This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
File: OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json)
Hash identifier: MoOO23c1fgApsrvDUekEhkd9AK8jH/3o2splXZmxlec=
Subject key identifier: 73:B5:83:94:FA:88:EA:0D:AA:5F:E1:F3:73:2F:A7:0C:F6:7F:7D:C1
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
Manifest number: 035E
Signing time: Fri 19 Dec 2025 00:11:02 +0000
Manifest this update: Fri 19 Dec 2025 00:11:02 +0000
Manifest next update: Fri 26 Dec 2025 00:11:02 +0000
Files and hashes: 1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: l+W9m6AGduJkykKDXx4SHIaVH8DmdjS87C7VfWOJDwo=)
2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Validity
Not Before: Dec 19 00:11:02 2025 GMT
Not After : Dec 26 00:11:02 2025 GMT
Subject: CN=69449816-0aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:51:20:0a:68:66:f7:30:9a:82:d6:6b:9d:
c2:ed:47:ee:77:1f:93:9b:ff:8f:a5:3b:23:1f:fa:
d1:97:c5:90:f3:71:3f:ea:25:69:73:bb:47:f1:4f:
0f:7f:23:f6:96:d4:ed:a7:0a:1b:4c:69:3c:62:f1:
9b:c8:4d:8b:37:7b:43:b8:73:3f:8a:47:8b:84:4b:
45:65:ce:b6:b8:ee:46:74:ff:79:fd:a5:27:25:85:
15:59:2d:3b:06:37:84:57:e9:bc:35:41:1b:40:ff:
1d:c9:24:6e:13:fa:75:a3:ca:06:f8:8f:8f:83:44:
92:7b:c0:f4:9a:a9:cf:be:3b:dd:a2:9e:af:bd:c0:
85:27:c8:65:52:88:66:8f:75:6e:af:53:9a:c1:7d:
da:8c:21:77:05:42:0d:5c:95:39:92:79:06:e8:47:
39:1c:8a:95:41:70:4d:a9:05:02:b3:e6:d9:a8:24:
c4:b0:45:75:a4:e3:7c:c7:33:77:6d:a0:38:42:59:
09:c9:fe:90:1c:7f:ef:1a:91:06:3c:9a:a2:3e:04:
19:e8:87:a8:9c:73:28:14:c2:0b:da:bf:96:c0:1f:
d9:0f:9a:73:27:5a:a7:d8:96:d5:6b:72:09:4c:4b:
7c:bd:3a:ea:e9:3a:e5:0e:47:c8:fc:55:bd:2e:b9:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:83:94:FA:88:EA:0D:AA:5F:E1:F3:73:2F:A7:0C:F6:7F:7D:C1
X509v3 Authority Key Identifier:
keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:1c:77:54:63:e8:2a:00:b2:b0:8d:7e:83:bc:59:d4:91:
c0:c3:f3:bb:17:cf:69:6a:94:66:de:3a:fb:88:3e:eb:6f:ea:
9f:94:19:6f:ac:78:dd:dd:0d:e5:1f:82:fa:80:4c:53:a8:5e:
d0:80:11:f9:bd:a2:8b:2e:67:93:82:27:a0:43:74:d0:b4:3a:
20:a6:ee:f7:bc:76:c5:9c:8f:78:02:d9:c1:dc:ff:fa:39:ba:
d0:1c:28:4a:8e:12:d3:46:45:82:2f:b0:bb:bb:38:ef:93:82:
b2:4d:96:3f:00:2f:06:c6:21:e1:5a:75:4b:20:ca:4b:aa:3f:
00:cc:22:bf:3f:5a:86:6a:ad:58:68:c0:ca:2e:1d:3b:2c:fb:
cb:99:fa:3a:06:a3:3b:09:20:75:4f:90:67:42:1d:c3:c8:d7:
58:57:bb:96:10:b4:bc:87:a2:46:b2:6d:f8:ed:7b:d7:de:8c:
45:ae:58:ee:79:c7:b7:0a:a8:3f:5c:6b:66:2a:f2:b5:70:0d:
95:c9:47:5e:f7:e5:73:3a:08:4c:c3:3a:4a:cc:f2:44:b0:3e:
bf:3d:1f:54:f1:a8:6c:cf:4c:1b:00:c6:2e:e8:1b:d8:dd:97:
b4:c8:aa:2a:5d:d1:cd:d4:0b:ac:7a:0b:a3:b4:d1:84:3e:17:
04:ce:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:40 2025 by rpki-client