This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier: dPsF2pC0D5m+P8Hk7SbG+tmAFD7oNV+6VJKrpcEKp+g=
Subject key identifier: 18:38:C7:C2:50:2D:39:D3:CD:2D:02:56:E0:F0:71:21:FA:7D:4D:D7
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number: 94
Signing time: Fri 19 Dec 2025 05:34:21 +0000
Manifest this update: Fri 19 Dec 2025 05:34:21 +0000
Manifest next update: Fri 26 Dec 2025 05:34:21 +0000
Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: EBMcSybozLxAQIGdm4LrKQv1l/E+01kQFvjj894i+Yk=)
2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=)
3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=)
4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Validity
Not Before: Dec 19 05:34:21 2025 GMT
Not After : Dec 26 05:34:21 2025 GMT
Subject: CN=6944e3dd-3136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:5f:47:9b:f6:6b:89:b7:8f:93:82:18:00:
e1:a3:37:af:72:26:7b:e4:10:28:08:e4:ed:ce:07:
79:72:a6:c1:6f:27:50:68:63:8d:1b:55:f9:e1:19:
d4:46:1c:2a:69:f5:e7:5c:65:f2:30:9a:69:af:fd:
e3:4d:82:41:e4:c4:42:12:0f:30:19:f3:5a:5f:81:
de:ce:1a:77:e2:54:c5:54:82:a2:ec:c3:99:5b:09:
28:cc:d6:ff:81:44:ba:31:f6:c4:77:80:b3:83:82:
78:8c:9a:01:a4:a4:2e:db:35:94:31:f9:13:2f:f9:
3d:42:3e:ab:05:a6:2e:4b:ce:47:b7:25:14:c5:06:
25:16:c9:75:7e:ff:2e:94:a1:7a:8a:9d:e7:89:64:
2a:c5:17:a3:7e:6b:cb:af:f7:d3:5d:8b:e2:a0:49:
8d:60:00:a0:b6:a1:a0:a5:e9:07:f0:2a:91:31:e1:
c2:99:68:b3:5f:5a:82:d2:c5:a5:8b:36:fa:93:80:
05:3f:13:7b:24:a0:3e:b2:c0:71:c1:f7:67:f5:ff:
a1:69:19:0f:b6:fa:bd:f3:c2:d8:2d:7f:25:38:0f:
6a:a7:e0:0a:21:68:a1:58:5c:d7:b9:9f:55:88:38:
64:9a:9c:6d:0c:62:30:51:bd:2d:eb:d6:34:9c:17:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:C7:C2:50:2D:39:D3:CD:2D:02:56:E0:F0:71:21:FA:7D:4D:D7
X509v3 Authority Key Identifier:
keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7f:a9:8b:ff:c9:7a:fd:9d:31:19:06:2d:d2:65:75:88:fd:
4e:bc:61:4b:86:41:c3:6d:70:45:cd:04:72:37:39:12:27:8e:
f7:ca:79:6d:b2:0e:73:a4:ab:54:a8:20:48:6a:d0:9c:6e:41:
c6:ee:37:bf:8d:ed:76:fe:66:f5:bc:1d:57:f5:8c:64:8d:13:
2e:01:b0:9e:46:9c:91:93:18:48:c1:c1:56:42:d3:28:81:0a:
10:3d:1c:6d:17:e7:71:55:17:6a:2a:16:1e:2d:f3:0f:c3:7d:
41:a3:b7:dc:df:5b:4c:3d:61:ef:3d:16:44:88:2e:c8:8d:56:
51:f0:43:25:e5:04:be:a0:9e:6f:46:40:d1:d9:a8:0d:0d:eb:
0d:93:00:3d:5b:70:41:a5:95:1b:9f:77:cb:a7:ee:95:b5:9c:
4a:9c:cf:6c:51:8d:3b:bf:1e:9e:c5:8d:c5:fc:e3:6c:f9:ba:
49:b2:7d:38:72:62:c0:69:94:24:bb:42:58:9f:32:b4:02:86:
16:12:99:69:ec:13:b7:09:df:33:5c:00:6e:64:38:08:b3:68:
e2:14:47:eb:b3:80:07:53:18:47:75:ce:78:71:6a:75:a1:ec:
0c:34:86:f3:07:a3:bb:54:a5:05:1d:cf:0d:fb:5b:2b:8b:26:
c2:88:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:13:06 2025 by rpki-client