This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier: jorxS8I4eC+q6l6oRh6d+oKCoJWfqHn0XZEYQJ2fOBQ=
Subject key identifier: 5C:A6:AD:AD:38:CB:D0:ED:C1:61:AA:CC:19:96:6D:51:6D:30:BF:BD
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 3523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number: 350C
Signing time: Thu 18 Dec 2025 14:29:28 +0000
Manifest this update: Thu 18 Dec 2025 14:29:28 +0000
Manifest next update: Thu 25 Dec 2025 14:29:28 +0000
Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: VaUEIdYsya52+r7VZVbPljx+AwJJ5rSbR/kKhycLSj4=)
2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: 5EP6Oh1DhTra+7YRBW3gJiagK7+ieas44GHGTmH8lmw=)
3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: +zivxHqwMOkGSscAdHd++lg164OtYFNCzxhSNcI5zb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13603 (0x3523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: Dec 18 14:29:28 2025 GMT
Not After : Dec 25 14:29:28 2025 GMT
Subject: CN=69440fc8-31e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:f8:6d:05:50:99:e8:e1:ed:35:9b:ae:c2:
a0:79:4a:df:ea:57:f8:62:99:ad:80:64:71:93:7c:
b9:cb:d6:0d:72:18:06:5a:51:1a:c2:83:51:33:22:
e5:72:d3:c1:c9:8a:22:0b:6d:44:34:1b:d2:ef:72:
69:4c:0f:c8:42:7b:07:46:2c:13:5b:39:3e:bc:5c:
51:5d:4a:f9:26:a3:a1:0d:e8:b9:ee:cb:d5:85:78:
28:27:c4:e6:12:07:a9:ef:2d:7e:2b:a3:14:74:00:
72:50:ef:55:bf:b6:e5:d8:5e:b9:f0:d6:5a:95:c6:
6e:ca:2a:c4:63:b8:0d:2a:68:4a:9e:f2:e5:a7:bd:
0f:1c:cf:ee:16:cd:df:b5:62:4d:91:01:be:aa:e8:
67:54:92:43:98:9c:38:42:e8:5d:5e:a8:70:72:ae:
d7:1e:c9:58:b7:1d:7f:69:d5:d7:0b:3f:42:04:5e:
6d:40:af:5b:69:cb:80:f0:8e:92:47:79:7a:71:57:
b4:f8:86:bc:f6:d6:4b:da:7e:92:26:85:8b:c9:01:
30:1c:a1:3f:7b:66:12:c5:e1:c6:d0:a6:ee:28:ba:
8b:02:a5:bf:d3:bd:77:42:91:44:9e:da:7c:2f:0b:
d9:71:85:64:5e:b7:6b:31:61:8b:ea:12:97:e2:75:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:AD:AD:38:CB:D0:ED:C1:61:AA:CC:19:96:6D:51:6D:30:BF:BD
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:ba:7d:07:44:25:84:43:86:7c:a5:2b:4b:13:7e:56:40:
d5:3d:08:75:02:2e:a3:cf:e4:53:5a:09:76:36:1a:5a:c8:13:
a9:c0:39:e4:be:b6:d4:a3:82:03:5a:df:45:54:8a:1d:98:a7:
c1:19:23:9c:8b:12:c6:83:cb:d5:f2:32:59:73:dd:4e:ab:60:
d4:29:a3:e3:e0:cc:e3:9a:12:cc:9d:5a:15:28:d8:c1:e4:75:
70:99:6b:db:9e:4f:fd:c4:66:a7:2a:80:7f:c9:c8:60:84:91:
dd:79:3d:65:d4:8e:bd:45:20:e8:be:2c:4f:28:ee:07:de:0a:
16:69:d0:67:a7:45:ef:6f:57:a7:a1:55:ec:01:51:b6:ce:5b:
8b:fb:04:ba:8a:ad:20:5c:b5:4c:5c:f0:8a:98:79:86:ac:3e:
ac:06:07:6c:df:58:92:cb:f4:5a:fa:70:0d:ca:87:c1:18:2b:
19:b3:8e:9b:6e:8e:ea:b1:df:54:57:c6:c0:4d:60:40:0e:1e:
b8:10:af:48:a4:0f:56:27:b7:fa:25:19:01:38:ae:ea:77:01:
fd:87:3d:af:95:59:c4:5b:39:ca:61:d8:f4:70:92:8d:a5:9b:
09:21:6d:0a:0f:3e:3c:56:1d:e9:89:66:97:a8:27:f8:76:d0:
3c:36:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:14:33 2025 by rpki-client