This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json)
Hash identifier: ttPiiNBd8asD8MMORiMHX8pVoyC58Jnw5rMxx+lH7cs=
Subject key identifier: 30:BE:72:9C:BD:A6:DA:38:0F:0D:67:DF:21:B0:9A:1F:93:6D:98:9E
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
Manifest number: 0615
Signing time: Thu 18 Dec 2025 22:13:40 +0000
Manifest this update: Thu 18 Dec 2025 22:13:39 +0000
Manifest next update: Thu 25 Dec 2025 22:13:39 +0000
Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: hWTbg6NhdeRuGBCySCTwrxTX1sllnXI4i9EPNEidH7Q=)
2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=)
3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=)
4: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=)
5: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=)
6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Validity
Not Before: Dec 18 22:13:39 2025 GMT
Not After : Dec 25 22:13:39 2025 GMT
Subject: CN=69447c94-9416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:42:57:e0:48:d2:ef:0b:e8:e9:cb:03:b9:
98:44:f8:0e:5b:98:ff:88:2c:a6:1d:24:d4:41:dd:
aa:71:6e:13:56:1a:3a:23:21:08:78:7a:c3:29:79:
ee:f2:6d:46:3f:16:19:02:76:55:a7:74:cb:38:9b:
ef:f0:63:9b:1a:00:ab:0f:2e:e6:93:6e:0b:ca:b5:
bc:35:27:71:6e:35:f6:21:99:40:83:ed:de:1e:89:
f1:db:19:2e:a4:cb:9f:8e:63:13:d4:c6:a4:d7:dd:
6a:fb:8d:e5:33:bb:bf:d6:db:be:65:be:52:ef:f6:
3d:e0:ec:b5:78:84:eb:14:79:78:c5:9a:c6:ff:67:
2e:50:ca:7f:4e:54:48:cf:82:e5:5c:88:d4:16:63:
6a:63:9e:e2:a5:d1:d9:0a:60:c2:7b:5c:98:e2:ba:
93:cb:b4:89:0d:ce:a5:ab:76:36:dd:bd:99:7d:37:
6f:2c:99:26:02:ed:a3:fd:ef:33:af:71:52:4c:2c:
ef:8e:7d:bd:d1:1b:82:e4:30:07:0d:2f:de:d8:c7:
ad:7d:7f:83:ce:dc:a0:0d:82:a6:21:5e:09:a6:d2:
67:22:21:16:6b:ba:b0:52:06:b8:7e:75:de:f8:8b:
23:3d:98:aa:fd:a8:3b:34:13:cf:27:6b:5c:4a:1c:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:72:9C:BD:A6:DA:38:0F:0D:67:DF:21:B0:9A:1F:93:6D:98:9E
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:db:7f:15:35:0a:fc:43:93:d8:4e:53:3c:aa:ba:11:7e:82:
61:55:cf:16:ef:e1:28:f1:1d:70:39:b6:18:3e:93:58:22:55:
bc:30:fc:f7:d0:ab:94:0c:ac:a5:20:5b:8d:fb:92:f9:1f:e1:
a8:bf:e2:d0:cb:fb:20:e2:35:61:fa:ec:6b:d3:75:36:49:40:
3e:be:02:29:f4:00:34:67:df:c9:77:5c:21:a2:e0:2f:3e:5a:
40:d3:89:26:40:fa:e7:9c:95:79:6b:c9:ef:c9:30:74:3a:18:
2c:4c:b1:b3:cd:2f:5c:98:ea:65:f1:fd:fa:56:52:44:6a:3f:
58:aa:31:d2:cd:76:1f:67:5c:c8:d4:73:eb:54:48:94:e7:b2:
9d:43:4c:a5:17:ff:57:9f:52:00:49:83:26:32:89:42:0b:e2:
e1:f9:07:7a:df:d9:4b:f2:47:56:5a:53:d7:9a:31:fb:a4:a6:
28:0f:39:78:60:fa:2e:46:c1:d1:94:e7:6e:81:44:38:8f:34:
f3:ce:9a:c4:82:b7:d4:57:89:93:06:e0:40:3a:9c:49:76:0a:
ee:45:54:ac:6b:0f:eb:3e:84:91:59:67:82:46:e9:f8:1a:bc:
8b:e8:c6:52:ec:a5:26:5b:53:f3:9a:ec:c4:72:0b:d0:ce:bc:
ca:8b:77:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC
RTFFRjY4N0IwHhcNMjUxMjE4MjIxMzM5WhcNMjUxMjI1MjIxMzM5WjAYMRYwFAYD
VQQDDA02OTQ0N2M5NC05NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjtJCV+BI0u8L6OnLA7mYRPgOW5j/iCymHSTUQd2qcW4TVho6IyEIeHrDKXnu
8m1GPxYZAnZVp3TLOJvv8GObGgCrDy7mk24LyrW8NSdxbjX2IZlAg+3eHonx2xku
pMufjmMT1Mak191q+43lM7u/1tu+Zb5S7/Y94Oy1eITrFHl4xZrG/2cuUMp/TlRI
z4LlXIjUFmNqY57ipdHZCmDCe1yY4rqTy7SJDc6lq3Y23b2ZfTdvLJkmAu2j/e8z
r3FSTCzvjn290RuC5DAHDS/e2MetfX+DztygDYKmIV4JptJnIiEWa7qwUga4fnXe
+IsjPZiq/ag7NBPPJ2tcShzZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC+cpy9
pto4Dw1n3yGwmh+TbZieMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC
NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh
SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0
UHduY1hTOS05UHEtSHZhSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCt238VNQr8Q5PYTlM8qroRfoJhVc8W7+Eo8R1wObYYPpNYIlW8MPz3
0KuUDKylIFuN+5L5H+Gov+LQy/sg4jVh+uxr03U2SUA+vgIp9AA0Z9/Jd1whouAv
PlpA04kmQPrnnJV5a8nvyTB0OhgsTLGzzS9cmOpl8f36VlJEaj9YqjHSzXYfZ1zI
1HPrVEiU57KdQ0ylF/9Xn1IASYMmMolCC+Lh+Qd639lL8kdWWlPXmjH7pKYoDzl4
YPouRsHRlOdugUQ4jzTzzprEgrfUV4mTBuBAOpxJdgruRVSsaw/rPoSRWWeCRun4
GryL6MZS7KUmW1PzmuzEcgvQzrzKi3eM
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:28:31 2025 by rpki-client