This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json)
Hash identifier: OoEdT5cnkqRXOxWIs1RGNCMrWY1xWgsbsD3viOri/Wo=
Subject key identifier: AC:A7:9E:A4:E1:DA:3E:A7:76:6A:F0:9C:22:04:1A:3B:18:EB:68:D7
Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
Manifest number: 053D
Signing time: Thu 18 Dec 2025 23:42:46 +0000
Manifest this update: Thu 18 Dec 2025 23:42:46 +0000
Manifest next update: Thu 25 Dec 2025 23:42:46 +0000
Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: 6XDp2fYugzIWLX9TazDI9Gww142xXdjQTIqZnPb2ZpY=)
2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Validity
Not Before: Dec 18 23:42:46 2025 GMT
Not After : Dec 25 23:42:46 2025 GMT
Subject: CN=69449176-de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:d4:fe:ab:72:05:5d:97:77:4c:90:a8:96:
56:ba:bc:50:6e:54:f4:e7:cc:6e:82:fd:ad:d1:65:
f6:1a:87:69:bd:21:91:12:1b:a7:19:1e:25:87:71:
3a:35:e0:c4:ac:6d:4c:e9:c1:d1:bd:ae:2b:64:e2:
9b:4b:9b:d2:07:16:d2:9e:65:59:78:a6:21:e0:c4:
b6:f7:2d:1f:06:e8:f0:6c:d8:53:f0:f3:ce:9d:5d:
80:cf:7c:76:ef:94:dd:ee:b4:8f:ac:cf:b4:a9:68:
17:f4:e9:df:49:00:41:f4:db:a7:42:20:4b:93:10:
93:7c:00:9c:e4:ac:8f:25:29:af:fe:44:7a:9b:98:
82:7f:15:88:b1:c2:74:67:6a:b1:2b:7e:cd:5f:9d:
0b:79:3b:8f:38:90:77:12:fe:36:b2:eb:e9:c1:21:
15:2b:e2:8c:08:ac:5f:9d:ec:cd:08:77:cf:c0:d2:
35:ed:ce:0f:97:b1:92:dc:df:f9:47:92:e9:62:5c:
32:87:6b:c0:a4:01:9a:97:55:8c:b7:87:f3:00:f0:
7c:e4:95:fb:70:38:e7:db:c4:e8:cc:7a:94:84:37:
c5:67:ea:0a:42:c2:49:8a:56:fa:e9:84:a2:80:96:
4d:c2:8a:d4:01:74:e9:a3:0c:cd:11:2a:31:80:bc:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:9E:A4:E1:DA:3E:A7:76:6A:F0:9C:22:04:1A:3B:18:EB:68:D7
X509v3 Authority Key Identifier:
keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:70:e8:b8:a4:d0:c2:a3:3d:11:6b:e2:19:37:38:1e:56:
2a:11:ac:f8:c8:8d:d1:d1:b0:c4:f8:31:d7:10:fb:d5:18:68:
27:ec:6e:fd:5f:e3:d3:8e:cf:a6:5e:76:39:21:7b:58:b3:ab:
68:cd:40:fd:60:1a:dc:74:bb:90:a3:f0:36:52:ef:69:00:3d:
44:72:64:0e:2a:43:ba:26:8c:e2:db:9b:4a:f8:28:a2:c5:8c:
9a:e6:dd:61:52:21:81:10:a4:eb:da:08:e5:f9:f5:d8:df:f4:
00:88:54:91:72:26:3d:06:f3:d1:bc:f6:b2:03:8b:55:d9:09:
04:40:cb:8d:91:31:13:ef:e4:fd:8a:71:0f:bf:eb:13:6b:ee:
0b:4d:ba:92:41:a3:06:05:f2:63:5f:ab:e8:b4:5c:19:0f:0e:
77:11:90:03:03:ad:0b:2b:9d:72:7f:4f:7e:c1:84:61:15:ab:
83:a3:83:be:81:a5:1c:b6:03:2c:ee:ea:9a:06:49:0f:97:65:
f8:53:89:b3:99:2b:1b:26:39:8b:6b:1a:44:2d:fa:48:22:64:
31:9c:f4:83:ec:9a:0b:50:34:68:e7:2d:8c:33:22:30:9e:fa:
3f:8e:d4:c1:e7:3e:09:de:7f:52:61:fb:c9:53:bd:1f:5d:0d:
5f:39:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:14:29 2025 by rpki-client