This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json)
Hash identifier: F9yFk1VCihDy7w+LlpCpyO2+xLip8NcKWq9g+4pTfbE=
Subject key identifier: 26:63:6D:C6:F1:D7:4F:F2:84:1C:3F:E5:E7:97:71:56:27:B3:A4:6F
Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
Manifest number: CC
Signing time: Wed 03 Dec 2025 04:10:01 +0000
Manifest this update: Wed 03 Dec 2025 04:10:01 +0000
Manifest next update: Wed 10 Dec 2025 04:10:01 +0000
Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: J6stYBl+2Som9MXfyn4DiqtuPD21IUe4FZkyeC3JSGU=)
2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Validity
Not Before: Dec 3 04:10:01 2025 GMT
Not After : Dec 10 04:10:01 2025 GMT
Subject: CN=692fb819-e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:9b:d1:31:12:c0:69:de:51:41:11:72:72:
b9:12:6e:66:b8:3c:12:4b:d5:e3:02:f7:50:33:db:
81:a2:d2:e6:ee:0b:aa:fc:b8:20:9d:cd:1c:3a:6e:
cc:f4:27:88:33:55:23:8b:ed:8f:a4:b2:fb:26:c2:
ca:e1:9a:45:09:bc:62:e9:7f:cd:6a:1d:0c:d4:f3:
5f:3c:ce:19:2f:32:69:11:ba:6c:51:f3:aa:05:0d:
5f:f1:a1:a4:80:ab:49:37:ec:8c:6f:5e:8e:3c:e9:
85:8d:c8:58:79:f7:f0:80:7f:85:90:e5:d2:a5:3e:
07:50:85:10:d7:72:60:82:4a:e9:5a:a8:c5:b4:15:
4e:90:df:aa:aa:f9:7b:90:c5:ca:a4:45:eb:fb:39:
14:2b:3e:47:19:31:8c:b8:e3:16:62:01:14:f9:a4:
9b:ec:38:bd:4e:21:90:77:0f:ef:c9:d3:97:d7:61:
ef:99:cf:b3:9b:0c:56:2b:00:5b:89:39:61:a1:b3:
80:d0:aa:1a:ee:2a:ba:bf:32:6e:87:61:bf:83:44:
6f:22:30:71:4e:27:6a:4d:68:ad:6b:1b:ba:b5:f6:
a1:df:9c:4c:5c:16:eb:4d:ed:da:bb:03:9a:3b:41:
62:ab:19:1a:ae:0c:84:2b:34:a0:06:82:c4:8a:4e:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:63:6D:C6:F1:D7:4F:F2:84:1C:3F:E5:E7:97:71:56:27:B3:A4:6F
X509v3 Authority Key Identifier:
keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:7f:ba:a1:f4:64:cc:78:27:1c:89:d4:de:a2:29:84:7c:
69:24:8f:99:6a:f7:db:54:09:a7:88:10:7d:67:89:ab:55:d0:
c2:02:06:2a:3a:99:11:0f:5a:f8:1b:6f:cf:fe:9d:61:76:5e:
d4:2b:c2:36:7f:9d:2b:ff:65:f6:03:95:d0:2d:47:c4:00:0e:
1b:4d:4f:bd:31:c2:38:c0:23:9b:56:d2:59:b0:f8:85:20:cf:
b2:54:ce:4a:82:92:5f:03:f2:95:73:01:ad:c1:2a:99:62:43:
db:cb:e5:2a:dc:38:d8:84:58:04:9a:cb:09:4a:1c:78:70:7d:
45:1f:7f:84:00:77:72:48:00:d7:59:90:ec:15:99:c8:d1:64:
3d:b2:34:6c:0e:c1:19:e8:c1:51:3c:62:4e:61:47:6b:25:12:
b3:31:d1:28:da:33:d2:b8:ff:75:ed:5b:d0:32:74:bb:89:4b:
26:26:1a:c6:0c:a1:ac:cf:01:da:50:87:aa:e0:f0:e8:ea:2f:
6e:f7:95:c2:a6:43:f6:7c:f9:50:9d:13:f9:1d:e1:2f:24:89:
6d:96:cb:26:6d:f5:a2:a7:94:cc:c4:85:cf:3a:68:0b:96:a2:
a9:ff:b2:89:92:a8:59:a1:6b:c5:01:a5:42:f9:45:28:4c:a7:
25:c6:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:38 2025 by rpki-client