d7:a8:fa:53:e9:50:b7:89:ed:5c:e6:82:ec:35:
0f:f2:71:37:51:a4:d8:b3:c5:c3:ae:9a:3c:b4:f7:
2b:01:81:31:9c:2f:fb:6e:59:90:c8:4f:84:f8:1c:
d6:54:63:00:01:49:d8:88:96:4b:15:37:7c:ba:cc:
57:2d:52:99:7c:20:e5:e5:13:3a:93:e5:25:93:2a:
68:92:0a:3a:07:52:2a:fc:39:e3:b5:88:bc:d9:ac:
69:da:56:98:46:db:f4:d2:ac:1c:2c:af:57:33:f5:
0d:ba:d4:a6:7f:76:a1:44:77:a2:f3:76:7b:3c:1f:
56:76:14:8f:58:14:32:7f:39:72:ea:0e:4f:eb:51:
10:b3:08:bb:7d:13:72:1c:52:46:70:71:7e:3c:ad:
38:4d:16:a9:b7:6c:9e:10:02:62:1a:36:63:80:76:
5b:78:cb:25:a2:43:7a:b5:38:fd:74:2d:7e:6a:a0:
83:fe:c7:fd:2e:c0:7d:eb:d0:6f:ac:d4:9f:b2:80:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:34:5B:5A:45:51:D3:19:83:2A:DB:77:E6:CD:22:2B:C8:69:DA
X509v3 Authority Key Identifier:
keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:cb:f4:2f:18:8f:ab:fe:51:db:18:76:92:40:e2:12:df:
4e:67:a4:80:4a:b7:45:b5:5b:0b:5c:ca:37:40:8c:26:42:cf:
49:05:d5:7c:5c:30:e1:b1:6e:d9:2b:30:c9:80:63:fe:5a:10:
f8:67:c4:fa:b7:38:c1:4a:c7:40:39:68:8b:fc:19:e1:78:d3:
73:2b:b9:56:25:ce:7a:9e:6f:03:60:3a:b8:6f:5c:f2:e2:35:
98:5b:e2:ff:b2:f5:08:7d:ae:f4:1e:67:b6:4d:ca:07:18:ec:
bd:6d:72:b1:ba:93:d8:57:6b:1c:e5:1c:02:c7:c5:e4:1f:a5:
08:a5:df:25:f1:43:02:81:4d:cb:6d:2f:2d:71:d9:2f:24:f1:
6d:a4:38:4d:98:66:f5:2a:63:31:ed:db:f9:5a:fe:37:d9:ab:
a5:f7:54:30:e4:c0:5d:d7:57:3a:c2:0d:b8:16:34:06:7e:cf:
52:33:ea:a0:cc:fb:43:06:62:58:a6:4a:21:e6:46:34:20:40:
76:fa:be:4f:d7:69:7d:24:0d:64:a4:87:43:78:ff:bc:a9:81:
34:62:7a:b9:1d:44:65:8c:d5:ca:9a:80:8c:3f:0d:26:fb:1a:
d3:62:da:f9:5b:e7:75:b1:7e:88:ce:2c:b9:19:21:80:da:2a:
07:75:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:10 2025 by rpki-client