This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json)
Hash identifier: VWIsgVsdXd9F+FpOV1RLQWrK0r1FUNNTE/KKQPe8KD8=
Subject key identifier: D4:08:56:96:D9:54:EC:AB:39:F5:26:2F:A1:30:D9:3B:37:FA:A1:B2
Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Certificate serial: 061E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
Manifest number: 0613
Signing time: Thu 18 Dec 2025 22:12:54 +0000
Manifest this update: Thu 18 Dec 2025 22:12:53 +0000
Manifest next update: Thu 25 Dec 2025 22:12:53 +0000
Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: agNN+pF7u83GiK9X8SOg6VVtXRpvl5M88+LE2IfU8yg=)
2: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: pKLk6OfJnvru45xZOE/FJIK5VrkZPKYSrNqrwCtPYN4=)
3: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: Ews4xG+BhGr1YKU7wFoc4NdQF1qugSkJAZpv3+K1VQA=)
4: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: ixAKLgsVNfo1Pz8i7g4aRb3j68KYgsQlay7em4iJOQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Validity
Not Before: Dec 18 22:12:53 2025 GMT
Not After : Dec 25 22:12:53 2025 GMT
Subject: CN=69447c65-00ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:b7:4b:d7:62:ca:d7:63:ad:9e:96:9c:4f:
f1:df:ad:02:c4:e1:02:74:7f:01:78:89:4d:ed:80:
11:9a:51:60:8d:f4:e7:40:32:cb:14:59:29:61:bc:
b8:cf:5c:0e:0e:ab:55:34:1c:1b:4e:b4:cc:e1:8f:
00:91:f3:34:af:40:c6:7e:b7:c0:ad:d4:b5:d0:88:
2a:fa:ec:63:82:f6:91:9c:18:ab:80:ee:eb:35:bc:
e6:45:bc:1f:43:61:de:03:ee:64:1b:da:db:87:d2:
54:c9:c0:ce:e2:c1:20:53:92:a7:ed:b1:34:97:b4:
66:d0:71:59:08:fe:17:d1:46:27:52:db:7b:98:e2:
4d:f5:93:c7:63:dc:3a:2b:e2:0c:9f:bd:e0:16:8a:
82:a2:7b:0c:ea:47:40:dd:c5:d7:b0:79:07:a9:d0:
34:7f:4a:a5:2a:25:ae:8b:55:11:32:3c:4d:dc:7d:
1d:bb:a0:75:a9:9b:ca:ed:05:d9:51:06:3a:79:88:
bd:43:40:70:60:00:4f:d9:2f:37:93:cf:82:ec:bc:
0e:63:e5:43:f4:d9:17:4f:a2:ea:5c:ab:0d:b0:02:
08:9e:a4:a6:0c:0c:a8:ba:2f:59:b7:aa:57:15:b8:
ff:d2:b0:02:a8:a0:56:54:6e:23:a2:10:e0:7e:cf:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:56:96:D9:54:EC:AB:39:F5:26:2F:A1:30:D9:3B:37:FA:A1:B2
X509v3 Authority Key Identifier:
keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:67:5e:77:29:2d:0c:97:ea:0d:94:3c:c6:c1:b9:4c:68:
66:2f:a2:f9:51:db:e0:dd:16:63:cd:d5:76:85:9b:98:f7:31:
ec:91:88:b5:79:96:6f:26:89:d6:4e:a9:e7:6d:35:b4:d1:fc:
d6:42:ec:79:18:74:cd:5c:44:be:ed:5c:71:ff:d7:53:1d:ab:
27:ed:f3:73:08:65:28:bd:b0:db:12:c6:b7:3f:cb:08:82:e2:
79:f9:d6:6c:b8:11:be:48:35:71:af:4e:a8:2c:5e:71:89:9f:
6f:e7:21:8f:bb:32:88:c3:8c:bd:06:38:46:f3:36:ca:f7:1f:
cc:91:01:59:40:68:87:4e:bd:67:0f:4c:90:0f:47:27:d0:47:
62:78:e3:2c:7e:bb:97:68:d7:06:a5:36:ff:2d:ec:ae:b9:f5:
3b:cd:b9:94:78:5e:7a:c1:a1:7f:70:d7:85:40:b6:1c:f9:47:
1c:35:5f:7c:94:ac:e7:75:67:c0:00:4e:81:71:37:f3:3e:ad:
8d:cc:eb:1e:69:09:41:4b:3e:7f:c6:08:63:c8:06:26:ab:f0:
12:ce:0f:2e:35:48:85:95:8b:3a:a5:8d:c0:90:26:6a:38:68:
d8:d0:ec:df:89:89:70:bc:33:10:d1:fc:11:fd:37:41:6b:b7:
53:2a:0b:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF
OTY3NjQxREMwHhcNMjUxMjE4MjIxMjUzWhcNMjUxMjI1MjIxMjUzWjAYMRYwFAYD
VQQDDA02OTQ0N2M2NS0wMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptC3S9diytdjrZ6WnE/x360CxOECdH8BeIlN7YARmlFgjfTnQDLLFFkpYby4
z1wODqtVNBwbTrTM4Y8AkfM0r0DGfrfArdS10Igq+uxjgvaRnBirgO7rNbzmRbwf
Q2HeA+5kG9rbh9JUycDO4sEgU5Kn7bE0l7Rm0HFZCP4X0UYnUtt7mOJN9ZPHY9w6
K+IMn73gFoqConsM6kdA3cXXsHkHqdA0f0qlKiWui1URMjxN3H0du6B1qZvK7QXZ
UQY6eYi9Q0BwYABP2S83k8+C7LwOY+VD9NkXT6LqXKsNsAIInqSmDAyoui9Zt6pX
Fbj/0rACqKBWVG4johDgfs+TVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQIVpbZ
VOyrOfUmL6Ew2Ts3+qGyMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB
NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY
bjhDM091SGc1VDNwWjJRZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB89WdedyktDJfqDZQ8xsG5TGhmL6L5Udvg3RZjzdV2hZuY9zHskYi1
eZZvJonWTqnnbTW00fzWQux5GHTNXES+7Vxx/9dTHasn7fNzCGUovbDbEsa3P8sI
guJ5+dZsuBG+SDVxr06oLF5xiZ9v5yGPuzKIw4y9BjhG8zbK9x/MkQFZQGiHTr1n
D0yQD0cn0EdieOMsfruXaNcGpTb/LeyuufU7zbmUeF56waF/cNeFQLYc+UccNV98
lKzndWfAAE6BcTfzPq2NzOseaQlBSz5/xghjyAYmq/ASzg8uNUiFlYs6pY3AkCZq
OGjY0OzfiYlwvDMQ0fwR/TdBa7dTKgs+
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:14:15 2025 by rpki-client