This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json)
Hash identifier: Cwj1S8Mli19manuCmJ4l/RwhHYFfaiAV2BQBEc/v3Ho=
Subject key identifier: 9F:8A:1D:AF:8B:CC:7E:B0:A0:92:2E:F5:34:95:A0:AA:9F:56:99:BE
Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Certificate serial: 0877
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
Manifest number: 086F
Signing time: Thu 18 Dec 2025 20:06:59 +0000
Manifest this update: Thu 18 Dec 2025 20:06:59 +0000
Manifest next update: Thu 25 Dec 2025 20:06:59 +0000
Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: xRbHPi1HUJxI42e+yr8pYsv0TAruqeyfwlz/ItlwrEw=)
2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: +rqRhoF7M98jyOj7ilINYsh86Lj18TGDOqtK2wOwgR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Validity
Not Before: Dec 18 20:06:59 2025 GMT
Not After : Dec 25 20:06:59 2025 GMT
Subject: CN=69445ee3-7404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:eb:a1:b1:4e:ee:f8:de:a3:09:07:dc:5a:
e1:56:85:eb:57:14:ec:34:fe:fe:f1:c1:57:e3:64:
57:46:3d:b7:19:7b:ab:00:3a:79:85:fa:a1:44:ea:
8a:c8:3c:1e:d3:ec:14:ae:0c:81:ad:1b:4b:7c:ef:
ce:b2:66:9a:82:ae:71:e9:b9:12:53:a0:6a:e2:66:
4e:f2:ba:21:db:d6:d7:90:a4:ee:c9:bd:45:ad:c8:
c5:c4:dd:10:95:88:1d:75:f9:c6:53:53:29:4e:77:
fb:a9:49:c7:4e:2f:44:28:0b:d8:3e:e5:74:70:58:
98:b8:e6:db:38:4a:c3:32:1c:f5:29:cd:66:0f:73:
4a:25:30:37:2a:91:29:3e:7a:d4:8c:a3:f0:ef:a4:
52:db:2f:d3:31:f1:4c:d3:65:11:b5:f9:c3:4f:55:
f9:ef:2b:e5:3e:6c:89:2c:a5:5e:72:fc:0c:b5:6d:
b6:92:2a:de:92:11:93:c0:81:ee:d3:6e:23:6f:52:
96:fa:75:e4:0f:8f:4e:6e:50:97:f4:70:b4:62:84:
3d:96:31:d8:2a:fc:e5:af:fb:c7:5f:1b:17:8e:10:
fe:c1:3f:55:a2:8f:d7:67:24:b6:cb:53:e7:b1:ed:
6f:ea:1c:a4:c7:4b:12:34:0c:7d:3e:e4:7f:69:52:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:1D:AF:8B:CC:7E:B0:A0:92:2E:F5:34:95:A0:AA:9F:56:99:BE
X509v3 Authority Key Identifier:
keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:44:be:28:be:2f:37:49:fc:bd:17:4f:ed:0d:36:4f:25:
80:fa:02:fa:30:02:ab:9c:28:59:4b:6e:47:69:33:10:45:39:
ed:98:d0:fa:24:44:e0:c8:49:e1:08:09:d5:bd:47:d1:6f:a4:
07:4b:11:e6:c3:be:e4:a4:0a:38:3d:42:9a:2e:64:fa:0e:8d:
f2:08:92:55:e1:74:c2:af:d5:b3:36:80:d4:cd:fb:4a:e7:02:
0b:be:2f:e2:68:d8:37:8b:cf:24:1e:dd:6a:a3:31:5b:3d:da:
1c:46:2b:4e:67:0c:02:d6:c2:2a:12:34:a5:ef:40:18:31:41:
fd:d5:55:82:ab:37:b0:55:d3:46:7d:7a:7f:ad:dd:71:f2:b8:
6d:fd:f4:e7:f0:eb:34:ac:75:04:bc:b8:7a:cd:1c:2d:f7:ec:
b6:4a:dd:c0:e9:01:f2:95:72:57:a3:a3:d6:99:3d:0d:a1:0b:
2d:67:c0:1f:21:07:7c:fc:0a:8f:f2:3b:76:c0:0f:62:a2:11:
d7:13:09:d5:05:f5:48:25:a1:f0:e9:5b:31:61:73:de:ee:83:
b7:63:89:45:20:9c:55:eb:56:9b:45:55:19:05:6d:86:1e:d4:
f6:ec:db:be:ee:3b:02:22:b0:38:47:ec:83:bd:82:11:c8:64:
47:a1:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:50:11 2025 by rpki-client