This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: DoBmHpPKh4VQfp5mCCQVARVMjt3VzkOZzazRxjHs5v4=
Subject key identifier: E2:91:62:11:7D:7D:60:21:B1:E0:DE:14:69:48:7F:7E:B0:60:26:06
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 01F7
Signing time: Fri 19 Dec 2025 01:43:30 +0000
Manifest this update: Fri 19 Dec 2025 01:43:30 +0000
Manifest next update: Fri 26 Dec 2025 01:43:30 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: kO/KrKc82cbfXg0tBZAYBP95PBdK3ZFTkG4OBmSkmz4=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: ubUjcvyGWOVoBPD/HaOXZSW0U65r3pb0SXIKGNOXMw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Dec 19 01:43:30 2025 GMT
Not After : Dec 26 01:43:30 2025 GMT
Subject: CN=6944adc2-78c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:eb:60:b4:a6:69:09:8a:b0:7e:b4:35:82:
18:3b:41:0b:f1:16:20:a4:06:b6:75:ab:29:f8:f8:
c9:74:01:53:d9:28:82:ac:cb:53:99:5a:04:76:1c:
20:73:c5:c5:0c:24:3d:03:4d:5d:52:a1:a1:23:08:
00:c4:28:84:9a:c1:94:fa:17:5d:03:e2:bf:99:b7:
67:d6:31:d3:de:fc:78:ac:3d:eb:7f:0a:17:92:29:
1d:90:bd:86:6b:92:cf:d3:29:1f:83:32:87:08:47:
57:84:e8:35:46:86:aa:a8:2d:9e:86:3f:42:db:a3:
9e:05:c9:61:3f:15:ae:10:28:54:50:43:18:8d:8b:
f0:8b:f3:33:ca:f3:52:17:f9:12:92:64:66:48:03:
9b:bd:ed:7f:05:89:00:50:78:16:6c:2f:00:68:d4:
a6:e1:fc:03:5b:43:6c:75:60:5e:7c:31:14:58:74:
3d:a1:dd:b1:64:41:80:c2:a0:c0:f2:fc:d9:8e:81:
08:2b:04:27:6e:11:a8:58:43:67:b7:13:e6:e9:ff:
74:92:aa:a5:f7:fa:b3:70:03:53:44:00:c6:d6:f1:
60:a5:6e:19:c1:b6:04:a7:f9:cc:b8:eb:85:4a:a8:
94:31:f1:c9:e1:50:aa:8f:96:1a:68:b8:fb:7f:c0:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:62:11:7D:7D:60:21:B1:E0:DE:14:69:48:7F:7E:B0:60:26:06
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:25:cf:e3:f2:10:d3:6f:de:4b:a7:0b:d5:1f:99:b0:08:cf:
36:fe:47:68:cb:5e:3d:37:fb:dd:71:19:f4:86:44:56:c2:0b:
fe:a5:e1:77:09:2f:42:4a:d3:2c:e1:00:81:f2:11:04:3d:84:
ac:0a:9b:a4:a4:a5:b0:be:35:79:d0:57:67:b4:28:67:15:47:
44:7e:09:8b:88:07:e2:09:37:f8:d6:aa:c4:2e:29:7b:b0:1d:
62:23:78:7e:af:be:4e:6c:0e:61:24:31:98:48:84:84:4f:01:
96:62:4b:c0:93:10:81:fc:25:91:ad:eb:12:09:e8:24:d3:11:
f0:a7:ed:cf:b0:d8:1a:3a:a8:d5:e5:90:80:b7:29:1f:52:60:
78:90:ff:87:80:a1:c3:07:b0:cc:69:a7:2b:d2:c0:df:2b:2a:
df:06:69:61:8c:14:05:a5:fa:3f:e4:ed:4d:68:4f:15:4c:ec:
be:60:5d:af:e5:5a:55:d7:54:d6:42:a9:15:de:c9:45:fd:7c:
6e:e3:49:3d:60:51:cc:1c:3f:9c:7f:10:0e:04:34:30:6b:a1:
77:82:24:23:25:26:f4:13:df:e6:43:d2:4c:5a:74:39:02:6b:
60:96:13:04:2d:99:47:d6:1c:98:27:fd:c8:75:ee:c6:0b:d6:
d0:2b:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:35 2025 by rpki-client