This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: 0zaBJ4MA1ECiYEb/ntSDVWaeOburKVsuZGssaX0Wkvo=
Subject key identifier: 72:76:79:56:A1:C4:18:07:FB:44:4E:26:C0:EF:5C:EA:A1:E3:12:83
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 03E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 03B2
Signing time: Fri 19 Dec 2025 00:05:17 +0000
Manifest this update: Fri 19 Dec 2025 00:05:17 +0000
Manifest next update: Fri 26 Dec 2025 00:05:17 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: vfy31iB1R/6HZpBI05IeG7yA4iopuUQDL0mBz90Ru54=)
2: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
3: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
4: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
5: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Dec 19 00:05:17 2025 GMT
Not After : Dec 26 00:05:17 2025 GMT
Subject: CN=694496bd-7cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:85:b6:c2:ad:01:ec:eb:96:98:19:ee:2e:
ec:b4:be:27:fb:7b:6b:e7:96:29:f7:56:bb:4b:e0:
05:50:60:8d:74:22:09:f6:7d:59:f5:29:e9:27:70:
07:0d:eb:fb:55:32:ef:da:0f:37:5f:48:e0:33:3d:
45:c1:fa:35:62:0c:90:d8:99:e3:bc:5e:ea:4a:3a:
e4:e3:d4:b1:d2:b9:0b:db:74:28:6f:d2:09:d6:be:
97:10:b4:26:49:ba:39:d4:d0:5c:d8:f0:e8:89:35:
6a:5c:f7:4c:1e:fb:cc:31:0c:86:21:3a:a2:5d:b6:
15:9e:d2:29:7f:cc:3d:fd:8d:ef:fc:a9:07:32:09:
4f:ea:aa:f2:dc:09:ce:85:81:14:3b:0d:de:40:2a:
24:29:bb:e9:57:7e:bd:e9:66:c8:c1:b2:d9:5a:42:
85:52:9f:7a:ba:fb:4b:11:b5:a0:53:54:2a:31:74:
4e:8a:4c:67:4e:20:34:c5:4e:16:a4:07:54:4f:8b:
2b:73:8d:fa:8b:f1:ac:49:0c:81:3f:8c:7b:2e:26:
ec:00:62:10:0b:95:f0:d4:f2:ed:85:db:fc:7c:fe:
df:10:a8:34:5a:e2:2e:0c:57:91:2a:3d:c3:f2:e2:
5b:b1:db:cb:79:a0:7d:5d:e0:50:80:47:72:f2:83:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:79:56:A1:C4:18:07:FB:44:4E:26:C0:EF:5C:EA:A1:E3:12:83
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d3:16:17:50:74:d5:c1:5b:a9:14:73:bd:94:1c:90:ab:d0:
bc:2d:3c:77:9f:a8:c2:64:41:b2:ac:0d:52:00:b2:43:79:ad:
dd:62:e7:56:2d:5a:8f:0f:fe:39:01:90:2c:4e:09:c9:d3:21:
c2:b9:6e:0e:a4:2f:38:49:fd:88:32:38:2c:d8:10:5c:2e:a0:
90:3c:e6:34:aa:8c:3f:aa:32:2a:d7:21:39:ee:02:24:e8:8c:
b1:35:6c:15:57:4e:3c:c4:6a:32:99:ad:d4:d1:80:31:8d:91:
bc:5b:48:24:c5:85:49:92:24:e2:4f:10:da:34:16:a3:de:9c:
13:10:a1:29:24:21:6b:91:a8:f8:bc:2a:3b:8b:b9:70:78:b8:
04:3d:d9:b2:fa:7b:99:d8:fa:24:9b:a6:22:b2:9c:8c:df:b7:
c1:b6:4e:80:e8:b6:16:81:d9:d0:87:31:7a:4d:31:a2:e0:77:
a3:2c:fd:8a:64:bb:aa:a7:84:7e:ad:89:60:76:c4:20:cb:a0:
70:37:fe:58:58:62:a7:7f:31:36:42:96:bd:41:c5:c1:dc:2b:
3f:8e:00:f4:a3:7d:a3:fd:5a:01:8f:2f:75:3f:98:ca:8c:54:
2b:d0:ca:a0:ca:1c:0e:cc:4c:ce:39:04:58:d2:6a:27:f7:60:
ac:3d:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:04 2025 by rpki-client