This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier: hn/xA/3UrlYJeJE4ufjU07+01+iaNvvfvDF5qb27+LI=
Subject key identifier: F1:B2:CE:7B:36:15:56:25:DD:66:3D:99:A4:73:EF:10:E5:E3:B8:55
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1AF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number: 1AB8
Signing time: Sat 20 Dec 2025 16:07:24 +0000
Manifest this update: Sat 20 Dec 2025 16:07:24 +0000
Manifest next update: Sat 27 Dec 2025 16:07:24 +0000
Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: ido2LhVzoiJV0OVHCl8Rz5MHLTKVeXOsXiVT1Mm98t4=)
2: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM=)
3: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=)
4: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6897 (0x1af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Dec 20 16:07:24 2025 GMT
Not After : Dec 27 16:07:24 2025 GMT
Subject: CN=6946c9bc-ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:8d:df:17:5b:13:15:12:13:59:b3:3a:b6:
94:75:fe:5c:13:3c:dd:4d:7e:a8:ae:99:90:e6:99:
c5:70:f0:26:ba:6b:8f:b5:18:59:ba:9a:3c:9e:bf:
55:8a:c5:4e:bd:99:ad:36:22:9b:11:03:11:ca:8c:
e4:04:9d:2a:d5:7a:38:70:4c:f0:d5:e0:9c:bf:b3:
72:a2:fe:b3:75:9b:64:27:81:3f:8c:13:36:a2:8c:
0e:8c:93:24:4b:b1:f0:ca:e7:8b:d6:3d:a0:a9:ca:
c4:f6:4b:8b:03:e5:ec:50:fc:92:49:7f:a6:24:b5:
17:7d:ba:f0:0c:66:8a:e1:10:9c:9d:d4:10:de:70:
40:d4:57:b6:e0:64:37:20:ee:6a:61:5b:f2:5e:2a:
26:b6:98:40:af:c2:f8:fa:07:b1:bb:a4:9e:08:0e:
36:9a:0f:4e:9f:d0:d6:ef:2f:46:72:97:91:a3:50:
82:46:8c:a8:d2:cb:99:3d:1b:f3:49:90:ad:52:ca:
03:16:89:3c:3c:51:d2:e0:4f:58:6f:62:f9:6f:39:
8e:bf:88:3e:4b:8e:ab:3d:3a:ab:67:99:3a:8d:62:
4e:61:1d:14:15:4f:3c:dd:bd:73:95:0c:06:0e:80:
40:a3:a0:27:65:0a:b7:1a:65:99:bf:3a:9e:c1:d7:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:CE:7B:36:15:56:25:DD:66:3D:99:A4:73:EF:10:E5:E3:B8:55
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:15:92:64:dc:88:71:bc:1f:22:19:64:a0:b9:4a:7a:d6:
93:b1:11:fe:d8:ef:3c:19:6d:fb:4f:b5:69:22:90:a1:64:b7:
11:f7:f1:65:46:90:78:61:9d:38:9e:d3:ab:54:ae:79:52:3a:
fd:55:f8:fe:fa:c9:62:48:a9:01:c0:a4:3d:d3:d6:79:58:ad:
72:47:d6:c0:11:f7:fa:c5:0a:c5:ca:35:fb:15:18:83:f4:88:
df:19:da:d2:84:79:4b:24:98:59:a5:6c:3f:81:67:9a:07:da:
f2:e7:61:20:31:d6:34:11:8e:13:c2:4e:fa:52:50:d8:6c:f5:
03:b3:3d:55:80:f8:13:67:cb:49:4f:2d:99:78:fc:3a:4d:3a:
29:e2:12:5a:0a:12:02:0b:e7:d4:6d:cc:78:49:fa:03:e9:6a:
2e:33:98:78:15:88:1c:4e:68:1c:b1:c4:12:fe:f7:9f:9b:c6:
83:5a:54:e3:ec:42:4a:fa:a2:cf:58:75:af:54:80:0a:a0:30:
51:66:1b:79:f3:88:25:d6:ca:4b:6d:11:4e:d2:38:2b:41:e9:
b9:70:e9:cb:03:b4:32:7b:67:c1:0b:06:56:df:c9:d3:01:87:
de:f5:6a:69:69:0c:82:37:73:61:06:35:23:87:13:cf:8a:a8:
2c:76:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:09:40 2025 by rpki-client