This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier: 4CPcaTr+ZUQ+2ZF/lMU97B51O2yqL+Q5HT0dnSHA+Q4=
Subject key identifier: 93:01:43:0B:49:2E:83:6D:50:9F:ED:2A:9E:0D:A1:E7:97:4A:CE:DF
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial: 1F07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number: 1EFB
Signing time: Thu 18 Dec 2025 15:56:47 +0000
Manifest this update: Thu 18 Dec 2025 15:56:47 +0000
Manifest next update: Thu 25 Dec 2025 15:56:47 +0000
Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: DEueg9GtClfRPSjYYY36LA/muMKiaZsS73kdXP4ypSo=)
2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7943 (0x1f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
Validity
Not Before: Dec 18 15:56:47 2025 GMT
Not After : Dec 25 15:56:47 2025 GMT
Subject: CN=6944243f-3af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9c:64:4f:9b:23:13:b6:4d:17:15:4d:3f:f3:
87:9a:da:c3:90:07:e0:c7:dc:d0:a5:05:26:c9:e7:
93:fc:ed:47:c3:ab:73:2b:01:c1:ad:a3:de:f2:ce:
06:d7:b2:9f:d9:2a:d4:40:b0:a8:e1:e9:c3:7b:8d:
e9:34:9b:7d:1d:ec:30:8b:5d:d3:ec:51:32:84:55:
dc:5a:ae:d2:8e:f5:a4:38:14:12:0d:a7:1f:7b:4c:
35:cf:04:1f:94:7f:bd:b3:27:a5:e6:53:dc:7d:ab:
35:67:63:51:6a:81:65:39:33:a9:51:c7:2b:1a:b9:
14:73:05:62:32:a9:3c:4b:87:33:75:a3:c5:90:40:
e4:e3:50:43:83:66:9c:9a:29:2e:42:b1:0a:c4:84:
12:2a:18:80:62:a8:45:f3:8f:1f:a5:74:7e:b2:e3:
a0:e7:2f:4e:89:2b:26:fd:ff:d2:e5:4d:60:d6:95:
3c:f6:4c:90:8e:9d:86:93:74:1e:f9:30:59:fd:df:
dd:f8:8c:ce:98:1f:e6:50:c3:a1:71:b5:96:0f:89:
1d:e4:a2:fb:61:44:be:ef:76:b8:27:a5:40:62:2a:
7c:e8:66:d0:1f:2f:75:e9:b1:9b:8d:34:53:eb:95:
7a:78:a7:be:47:d6:63:01:83:d2:25:36:e6:79:22:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:43:0B:49:2E:83:6D:50:9F:ED:2A:9E:0D:A1:E7:97:4A:CE:DF
X509v3 Authority Key Identifier:
keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:43:6f:e3:50:fe:0c:ae:63:92:49:c1:d7:64:e3:5a:97:d4:
74:84:a9:8a:34:29:ee:a1:9c:31:79:a8:df:fe:01:ee:24:9e:
a4:23:83:77:c6:c8:54:71:ce:67:dd:0a:a5:b7:6f:a4:9a:37:
2b:2f:51:60:df:98:0a:a1:5e:7f:99:4c:a9:90:3b:18:b2:c2:
14:98:52:27:18:e2:8b:2b:34:9f:54:53:df:01:ba:8c:9c:7b:
a0:ca:98:f7:44:f0:a4:37:87:9f:17:9c:a3:0a:55:fc:d5:8b:
b4:4d:64:70:f0:63:cd:b9:b4:d8:35:c0:f7:20:56:a2:4e:14:
f7:f3:34:0d:ce:3e:05:e9:7f:76:ac:e1:98:73:82:9f:15:b9:
e6:14:3a:a0:37:43:e1:19:10:3f:80:c9:2e:f4:8a:19:06:b6:
44:12:a2:4d:de:3a:40:80:e3:09:1a:c4:1e:6d:5c:1e:b0:bd:
58:46:7e:eb:fb:21:0f:b6:39:f7:09:cd:75:20:f5:47:b5:5a:
15:f5:d6:6e:ec:ac:3e:ea:7f:c2:99:ec:e9:55:a7:fc:b8:ac:
8a:9c:9f:6d:0a:3d:ea:32:e8:ea:74:34:e4:54:55:f6:2a:69:
7e:2b:16:0d:cd:66:25:ff:9d:8c:33:11:af:31:80:8c:00:b3:
1e:7c:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:04 2025 by rpki-client