This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: lw0jaa3Nns6Sexu564jlZ4EQLuFzFqxRrtbGBpTTCEE=
Subject key identifier: 3F:D2:F1:D3:E3:5A:F0:54:02:43:18:8E:33:D1:C5:F0:BC:2A:9B:35
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 1016
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 100D
Signing time: Thu 18 Dec 2025 17:17:11 +0000
Manifest this update: Thu 18 Dec 2025 17:17:11 +0000
Manifest next update: Thu 25 Dec 2025 17:17:11 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: 92ZeYnQKIajrTq9YNhY33Ryj54XjJNB+2M+9tELH4Uo=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Validity
Not Before: Dec 18 17:17:11 2025 GMT
Not After : Dec 25 17:17:11 2025 GMT
Subject: CN=69443717-e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:0c:fe:00:06:0b:ce:39:80:d3:e9:75:f4:
bf:a6:0c:82:dd:37:85:f5:14:d1:5b:e4:77:e9:53:
bc:c7:83:a0:02:57:07:99:01:bd:18:d8:e6:94:ec:
10:7a:1c:26:08:44:63:7a:99:72:91:7b:13:71:16:
55:d5:1c:3e:98:45:b9:7c:c0:dd:27:df:cf:ce:87:
78:e6:0e:48:4f:57:d6:bc:b6:b7:d8:4f:65:b1:f5:
d6:d5:4f:6d:5d:61:0d:c1:01:2f:c5:09:19:11:44:
54:f6:bc:48:48:db:4d:bb:03:fb:db:c6:aa:c1:0c:
e5:54:a7:86:f4:d4:54:ee:70:7d:fb:ae:19:2e:ed:
10:4b:ae:7e:71:e5:17:a4:6e:63:81:5b:48:eb:13:
0e:11:fe:88:13:19:ae:80:94:fc:eb:0a:4b:c3:ff:
e9:03:1a:23:2e:11:19:dc:a3:d2:a0:5a:e2:ec:f3:
a2:25:ee:38:2e:b5:67:b1:b1:4c:d9:39:6f:2d:d6:
06:6a:b0:ed:a6:66:d3:e5:ac:94:57:0f:b9:33:73:
4e:c6:f4:b0:f1:4a:1d:1c:2f:41:5f:e9:ac:cb:68:
45:89:74:35:36:f3:e6:d5:0d:cc:6f:eb:32:ca:cd:
a9:38:bc:da:9e:0a:43:3d:38:eb:35:7e:b7:f5:92:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:F1:D3:E3:5A:F0:54:02:43:18:8E:33:D1:C5:F0:BC:2A:9B:35
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:cb:63:26:3b:79:a9:b4:79:6a:ae:94:37:4a:0f:84:83:7b:
59:ec:02:7b:e6:74:9f:ca:ac:b1:ab:58:31:3d:05:94:69:5e:
a1:b2:46:a2:62:39:0c:74:8e:47:f7:ad:76:58:f5:89:6c:13:
d7:e6:b4:ee:87:65:f5:c7:c6:8c:19:ee:b3:1e:89:ba:ac:26:
a7:8a:4f:1f:3a:44:88:25:57:01:66:e8:14:a6:6b:92:ee:de:
18:ad:5d:45:a8:4b:5a:4d:12:3b:96:9c:ae:8a:d4:ac:52:77:
9d:44:af:03:f7:49:6c:60:26:86:a2:89:14:be:4e:c4:9e:0e:
1b:27:78:6c:54:33:61:b3:06:4b:1b:97:43:83:d2:b0:f8:d3:
67:1f:af:b8:eb:75:47:4b:3e:6d:82:eb:f9:22:23:c0:0f:0b:
b1:8f:56:2c:a6:dd:64:21:04:60:a7:82:b6:d3:0c:69:e0:2f:
da:28:53:27:7d:6b:1b:03:3a:6e:32:99:7e:f7:9c:9c:8d:32:
f5:ca:c0:df:1b:86:ea:f4:9a:ed:68:f8:bb:01:6e:c5:75:12:
00:d1:9c:0d:34:45:6e:91:cc:b0:77:65:a6:0a:43:72:b4:85:
a7:f7:4d:40:3a:c5:c2:27:2a:17:65:b0:99:66:e3:c2:4a:d1:
6c:98:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:24 2025 by rpki-client