This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File: OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier: C9oetlu/RxeB+OJr7lueuZmpzRVBQCcBtaBwtHYGvl8=
Subject key identifier: 42:E6:72:A3:82:A3:6A:A6:48:61:F2:2E:9F:58:AD:F0:84:11:7A:FD
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial: 1096
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number: 1074
Signing time: Sat 20 Dec 2025 17:06:32 +0000
Manifest this update: Sat 20 Dec 2025 17:06:31 +0000
Manifest next update: Sat 27 Dec 2025 17:06:31 +0000
Files and hashes: 1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: Cs++9SJ07KXFfNbS7i4UuAqTtzgIPhmd2Cm59CQjykM=)
2: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: ZsKWGtKVq3aoWptNQmv7xVjVnY/4jXxJBvjnB+HtK+c=)
3: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: ZbaNyd2npVQ7n+Gz6EMJlX5yHpd7tPiQHaPoJPJgyBc=)
4: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: bytWuNzrLQw9v+QMqc5rrIvyHwJBakcmOmXht2Npskg=)
5: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: wikUFUY0h7gGqht6lrAAGNzDvHHVKOxeJ+8mIhyaOLg=)
6: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: rjaSyAzG4Vkfbg5uZuSjD+n9EriKOHglMvv9YunPzH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4246 (0x1096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Validity
Not Before: Dec 20 17:06:31 2025 GMT
Not After : Dec 27 17:06:31 2025 GMT
Subject: CN=6946d798-8a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:7b:77:85:dd:b3:e8:08:d8:36:1a:86:74:
a6:5a:86:0e:9a:bb:9d:b5:be:e4:1b:91:bd:4d:7c:
ee:f4:1b:c6:27:e0:b1:70:09:9c:f2:cb:f2:27:ad:
5b:d2:9f:c9:78:56:90:49:70:a4:8a:02:a9:da:9d:
3c:64:3e:da:c5:60:02:55:4f:04:3c:75:71:8a:af:
df:12:57:de:53:37:8d:6f:f7:dd:0c:9a:b7:ee:ed:
38:36:3c:63:a5:24:de:f4:99:4c:48:15:3f:b6:42:
b8:99:1a:75:48:8e:9c:3a:b2:8d:6c:23:11:0f:a9:
f8:8e:e8:64:7e:8d:c8:4e:a8:92:f0:b9:15:5d:38:
65:45:b6:6c:f5:d7:6e:54:95:1d:13:8f:67:04:12:
ef:66:3b:c5:12:99:97:05:fc:63:8b:3d:1e:7e:12:
d2:e2:51:6d:75:9d:e5:b1:17:ec:0d:17:d5:d9:91:
04:70:fb:f9:3b:b9:b9:65:4f:6e:4c:10:1d:1a:66:
50:70:ea:34:e7:0a:f8:55:9b:70:96:b4:53:df:54:
f2:5d:2f:16:c4:db:77:1e:6b:18:49:ef:0e:d5:eb:
b7:47:0d:a4:1d:cc:48:86:c8:d5:55:a0:7b:45:da:
a5:73:2d:e8:f1:20:a2:50:67:6f:32:ad:b6:5c:91:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:72:A3:82:A3:6A:A6:48:61:F2:2E:9F:58:AD:F0:84:11:7A:FD
X509v3 Authority Key Identifier:
keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:77:f3:68:c0:3c:3f:c8:5b:94:fe:47:39:26:fb:c9:57:
56:2b:47:79:22:3f:9b:7f:90:98:77:be:ff:ca:a7:06:3b:fb:
3e:72:79:86:dd:c5:89:9f:cf:ad:0a:d2:8c:5b:47:61:54:74:
21:33:ff:38:b1:aa:ca:c9:a1:50:86:18:12:d1:62:b0:20:e0:
7c:49:2a:1b:b6:91:cc:50:f2:23:7e:51:5c:90:f2:a8:68:f9:
73:fc:f2:bd:44:fe:de:76:16:21:40:bd:bc:5d:7b:bf:63:ad:
cf:07:03:f0:02:90:2b:40:a3:dc:59:56:0d:56:ec:24:17:3e:
08:c7:d8:68:4b:a3:52:79:25:ea:32:89:f1:fb:2c:2e:cc:4c:
a2:e2:56:fe:ec:c4:76:98:53:01:72:20:a7:3b:f4:91:36:a8:
30:cf:ce:5d:e1:b0:14:67:95:0b:72:b4:01:4e:4c:70:67:b5:
65:fa:71:74:53:42:46:52:cc:e7:c5:f2:92:73:b2:3b:cb:bc:
eb:60:a6:0e:34:1e:10:59:7d:c6:d4:aa:85:64:3e:99:53:70:
5e:bd:0b:a0:7f:88:3e:f3:04:92:76:32:3f:c4:18:92:7c:6c:
dd:f8:8a:e8:ae:6f:33:6a:aa:46:05:3d:b2:2b:94:e6:75:9b:
a9:30:1d:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjUxMjIwMTcwNjMxWhcNMjUxMjI3MTcwNjMxWjAYMRYwFAYD
VQQDDA02OTQ2ZDc5OC04YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyth7d4Xds+gI2DYahnSmWoYOmrudtb7kG5G9TXzu9BvGJ+CxcAmc8svyJ61b
0p/JeFaQSXCkigKp2p08ZD7axWACVU8EPHVxiq/fElfeUzeNb/fdDJq37u04Njxj
pSTe9JlMSBU/tkK4mRp1SI6cOrKNbCMRD6n4juhkfo3ITqiS8LkVXThlRbZs9ddu
VJUdE49nBBLvZjvFEpmXBfxjiz0efhLS4lFtdZ3lsRfsDRfV2ZEEcPv5O7m5ZU9u
TBAdGmZQcOo05wr4VZtwlrRT31TyXS8WxNt3HmsYSe8O1eu3Rw2kHcxIhsjVVaB7
Rdqlcy3o8SCiUGdvMq22XJHmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELmcqOC
o2qmSGHyLp9YrfCEEXr9MB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2
b1MxOGhTdHZfR243QmdtSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuBHfzaMA8P8hblP5HOSb7yVdWK0d5Ij+bf5CYd77/yqcGO/s+cnmG
3cWJn8+tCtKMW0dhVHQhM/84sarKyaFQhhgS0WKwIOB8SSobtpHMUPIjflFckPKo
aPlz/PK9RP7edhYhQL28XXu/Y63PBwPwApArQKPcWVYNVuwkFz4Ix9hoS6NSeSXq
Monx+ywuzEyi4lb+7MR2mFMBciCnO/SRNqgwz85d4bAUZ5ULcrQBTkxwZ7Vl+nF0
U0JGUsznxfKSc7I7y7zrYKYONB4QWX3G1KqFZD6ZU3BevQugf4g+8wSSdjI/xBiS
fGzd+Irorm8zaqpGBT2yK5TmdZupMB3p
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:58:00 2025 by rpki-client