This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier: InG55s2DcLl54lw3FU5Lq6gjwmTD4zoPrgOsWe/zA9E=
Subject key identifier: 80:E6:C9:4B:33:FA:80:A9:78:D7:CB:F1:95:72:2F:C7:85:AE:FB:C1
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number: 0160
Signing time: Fri 19 Dec 2025 03:12:59 +0000
Manifest this update: Fri 19 Dec 2025 03:12:59 +0000
Manifest next update: Fri 26 Dec 2025 03:12:59 +0000
Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: 1oeBIuwb5EQyrVqa/Zy1kHe7Fmwl5kPfnwAkGHX+3Xo=)
2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: 9XQ8E57rDZy0hs4By4P58wDNjTR7DCt1F2KaYrqVcoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Validity
Not Before: Dec 19 03:12:59 2025 GMT
Not After : Dec 26 03:12:59 2025 GMT
Subject: CN=6944c2bb-d5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:6c:2d:8b:00:65:36:65:9e:da:f8:07:05:
88:99:47:b5:8c:85:0a:74:40:07:40:51:14:df:3d:
d0:c5:17:b6:4e:2b:30:d0:3e:fe:9f:e0:eb:0c:3d:
42:81:09:c8:52:10:e0:18:b7:a5:52:f2:5a:80:a0:
26:95:a4:67:09:68:f3:1e:4b:3f:65:cb:31:83:1b:
eb:cf:60:49:ca:36:74:9d:9b:92:58:bc:6a:41:e5:
89:fd:0b:7a:98:06:15:5c:58:e0:19:d6:9b:6b:50:
84:ac:6e:28:9e:59:fd:0c:b4:48:3a:ee:05:99:5a:
5d:9b:68:16:19:d0:0b:8f:a7:d7:b0:6f:52:be:36:
1c:a9:5b:51:74:fe:0f:94:4b:ae:fd:f4:5d:f0:d9:
56:15:58:fe:92:e2:f5:03:30:43:44:d2:13:66:61:
c4:88:2e:48:c0:0f:b0:ef:90:9e:7c:1e:16:e3:6a:
e7:56:8f:ee:2a:03:c4:26:b1:e4:59:b5:84:22:0e:
1d:07:c1:7b:86:db:41:74:81:a0:c8:66:3d:3a:cc:
18:8a:b6:d8:79:05:51:75:cc:e3:62:b2:0a:5f:fd:
e2:fb:41:17:c5:2c:62:9a:98:c7:14:65:84:fd:35:
88:d1:e0:5d:1b:77:89:53:a5:9b:20:98:a3:f5:0c:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:C9:4B:33:FA:80:A9:78:D7:CB:F1:95:72:2F:C7:85:AE:FB:C1
X509v3 Authority Key Identifier:
keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:71:c2:63:df:57:88:e6:80:62:ff:ed:ec:99:af:ac:b3:
c7:5c:da:38:cc:70:f7:54:2b:5e:27:05:2e:39:fc:19:c2:d5:
8b:93:18:ce:16:cc:a6:6c:8c:37:cf:02:41:60:b2:b9:7e:20:
02:6b:97:f2:8a:6c:ad:22:f4:29:15:ea:a5:0f:2a:1f:2f:0a:
15:7d:2f:e6:b7:8f:94:b5:14:5c:46:13:d3:ff:6b:ca:a2:89:
79:4e:7a:b0:71:63:0d:6a:62:7d:a5:17:c0:4b:aa:92:09:4c:
e6:5a:a5:9e:e3:f0:66:3c:1b:c6:a4:9a:56:46:be:d7:cd:6f:
1c:8f:83:61:39:7b:5f:39:ac:be:27:c2:21:5b:37:c3:5f:39:
44:63:01:c6:08:cf:ac:e2:a5:9b:e6:9f:f2:ea:bf:ad:38:4a:
c1:b1:00:6f:60:2a:28:09:27:c8:14:29:05:ad:31:38:7c:d3:
2d:60:82:40:bb:8b:86:ce:36:61:29:23:04:b3:bb:47:ff:74:
28:2c:7e:34:d2:1d:0b:97:d5:82:82:2c:88:3b:54:21:19:8a:
a4:84:e5:35:58:a6:43:1c:25:6f:f1:86:9e:ca:e6:d2:c5:48:
e2:9f:ec:70:2d:64:45:99:c8:9f:0a:62:81:2f:a8:29:22:88:
5a:bc:15:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw
M0JCREZBNjIwHhcNMjUxMjE5MDMxMjU5WhcNMjUxMjI2MDMxMjU5WjAYMRYwFAYD
VQQDDA02OTQ0YzJiYi1kNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06FsLYsAZTZlntr4BwWImUe1jIUKdEAHQFEU3z3QxRe2Tisw0D7+n+DrDD1C
gQnIUhDgGLelUvJagKAmlaRnCWjzHks/Zcsxgxvrz2BJyjZ0nZuSWLxqQeWJ/Qt6
mAYVXFjgGdaba1CErG4onln9DLRIOu4FmVpdm2gWGdALj6fXsG9SvjYcqVtRdP4P
lEuu/fRd8NlWFVj+kuL1AzBDRNITZmHEiC5IwA+w75CefB4W42rnVo/uKgPEJrHk
WbWEIg4dB8F7httBdIGgyGY9OswYirbYeQVRdczjYrIKX/3i+0EXxSximpjHFGWE
/TWI0eBdG3eJU6WbIJij9QxNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDmyUsz
+oCpeNfL8ZVyL8eFrvvBMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG
NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s
RU0yOC1jZkRwREFEdTktbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGr3HCY99XiOaAYv/t7JmvrLPHXNo4zHD3VCteJwUuOfwZwtWLkxjO
FsymbIw3zwJBYLK5fiACa5fyimytIvQpFeqlDyofLwoVfS/mt4+UtRRcRhPT/2vK
ool5TnqwcWMNamJ9pRfAS6qSCUzmWqWe4/BmPBvGpJpWRr7XzW8cj4NhOXtfOay+
J8IhWzfDXzlEYwHGCM+s4qWb5p/y6r+tOErBsQBvYCooCSfIFCkFrTE4fNMtYIJA
u4uGzjZhKSMEs7tH/3QoLH400h0Ll9WCgiyIO1QhGYqkhOU1WKZDHCVv8YaeyubS
xUjin+xwLWRFmcifCmKBL6gpIohavBWg
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:02 2025 by rpki-client