This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: gaZtsLSJz/ATao2XrtrLfiVeYMGXlil7J+Usr6sWZyY=
Subject key identifier: D7:FA:BB:65:97:45:AA:11:AF:89:23:78:72:1A:2A:2A:B0:73:24:06
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 14B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 1494
Signing time: Fri 26 Dec 2025 16:36:58 +0000
Manifest this update: Fri 26 Dec 2025 16:36:58 +0000
Manifest next update: Fri 02 Jan 2026 16:36:58 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: cdtdkDTQ6tbt5o2GtFMPj9nRI8JTyr9/saiCGg2NiuE=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 16:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5296 (0x14b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Dec 26 16:36:58 2025 GMT
Not After : Jan 2 16:36:58 2026 GMT
Subject: CN=694eb9aa-63c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:ee:4c:a4:f2:fd:1d:56:7a:fa:21:15:7a:
79:4a:6e:df:c0:cc:65:a5:31:2c:fa:c9:f0:6f:a9:
d7:6c:24:c8:46:38:3f:36:64:5f:65:1f:18:33:da:
2c:a7:87:85:41:fe:48:35:e5:a1:b1:5c:c1:21:3b:
5d:b0:a4:69:f6:54:d1:d9:e3:1a:06:79:9b:4e:0f:
85:f3:4e:0e:34:40:8c:58:df:53:9f:46:a6:31:45:
db:bc:eb:7d:95:c2:9a:1e:68:8f:6b:48:83:a6:b1:
f8:57:c1:ee:06:79:03:2b:21:17:92:2a:9a:83:b1:
97:d2:5f:d2:bb:74:66:ef:df:a7:b4:d7:dd:0d:dd:
de:31:45:ad:78:ac:8a:92:63:df:14:51:ac:a5:ae:
7b:34:a0:a6:03:f3:a4:13:00:ef:13:44:c4:7d:d9:
4d:7f:33:ec:da:db:50:1b:62:57:12:c6:af:96:01:
b3:c1:72:e7:e3:8d:92:ed:51:cd:0c:7d:4d:af:aa:
6c:09:06:9c:d5:e6:ff:42:95:17:eb:05:14:ca:0c:
d2:c1:43:96:3e:1a:af:9f:bd:03:66:92:b9:79:35:
db:08:9b:20:b2:d0:a7:18:b5:59:ce:ba:16:36:c8:
e7:2c:31:54:6f:9f:df:dc:e1:97:6e:9d:38:ee:40:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:BB:65:97:45:AA:11:AF:89:23:78:72:1A:2A:2A:B0:73:24:06
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:44:5b:9e:fb:5a:3b:59:05:48:a1:c6:c1:e3:b6:5f:4a:
50:55:6e:85:89:c2:2a:ef:da:bf:b5:0e:52:de:f4:88:d0:6f:
76:52:02:99:9c:ac:f8:7e:7c:89:f1:29:a9:eb:ae:97:71:6a:
d6:a4:49:a5:f7:b9:17:f8:3d:06:0a:39:22:ab:ed:2a:2e:1b:
27:d8:86:83:e9:bb:db:eb:1a:26:c9:29:08:5b:61:a7:fd:b3:
a9:e4:73:a8:ea:c8:d3:cf:3b:ba:12:ab:86:61:18:7c:66:97:
8e:da:9e:a2:1f:12:24:b2:d2:5b:7f:2d:b7:80:f9:fb:de:63:
4d:d2:51:d0:92:57:b6:26:46:d0:ec:6f:43:34:5b:02:03:a4:
3f:59:3c:05:d8:4c:77:eb:35:d6:82:3c:4c:ed:ab:e9:7c:74:
c0:d5:46:b6:ee:5d:8f:9e:3d:23:95:2b:e1:b1:a1:0e:c0:67:
a8:bd:29:9a:9d:73:4b:f9:13:7c:53:a9:ff:01:ff:39:81:f4:
4e:2f:ec:50:cb:6f:c4:3c:4b:69:60:14:bb:82:94:d6:b3:51:
a5:3b:b1:b1:47:34:4d:4b:34:2d:18:b2:e9:fd:17:d4:e3:63:
e1:ec:ac:26:c8:57:26:cb:8b:8b:6f:32:c3:c6:32:47:62:1b:
39:1d:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:47:27 2025 by rpki-client