This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier: 5bdWa8J8M1ajRM/Iqhont+LI7Y8Z+21MDGsQQj9UE7A=
Subject key identifier: 4A:74:93:89:C5:C8:01:F0:E2:DC:4E:60:27:6A:E8:A3:0E:06:23:68
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number: 60
Signing time: Fri 19 Dec 2025 06:08:21 +0000
Manifest this update: Fri 19 Dec 2025 06:08:21 +0000
Manifest next update: Fri 26 Dec 2025 06:08:21 +0000
Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: /+LKTdu4AGNDnTL5/ccrhfnWeFAA3b9uU4HXulvxXDA=)
2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: g234+BOrsFID00gHUsuGQ7ja/TZsYXQzY8A84ZILmbw=)
3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: SDWOzOls7ewbKsDsDovGzzc6zqRka52NsV9334kX+ts=)
4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: DDcpKf4cwajzPz7iOk0WiFF4+R4nRejRaM+Ry6/ubVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Validity
Not Before: Dec 19 06:08:21 2025 GMT
Not After : Dec 26 06:08:21 2025 GMT
Subject: CN=6944ebd5-ff31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:55:10:29:bb:97:03:2e:27:72:ca:6e:a5:
f4:a3:79:32:32:50:25:55:be:de:dd:40:d2:ba:a6:
76:b4:0d:95:65:03:5c:fa:0c:83:f4:05:88:4c:50:
5d:60:7f:c2:8d:f9:f5:84:d9:a1:d2:eb:e6:7a:8b:
8c:40:f8:06:8c:a6:bc:99:d6:4b:3a:18:80:b8:13:
b8:de:0d:80:56:22:a0:91:a4:56:1a:c9:b7:9d:81:
75:22:8d:ed:73:89:da:2c:fa:d7:21:17:91:41:d8:
b4:b2:19:95:66:af:48:2b:b1:4c:79:f1:d6:26:22:
b4:01:cc:7b:a5:f2:e5:e3:bc:18:a8:0d:0b:e1:ed:
7a:e6:4e:cd:0b:74:ba:f2:9d:95:d6:72:28:d7:f0:
c5:54:ef:b2:e1:29:a4:df:68:e4:ea:67:45:7d:90:
31:c5:9f:04:e8:b6:b9:d4:26:eb:29:bd:d2:c2:bf:
14:84:ce:c6:e6:a9:4b:3d:08:9b:3f:83:c1:f8:d7:
56:11:37:e1:03:eb:9c:82:5f:8b:2f:dd:3e:ed:c7:
52:a8:f8:5d:94:18:f1:4a:ff:4b:cd:5c:22:cc:82:
ff:8f:51:54:0b:10:bb:a9:dd:ba:36:28:fb:02:7b:
bb:af:3b:cb:be:79:a7:40:17:ff:00:e8:88:4c:df:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:93:89:C5:C8:01:F0:E2:DC:4E:60:27:6A:E8:A3:0E:06:23:68
X509v3 Authority Key Identifier:
keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f3:90:72:1d:67:ca:01:3c:8c:8f:50:4e:f4:a2:b2:60:ce:
eb:a1:28:03:12:4d:e0:95:cb:50:3a:e2:31:79:ba:6f:fb:99:
3d:72:00:14:78:97:45:b2:dd:62:44:6d:87:99:e5:40:87:39:
4e:dc:b2:ba:3e:d3:a3:4d:0c:71:23:0b:23:68:34:b5:07:0b:
c2:e7:b6:4c:9a:bb:f3:a4:49:ab:c2:b0:85:51:99:a8:31:c7:
47:45:d5:b7:a5:55:e0:53:8f:bb:fd:1f:04:c6:f9:db:6b:e2:
bb:95:96:df:d9:ee:e7:5f:ff:3e:4b:53:ed:04:56:5d:5e:ff:
1b:9b:49:44:92:d7:48:e8:c4:b1:56:ed:a5:a2:d0:bc:74:4e:
78:88:f9:df:26:a7:fa:d9:f4:a5:91:7a:70:e9:75:14:8d:50:
e7:8f:7a:2b:0e:14:03:27:dc:5a:46:15:8c:0d:91:a6:77:cf:
75:49:e7:f4:93:3f:f5:9f:ed:51:9b:75:18:60:75:38:3d:13:
41:82:3f:a6:7d:d6:8e:4d:99:8b:74:44:08:fd:1e:88:a1:9c:
05:fe:6e:f0:32:7b:f7:08:6e:f9:29:41:28:ef:e9:6a:bc:1c:
8e:5e:2d:33:59:ba:87:2b:8f:17:e4:ca:50:43:42:6b:ae:21:
24:40:d0:ef
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NkEwMTExMC8GA1UEBRMoQTA1RUMyNjZCM0MwQkZENkNFQjUxNzEwMEJFMDVDNTA1
Qjk0MzYyNDAeFw0yNTEyMTkwNjA4MjFaFw0yNTEyMjYwNjA4MjFaMBgxFjAUBgNV
BAMMDTY5NDRlYmQ1LWZmMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2ElUQKbuXAy4ncspupfSjeTIyUCVVvt7dQNK6pna0DZVlA1z6DIP0BYhMUF1g
f8KN+fWE2aHS6+Z6i4xA+AaMpryZ1ks6GIC4E7jeDYBWIqCRpFYaybedgXUije1z
idos+tchF5FB2LSyGZVmr0grsUx58dYmIrQBzHul8uXjvBioDQvh7XrmTs0LdLry
nZXWcijX8MVU77LhKaTfaOTqZ0V9kDHFnwTotrnUJuspvdLCvxSEzsbmqUs9CJs/
g8H411YRN+ED65yCX4sv3T7tx1Ko+F2UGPFK/0vNXCLMgv+PUVQLELup3bo2KPsC
e7uvO8u+eadAF/8A6IhM3+RNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSnSTicXI
AfDi3E5gJ2roow4GI2gwHwYDVR0jBBgwFoAUoF7CZrPAv9bOtRcQC+BcUFuUNiQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QTAxL0Y2NEQzQjI0NTdB
OTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5p
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb0Y3Q1pyUEF2OWJPdFJjUUMtQmNVRnVVTmlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2
QTAxL0Y2NEQzQjI0NTdBOTExRjA4RUU0MjYwOUM0RjlBRTAyL29GN0NaclBBdjli
T3RSY1FDLUJjVUZ1VU5pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAM7zkHIdZ8oBPIyPUE70orJgzuuhKAMSTeCVy1A64jF5um/7mT1yABR4
l0Wy3WJEbYeZ5UCHOU7csro+06NNDHEjCyNoNLUHC8Lntkyau/OkSavCsIVRmagx
x0dF1belVeBTj7v9HwTG+dtr4ruVlt/Z7udf/z5LU+0EVl1e/xubSUSS10joxLFW
7aWi0Lx0TniI+d8mp/rZ9KWRenDpdRSNUOePeisOFAMn3FpGFYwNkaZ3z3VJ5/ST
P/Wf7VGbdRhgdTg9E0GCP6Z91o5NmYt0RAj9HoihnAX+bvAye/cIbvkpQSjv6Wq8
HI5eLTNZuocrjxfkylBDQmuuISRA0O8=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:15 2025 by rpki-client