This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier: tOTi1uQXSEtZ/NfYqnk7yRDXUStuqm1+XwFZTQc4+BM=
Subject key identifier: 0A:6D:12:F4:34:5C:80:04:3F:FF:F8:9F:FF:70:F1:CC:FB:43:20:A2
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number: E7
Signing time: Tue 23 Dec 2025 04:24:27 +0000
Manifest this update: Tue 23 Dec 2025 04:24:26 +0000
Manifest next update: Tue 30 Dec 2025 04:24:26 +0000
Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: QOSJf33q19yRHD6kP6sMP07DlTUFFQxKsBNVySrWYno=)
2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Validity
Not Before: Dec 23 04:24:26 2025 GMT
Not After : Dec 30 04:24:26 2025 GMT
Subject: CN=694a197b-b048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:ca:da:f6:32:06:b0:e9:23:58:c7:a3:0e:
44:61:29:11:70:c1:da:6b:65:45:95:a6:fe:9a:99:
46:8d:8e:02:36:07:c4:0d:7c:d5:20:47:dd:fc:e1:
86:17:ca:e0:30:03:f2:35:b0:37:92:1b:92:7c:97:
14:b8:30:f0:b5:96:13:23:b9:4d:e4:b0:eb:ee:b5:
99:d5:ee:57:9d:78:a4:00:ef:1c:6b:2b:45:3f:54:
29:8c:0a:95:b0:f6:c0:8f:84:cd:fb:85:0b:b2:40:
6c:29:2c:a7:ce:ae:75:3b:2a:e9:b5:4d:9c:43:38:
e1:76:e8:f8:7d:fc:c4:ed:2f:ca:d6:15:73:30:51:
b4:60:0d:9f:eb:01:0b:bc:4c:06:01:ab:3d:4e:d8:
51:d8:82:1f:11:a8:31:2b:b3:2f:4f:1a:67:8d:45:
d1:9c:46:22:72:ce:81:d7:33:36:78:71:73:5e:48:
d2:05:fd:cf:c6:9b:bb:35:71:9c:cf:ee:9b:c3:c9:
58:6e:e2:ff:d0:44:c0:a6:3a:8d:50:db:03:77:71:
a6:b1:00:2c:26:4d:fa:2f:0a:d8:28:07:02:80:5e:
41:cd:2e:8d:ec:ca:fa:2f:1c:ed:0c:da:6f:b4:f5:
25:34:04:72:7f:0f:22:db:4c:59:5b:f4:0b:72:0e:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:12:F4:34:5C:80:04:3F:FF:F8:9F:FF:70:F1:CC:FB:43:20:A2
X509v3 Authority Key Identifier:
keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:e0:fd:f8:4c:48:3e:b5:c8:1a:bd:12:c8:d1:2f:81:28:
4f:23:de:74:a9:ad:07:42:49:bc:15:47:8c:a1:84:2f:40:79:
fa:4a:09:e3:91:6e:1d:fe:0d:79:9f:6a:3b:cc:7b:e7:ba:32:
a8:72:fc:e1:64:43:2c:04:ec:7b:b2:9c:ab:e7:8f:f1:87:da:
d3:6b:61:8e:29:4b:cb:bf:43:1b:a2:80:95:bd:60:a9:a4:ea:
e1:a1:ca:86:cd:a9:01:0d:c9:46:c0:66:42:c5:61:e2:1a:77:
aa:66:c1:35:0b:b2:af:01:35:fe:a3:3d:f1:fa:53:e5:25:77:
88:04:7b:3b:46:7b:9c:9a:30:c8:f7:f9:9b:26:89:5c:09:05:
c0:2e:0f:a0:52:6d:9c:00:c1:a5:64:eb:b4:25:a0:95:be:f5:
fc:f8:33:c5:e2:b7:ee:7e:f0:8c:3c:c1:e4:bc:11:07:9a:96:
a7:e1:59:46:b6:84:3c:ca:d4:06:29:61:fd:d0:ba:66:60:28:
b8:91:3a:55:42:f1:84:d3:2e:51:a1:de:f2:23:0f:d6:a4:59:
a2:40:f2:a6:40:96:c2:46:eb:48:db:d9:b0:e7:91:66:98:6f:
69:12:29:2b:50:9e:85:ab:5f:4c:8a:fc:44:87:8d:ea:47:a1:
d9:d3:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:12 2025 by rpki-client