This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
File: o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json)
Hash identifier: nGfNpgndxQLH++Ak/y+JnFUZ05xShIAwhifN0TzU6Ek=
Subject key identifier: C9:5B:BB:69:23:DF:52:EC:77:5D:7A:7C:25:BF:AA:7F:60:8E:21:35
Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
Manifest number: 062A
Signing time: Mon 22 Dec 2025 21:56:53 +0000
Manifest this update: Mon 22 Dec 2025 21:56:53 +0000
Manifest next update: Mon 29 Dec 2025 21:56:53 +0000
Files and hashes: 1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: qs8HDi0rIEbiH+f2FgVAFpHG8FBqE9GyzOTRucjrxKQ=)
2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: KmV3A66uHX2ovCCHWTgN+6Kx1zjXxXnhW11qwJ7+Kek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Validity
Not Before: Dec 22 21:56:53 2025 GMT
Not After : Dec 29 21:56:53 2025 GMT
Subject: CN=6949bea5-bb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:f0:2d:ab:9d:5d:73:99:69:a2:1b:b6:34:
16:2d:cf:eb:be:de:35:56:5f:9a:8f:8a:d3:b6:e0:
65:0d:13:77:a0:44:71:73:70:76:49:bd:ec:27:c2:
4d:3f:05:b1:0c:d9:aa:56:72:f2:7c:ef:47:b8:c3:
fa:d3:72:92:dc:43:57:7e:da:79:1f:71:3f:a4:8c:
24:7b:39:82:ec:04:e9:d0:58:f9:d3:ea:32:4f:06:
cc:a4:3f:2c:cf:10:9d:6c:c6:fc:fc:78:2a:0c:b5:
55:47:97:d8:6f:60:4f:a0:62:26:a6:a5:b7:ad:71:
e7:c8:fc:d7:08:d0:20:7e:59:01:93:e8:d7:52:85:
30:00:eb:12:c5:59:5e:e6:8d:9a:a2:f2:b0:c3:c5:
8a:92:f0:c7:5e:0c:23:0b:91:d5:00:f9:bf:49:61:
f6:07:a9:7e:2f:8b:41:15:28:64:c5:da:1a:e6:ed:
a4:f7:07:08:18:ff:ee:1d:3b:97:49:33:7f:f0:33:
05:3c:cb:16:94:68:2d:ac:8e:62:34:bc:e5:60:b6:
b8:54:02:46:35:ea:67:8c:7d:f6:23:8c:73:34:6b:
da:56:b3:9a:4f:8d:c3:63:7b:93:89:91:7d:05:5b:
80:e4:17:9c:08:59:45:94:c7:b7:81:3f:49:10:30:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:BB:69:23:DF:52:EC:77:5D:7A:7C:25:BF:AA:7F:60:8E:21:35
X509v3 Authority Key Identifier:
keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:96:57:a6:d8:56:9d:00:c2:f2:8d:a6:e8:e8:0b:79:9b:
47:b1:61:21:df:ca:56:d9:46:48:c0:92:eb:32:48:c9:45:ee:
b9:fa:f7:58:54:bf:82:1b:cf:7b:c8:90:9d:cf:f0:d2:b4:3a:
cd:4b:97:5a:49:f4:6f:cb:2c:a3:8a:fa:76:6f:47:bd:6e:f7:
2c:78:28:7d:a0:70:54:68:ea:aa:d1:f3:54:d3:5f:73:b6:2a:
67:42:65:22:3f:da:67:b0:6a:05:b9:14:de:b6:32:38:c0:5c:
68:be:90:74:c0:19:5c:9e:6e:44:49:aa:30:95:9c:ab:5c:ec:
e0:c7:7f:19:5f:ad:f3:b2:a1:c1:c0:12:54:60:40:2a:4d:0d:
53:c6:58:df:8e:2b:29:fd:32:04:89:9d:7a:17:b3:1e:29:c2:
ff:33:76:e8:08:73:20:00:77:c4:44:29:c1:ec:17:9d:67:a6:
c1:5a:cb:7e:3b:35:bd:03:56:f9:4a:78:b4:76:1b:0e:4a:41:
45:43:cf:86:7f:a9:07:cd:ac:50:1c:b7:a5:5e:98:d0:a6:76:
0d:26:e6:f5:ff:35:8e:41:ab:46:be:9a:1f:79:2a:c7:28:eb:
25:80:93:4a:06:12:e5:67:ab:78:36:e4:d5:96:75:7d:ee:09:
2e:1d:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:43:40 2025 by rpki-client