This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier: wQdloopT2Zn9CJFVjFbIggezk7Ii8yAdV2PwKoanFR8=
Subject key identifier: C8:B8:3B:BD:F1:35:B6:CC:9B:8E:84:50:17:C2:37:8A:07:42:90:16
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 141A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number: 140F
Signing time: Tue 16 Dec 2025 16:49:13 +0000
Manifest this update: Tue 16 Dec 2025 16:49:13 +0000
Manifest next update: Tue 23 Dec 2025 16:49:13 +0000
Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: EJJjT6BFtXoLK01gpy9yGs0QU2HCIrAUZXu7h6p7558=)
2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 16:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5146 (0x141a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: Dec 16 16:49:13 2025 GMT
Not After : Dec 23 16:49:13 2025 GMT
Subject: CN=69418d89-fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:d1:7d:0b:90:9e:4f:7e:b4:e0:76:44:bb:
99:cb:ea:be:15:97:1f:85:91:ba:b8:7d:76:ec:d9:
af:ab:10:d4:7b:ab:00:62:b9:6a:4e:6d:0b:12:06:
84:91:9f:ca:39:84:b7:e3:07:1e:05:db:c0:de:84:
ae:29:11:b2:81:97:fc:eb:1d:df:a8:5f:fa:16:05:
6f:6d:6f:0c:ba:be:59:e1:eb:64:41:8b:f7:b2:f2:
9d:9e:0a:85:fd:5b:76:00:67:90:48:5a:cd:a9:97:
99:03:d0:8c:d5:8e:fa:21:cb:21:dc:79:75:db:bc:
6e:64:23:a6:6a:3a:99:14:29:57:2e:b9:fa:96:d0:
28:c9:8f:3b:95:82:10:ce:01:33:12:63:7f:58:05:
92:5d:39:db:af:e6:4e:99:8b:79:10:c1:27:ab:8b:
c5:23:2d:55:bb:32:10:c8:75:ad:53:a1:10:44:1b:
66:73:61:85:af:28:03:7b:e7:4a:fb:c7:bb:e9:53:
e4:cd:6e:d4:d0:1e:76:24:7a:0f:e4:f2:46:30:59:
2b:49:d5:76:27:75:f3:11:0b:58:46:5b:8d:a3:ce:
f1:b5:70:db:e5:e1:39:98:2e:39:23:78:1e:8b:ac:
6b:f5:ff:66:22:c1:47:9a:2c:32:67:bc:80:ad:a9:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:3B:BD:F1:35:B6:CC:9B:8E:84:50:17:C2:37:8A:07:42:90:16
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:df:d8:1a:90:17:df:ed:a6:34:4e:99:45:3a:c5:53:84:2e:
eb:b1:87:24:28:18:f9:fe:b3:92:b3:d2:f2:1f:1e:83:a2:42:
4e:87:9e:12:be:08:12:12:6e:9e:de:06:f4:6f:0d:ae:ce:b9:
4c:b0:31:c8:ce:ee:ff:5b:a8:6d:bb:53:e7:55:71:53:8e:e0:
10:e8:6c:96:25:bf:41:c9:41:20:78:d4:24:2c:ab:9a:1f:c4:
e7:58:92:41:1a:4a:0f:05:14:db:0e:93:bd:0a:cc:e3:9a:90:
8e:58:2b:0e:f9:29:c5:07:83:fd:d8:95:59:1d:ab:dd:af:43:
37:a0:78:26:32:ca:15:c6:9e:54:e3:5b:0f:3d:3d:70:81:72:
ef:4b:5d:7c:b5:c7:6c:39:f3:63:52:fe:46:70:47:96:90:1e:
6d:e4:fa:ea:23:d9:fb:eb:54:aa:6a:7e:78:8f:ea:0c:a3:12:
6c:38:70:e5:b6:74:9d:7e:6c:7b:7d:77:82:5e:11:fc:c9:a8:
70:09:a2:f4:18:f1:e0:d6:c4:a1:7c:67:36:b7:a0:0d:f2:d1:
18:8c:a9:b0:3d:de:30:20:f6:9b:c9:98:93:13:29:4b:0b:e5:
d5:59:45:0c:7c:0a:14:79:d7:79:1f:6d:56:a1:59:87:29:9c:
ff:a8:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 21:23:23 2025 by rpki-client