This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier: wYQCu9iz+xV0CsGpD6WqsKoGV3vusmhXkCty8CHj2nw=
Subject key identifier: C8:D2:44:AA:4C:3B:16:4A:6D:DB:1D:5E:DD:B9:22:41:98:FA:7B:27
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial: 0336
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number: 0325
Signing time: Fri 19 Dec 2025 00:21:16 +0000
Manifest this update: Fri 19 Dec 2025 00:21:15 +0000
Manifest next update: Fri 26 Dec 2025 00:21:15 +0000
Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: PDt3UeMMLzd/tFBo6Cbf8Key1UXFlvgofCRTk+rmCes=)
2: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: JOoE8cEv4QilU5Ombvm92A0+Tjd4xN4kgW5mBEFenZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Validity
Not Before: Dec 19 00:21:15 2025 GMT
Not After : Dec 26 00:21:15 2025 GMT
Subject: CN=69449a7c-4edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:5a:98:ea:1b:01:9e:15:8d:e4:01:18:72:
bb:33:8b:26:a1:bb:21:ea:ec:fe:b4:9a:9a:80:4d:
03:b0:55:ab:c5:65:bf:77:38:d4:d4:c4:d0:b2:bc:
2e:cc:72:04:a6:88:78:59:6c:60:5f:42:d2:69:a6:
d8:a5:c6:59:7b:79:45:ca:19:61:f7:fd:ce:25:7d:
22:d2:d9:e7:27:74:fa:81:9f:f5:ea:d7:1d:0b:e7:
23:a8:00:8a:c3:70:03:fe:2e:39:30:72:36:6d:e0:
45:0a:02:28:fc:59:dd:a1:1b:bc:bc:c7:97:f6:52:
87:0d:27:66:20:30:98:51:b6:b9:d1:97:ff:b5:45:
99:21:e4:22:8b:9d:1c:ff:3b:3b:8d:be:ad:53:82:
6f:49:61:be:05:4d:2c:71:33:57:5c:97:2c:51:96:
4e:54:5d:ce:df:97:a2:15:d9:01:0e:69:8b:94:1f:
19:34:0f:07:dc:1b:c2:21:77:85:f5:1d:fd:c9:c5:
07:90:a5:35:25:a3:76:c1:29:c9:f7:74:f3:c2:67:
01:12:81:3a:c9:f1:2a:91:e0:8f:6d:49:94:ef:4d:
7c:28:18:3a:ab:99:0b:19:ef:93:28:de:1d:3e:a4:
0f:3d:81:80:82:7a:07:a1:53:cf:70:89:88:b7:a2:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:44:AA:4C:3B:16:4A:6D:DB:1D:5E:DD:B9:22:41:98:FA:7B:27
X509v3 Authority Key Identifier:
keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bb:9f:d4:84:79:16:04:2e:51:f8:ee:00:67:11:25:29:c6:
91:37:4e:ef:f6:65:6e:d7:09:d6:6d:65:35:b9:7c:f4:fa:71:
35:09:32:54:9a:26:09:2e:92:40:97:e2:a8:18:e7:5a:1d:a2:
c1:b6:d6:ee:28:76:65:05:2f:fd:55:c4:cc:79:ec:c1:f0:37:
a6:c8:cf:21:7f:d9:90:81:ab:94:48:72:db:0d:1b:90:f2:a6:
27:e7:7c:d8:89:7a:ac:9a:f3:26:7f:59:dc:e5:58:2e:a6:ba:
4a:2b:ad:43:9a:94:8f:66:04:b6:6c:dc:1c:fe:8a:f4:f3:18:
cd:b1:0a:b6:1e:c7:3e:c2:20:5a:2d:2b:79:c7:98:70:65:cd:
91:c2:74:7f:54:20:e0:8e:75:93:39:f7:4d:b7:70:e7:e4:5d:
33:1a:66:d5:48:e7:75:69:2c:b6:e6:6b:52:79:7f:47:ef:d4:
93:f8:b2:fd:23:48:d2:fd:8c:c8:35:7a:8d:f4:8a:c7:3a:e8:
b0:d1:d6:16:ad:9c:00:c4:d9:b7:ad:2e:d5:0b:87:ef:af:7e:
f7:f2:62:e5:e0:0a:9f:5d:fe:6b:46:ab:8c:f6:ac:0a:7c:49:
f4:87:9f:83:5f:fb:02:db:76:0e:0d:c4:27:6b:fe:12:d7:b2:
3c:75:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:48:57 2025 by rpki-client