This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: 4RZnirLKm6xJF1lgrd2L5VI7vbtXg3Km4Dgmfx78Xz8=
Subject key identifier: 48:93:EF:9B:DB:80:86:0B:8C:F7:9A:5C:B6:3B:77:B6:51:14:64:FC
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 1097
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 1075
Signing time: Mon 22 Dec 2025 17:04:10 +0000
Manifest this update: Mon 22 Dec 2025 17:04:10 +0000
Manifest next update: Mon 29 Dec 2025 17:04:10 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: N2iu5CXUImkbJc7EdSawM018V8PzvmcLcVclC9nzFyQ=)
2: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=)
3: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=)
4: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=)
5: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=)
6: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4247 (0x1097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Dec 22 17:04:10 2025 GMT
Not After : Dec 29 17:04:10 2025 GMT
Subject: CN=69497a0a-cc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:e3:88:2f:a1:43:b4:f4:65:e5:5b:98:85:
94:32:5b:31:6d:62:97:3a:d4:e0:9f:65:7c:ff:4a:
e8:0f:24:99:6f:e4:45:72:e9:60:fc:a1:e0:0e:66:
df:aa:76:51:3b:90:f9:70:e0:42:13:f0:fb:17:5e:
cb:91:4a:eb:ed:68:36:05:30:8a:83:f4:ed:ba:45:
d2:24:4e:b2:f0:77:5b:36:77:93:ba:1e:58:16:0c:
be:c1:43:da:08:3f:29:17:d7:da:43:ea:fe:3b:c8:
42:d9:41:47:cb:70:26:4f:d4:02:6e:f1:ae:c2:b4:
c4:6a:9a:d4:0d:f6:bc:ca:9b:8b:7f:cf:7f:04:5a:
91:03:00:3e:c2:78:06:2b:f9:d6:99:17:1e:ea:fa:
09:1c:19:c5:25:c3:6e:62:d9:d4:9c:99:c6:cd:17:
da:00:8e:bd:39:09:07:fc:44:aa:1f:a0:4e:f6:74:
6f:08:06:fc:71:37:c2:d5:3a:4b:83:8c:ef:ea:4a:
60:c1:22:cd:b5:fa:36:34:63:c7:eb:90:3d:85:15:
f2:01:9b:b7:f9:01:70:2a:33:bb:47:b3:3c:14:f2:
29:d7:43:ff:8f:8f:ff:24:76:e1:2c:37:b8:e0:73:
c0:4c:a0:8a:a9:6d:a5:01:f7:2b:ae:4a:2a:49:e9:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:EF:9B:DB:80:86:0B:8C:F7:9A:5C:B6:3B:77:B6:51:14:64:FC
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5c:46:81:18:cb:3a:64:99:ef:fd:12:71:d1:38:a6:3e:22:
48:00:14:58:d4:5b:0d:58:fc:4e:e4:1b:51:24:b8:c1:0e:d5:
f9:43:c5:03:8c:b9:02:02:2a:7e:ff:d3:67:b5:ac:3e:4a:21:
4b:66:8e:90:b8:e8:69:90:80:0c:ce:08:37:08:36:42:08:a9:
64:6d:86:61:c2:71:63:8f:55:90:84:ff:b4:1a:63:1e:92:52:
83:be:15:2e:2c:37:10:e4:e8:aa:b3:83:90:46:6e:21:38:e0:
bf:27:c2:96:e5:99:f4:dc:75:de:f2:1b:8c:68:3e:3b:2a:3c:
60:f3:d9:a5:8b:32:40:3f:0e:8c:06:1a:73:3d:f2:59:4e:40:
05:a1:b1:f6:0c:ad:e3:df:d9:c0:72:8a:71:1a:da:1d:d9:97:
4a:b5:82:d7:ce:c7:b1:17:79:e2:b1:38:83:8c:4c:da:10:6c:
bb:6a:36:c9:7d:7a:c7:fe:7c:99:c5:1d:83:16:6d:2a:d6:cc:
5e:29:03:47:52:95:1f:f6:98:3b:09:84:4e:92:f8:eb:c9:6b:
69:fa:d1:00:b0:e6:cc:fe:21:c7:0f:97:24:b7:7e:a1:98:4e:
7a:90:f9:df:19:df:b3:89:f8:63:0a:3b:6d:ca:82:52:6d:8f:
36:eb:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:39 2025 by rpki-client