This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: 9T4TiXZJ7Cm6+t2Z6pkDW1Y0ugIu9T/hOpz+zsPyUFg=
Subject key identifier: B2:8F:AC:89:70:CA:C3:5F:F8:9A:C2:E5:BF:03:0A:32:F0:DD:39:46
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 08FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 152F
Signing time: Sat 20 Dec 2025 18:15:41 +0000
Manifest this update: Sat 20 Dec 2025 18:15:40 +0000
Manifest next update: Sat 27 Dec 2025 18:15:40 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: IVj9s9j1gY3CDqlGChLr3e7MQlMQ2o6jNCYXW3E4aww=)
2: F6EC251224E711F087B2F571C4F9AE02.roa (hash: ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=)
3: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Dec 20 18:15:40 2025 GMT
Not After : Dec 27 18:15:40 2025 GMT
Subject: CN=6946e7cd-66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:38:05:a8:00:48:c1:c2:a6:2c:be:95:1c:
dd:6e:07:cd:e2:ae:f7:05:ec:f5:79:d7:66:cf:79:
21:bc:11:ce:e3:87:10:0a:5e:f8:ef:f6:c8:f3:c0:
a2:36:96:69:e6:7b:68:b5:04:d4:a3:66:79:3a:e0:
75:dc:3c:ff:0c:83:42:29:d6:58:f5:5a:10:31:8e:
5f:32:51:08:7c:81:01:76:f2:29:c1:33:e1:f9:da:
4f:9d:d6:8a:41:ad:b1:36:43:68:c6:44:cd:c9:dc:
11:03:9e:3e:3c:5a:9d:50:1f:46:25:e4:4c:38:76:
4a:33:4a:0f:6a:ab:aa:17:cd:c0:31:48:7a:dd:2c:
3a:47:cd:49:31:da:b2:4f:84:db:61:73:7c:dd:b1:
76:e0:bb:66:7a:4b:4f:49:8a:23:12:58:4a:f7:b5:
ff:00:90:31:02:8d:5e:2c:d1:d3:8c:e9:9b:f6:4b:
cf:45:33:b0:67:2b:9b:cd:c1:38:a9:7e:c2:bf:1f:
04:7f:ec:02:84:39:76:41:b5:8f:a1:2b:07:4d:39:
dc:2b:f3:d0:d4:66:a4:e8:25:57:ee:78:bd:c6:ef:
d5:f7:04:b0:37:59:6b:6c:a6:11:26:f5:77:5e:4c:
c7:23:fe:0c:7c:10:b6:52:8d:f7:3a:ca:3a:55:07:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:AC:89:70:CA:C3:5F:F8:9A:C2:E5:BF:03:0A:32:F0:DD:39:46
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:49:ec:d5:21:4d:42:f4:e3:99:77:83:cc:65:16:8c:e8:fd:
7d:86:26:b6:1f:b1:f7:bc:34:6c:e9:40:e4:9c:46:98:87:4e:
b1:3c:ef:a2:f1:2a:98:c3:91:c0:8e:70:2f:f7:b8:43:ae:00:
b5:93:db:a7:33:7e:2d:53:21:7d:fb:fb:d2:eb:67:a0:3d:4e:
25:19:f3:bc:e5:e1:64:c4:76:99:97:fd:62:0b:36:67:c5:e6:
1e:97:16:c0:da:43:5e:78:d7:5e:b1:03:ca:0e:f9:e5:ad:38:
6b:cd:19:71:f1:9e:02:72:a5:bf:e3:90:38:d4:fe:da:f8:b3:
da:6c:68:87:f3:47:a8:ac:10:37:34:83:3f:58:bc:ad:d3:bc:
6e:07:26:16:a7:5f:3e:ac:61:07:97:0a:0c:67:63:4b:a3:ed:
ad:39:55:1b:40:b6:61:ef:45:80:d9:9b:be:f2:a4:08:92:fc:
a4:77:0f:f2:6f:73:df:85:f9:80:66:2a:41:99:8f:60:f5:a7:
89:5e:89:37:90:94:bd:bf:85:0f:8f:8e:7e:7c:52:68:57:75:
96:ab:70:3e:b9:c0:c5:b2:08:cc:3d:e3:f4:6c:68:02:69:8d:
e7:28:55:d5:83:fe:7b:bb:96:b3:03:9c:42:52:80:65:aa:39:
b4:96:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:12:46 2025 by rpki-client