This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: Ir+uTayMWnLeoC9g7vTEUvqZIjjvNJ4cm8cK1V7GakY=
Subject key identifier: 52:A2:71:D7:28:5C:B1:25:26:65:87:58:A3:45:F3:25:15:FB:D3:5A
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 0314
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 030E
Signing time: Fri 19 Dec 2025 00:23:32 +0000
Manifest this update: Fri 19 Dec 2025 00:23:32 +0000
Manifest next update: Fri 26 Dec 2025 00:23:32 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: kloKWcrwCpVTj5zOJWFSH3y20LnoXS7i2NvjI3bAGBQ=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: SRhZlpn7+MBKLxOuK/LxQ3OpeiTq/ZO5FLcjac1mcNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Dec 19 00:23:32 2025 GMT
Not After : Dec 26 00:23:32 2025 GMT
Subject: CN=69449b04-7456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:33:e9:fe:de:46:4c:4a:f8:cf:08:ed:38:
4d:4e:ef:79:45:ce:7d:4d:ec:99:42:f9:16:ac:7d:
c8:ef:e1:b8:47:2e:94:c9:7c:26:53:65:b2:88:84:
a3:82:f7:d2:cf:9a:61:bb:42:49:3e:32:14:7d:e9:
d9:29:71:e2:b7:63:57:8f:70:b5:18:e2:65:2a:e9:
5b:34:c8:ab:5f:53:e0:89:7f:98:56:d5:70:35:93:
a9:4d:6c:af:24:9d:b5:98:a6:8c:ce:29:0f:fa:32:
fe:c1:e1:e9:05:a2:0b:d4:24:03:25:7a:e0:e9:22:
7f:c8:3d:a4:1e:6b:15:47:a6:08:b9:9f:85:e0:08:
f3:bf:af:3b:d0:d8:44:d7:96:1d:60:87:57:4e:17:
b8:42:a1:7c:dd:61:25:fb:40:02:fc:e1:a9:c0:2d:
40:05:62:61:a8:08:de:e9:44:11:4c:dd:eb:7b:a6:
95:f4:2c:11:d5:c7:6a:80:b2:80:4a:a7:10:1e:88:
a8:bf:ce:e9:fd:ed:59:fa:a5:84:df:ef:7f:e4:f2:
9c:8f:ca:27:e5:3a:cb:35:15:e1:55:3c:77:5d:5e:
68:4b:15:d6:d5:2a:5d:c1:09:8a:23:c5:21:e0:c3:
2b:da:d1:3f:c1:da:42:50:eb:3c:a6:62:d0:49:ac:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:71:D7:28:5C:B1:25:26:65:87:58:A3:45:F3:25:15:FB:D3:5A
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:e4:83:90:f1:ab:86:92:e2:0f:28:99:99:de:e5:0f:e6:72:
c5:a5:60:bd:e9:0c:cf:ba:92:6c:23:e3:8d:b7:79:4d:75:ec:
09:61:f6:24:a9:2e:58:c2:3c:69:37:29:f3:02:2a:49:fe:3f:
33:e7:27:56:a4:a0:7f:c4:c0:10:55:03:e6:e5:33:72:32:d9:
84:05:5c:2d:67:ce:fd:7c:64:68:18:41:40:c3:26:9d:fd:81:
0f:2c:31:ca:02:cf:07:05:1a:cd:97:4b:d8:6b:66:72:21:06:
5d:6d:1f:2f:ee:28:43:c4:a2:88:e8:d3:41:0b:e3:a1:79:db:
5a:a5:19:3c:b1:02:c4:dc:c6:dc:86:80:2e:1b:dd:13:8d:bb:
fd:f8:ce:e3:b1:97:3a:24:68:72:5e:70:f7:46:26:3b:9d:18:
6a:d6:fe:0d:9b:59:12:ce:50:22:aa:91:53:c1:61:7b:d5:88:
d0:b3:d1:66:7c:56:17:f4:45:d2:71:76:dd:dd:ce:91:a7:a3:
0b:79:ba:4b:e5:6e:76:08:bb:1e:fd:09:f6:21:16:23:cf:09:
b6:3a:a2:2c:15:72:60:01:bc:7d:ff:81:a6:13:e2:e4:e3:15:
89:52:2c:b3:35:e8:23:a8:75:1d:fe:80:d9:3d:77:5e:e7:a7:
34:6f:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:19:33 2025 by rpki-client