This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File: bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier: jJ/galB4RtvfW2+8rYZcbmCPo2eJEhEKuS1PGd2CKpY=
Subject key identifier: FC:43:19:0D:AB:02:B4:AA:0F:C2:0D:7F:D9:64:4F:91:60:AC:86:41
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial: 0591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number: 0587
Signing time: Thu 18 Dec 2025 22:39:23 +0000
Manifest this update: Thu 18 Dec 2025 22:39:23 +0000
Manifest next update: Thu 25 Dec 2025 22:39:23 +0000
Files and hashes: 1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: V5YnXZUUJr63U3W5ejfy51rQu7R2iSa5f4ZpjwW+7PY=)
2: 4D336D62B53F11F09557A379C4F9AE02.roa (hash: vE9V/Y5qS78Xgv5y/9F43RWt3eLux4Isa2PTEon+j2k=)
3: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: 1vf9P/QtdrpBSKw8qqd8SeCC6jjDqgo10TfCx7FVFT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Validity
Not Before: Dec 18 22:39:23 2025 GMT
Not After : Dec 25 22:39:23 2025 GMT
Subject: CN=6944829b-4863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:eb:68:8a:93:bc:ed:c4:c9:dd:7d:6b:44:
19:dc:99:28:49:55:28:ca:fb:9a:24:fd:eb:a9:c5:
cd:7a:fe:a6:2f:98:fc:30:10:91:e4:a0:9e:81:a5:
ea:ff:ac:f3:46:46:06:3b:a1:22:52:a8:42:a7:e5:
ad:7e:00:07:4f:76:c5:8e:3e:1c:7b:36:17:8b:53:
94:51:6e:70:e7:2b:2d:6f:e3:ba:e4:5a:79:3a:c4:
0b:b5:be:2d:1b:ea:1f:10:7c:f4:68:c8:d5:5e:74:
c5:87:8d:d1:d8:44:f2:15:12:12:c9:28:6d:15:03:
69:d1:31:16:d5:48:be:46:1a:2b:bf:25:0e:15:35:
41:46:97:e3:16:60:b7:c2:3a:32:c4:60:ea:0a:10:
ad:56:bb:71:6b:b6:95:1f:ba:f0:54:fd:9e:c0:45:
28:5e:16:11:85:b9:d3:38:8e:65:e3:3b:8d:cf:27:
72:ce:a0:e3:8a:c4:4b:4c:b0:a3:3d:68:80:1a:ff:
72:fa:29:cd:36:27:44:90:3d:78:bf:fc:ba:72:27:
a1:58:54:3e:8a:ef:ee:50:81:16:87:00:3d:fa:c7:
b7:9c:0b:29:d9:1d:bf:8b:85:1e:31:ed:39:c9:c8:
5a:c5:fb:01:76:39:b3:58:b3:04:87:69:6b:d0:e1:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:19:0D:AB:02:B4:AA:0F:C2:0D:7F:D9:64:4F:91:60:AC:86:41
X509v3 Authority Key Identifier:
keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:76:72:0c:06:d3:99:29:44:fa:80:8c:1c:05:8b:23:6a:
e1:e6:7a:f9:80:28:b2:bd:be:bb:cf:7c:63:66:91:86:20:ab:
91:64:59:71:9c:66:78:35:2b:9d:a7:e1:13:99:b8:3b:c7:77:
b1:36:25:34:08:28:55:44:0a:75:22:6c:d9:31:15:dc:1c:b7:
12:7b:51:84:72:39:5c:39:e5:04:2d:0a:be:13:59:e3:82:33:
b1:cb:30:28:b2:3e:d5:1b:96:b0:ee:0d:f9:fb:3c:a6:46:c1:
b1:36:a7:52:7a:28:00:c7:09:06:3e:54:12:52:08:3e:77:b2:
25:f7:48:c0:a9:3e:e7:a5:18:59:dc:62:fd:51:07:bc:68:73:
44:63:e7:8d:03:60:5c:aa:4a:1f:4a:aa:68:e5:7b:1b:e7:ba:
d9:04:bd:1e:ae:83:d1:19:68:e9:34:52:cc:6a:cb:ef:4d:dd:
41:03:23:e0:a8:9b:e9:b6:b5:f9:51:18:8c:55:da:35:c5:bf:
4f:34:35:7a:20:35:5a:cb:fb:2e:0a:93:1e:df:38:2a:23:d3:
9b:89:7f:31:80:82:f6:ee:60:59:c8:2b:a2:8f:d0:1e:c4:36:
b3:db:e0:e0:46:c2:d4:67:be:04:c5:4a:af:c6:ba:6d:c7:26:
80:78:1c:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1MTkzOTgzMEY3
Q0QxQzgyNkIwHhcNMjUxMjE4MjIzOTIzWhcNMjUxMjI1MjIzOTIzWjAYMRYwFAYD
VQQDDA02OTQ0ODI5Yi00ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7AXraIqTvO3Eyd19a0QZ3JkoSVUoyvuaJP3rqcXNev6mL5j8MBCR5KCegaXq
/6zzRkYGO6EiUqhCp+WtfgAHT3bFjj4cezYXi1OUUW5w5ystb+O65Fp5OsQLtb4t
G+ofEHz0aMjVXnTFh43R2ETyFRISyShtFQNp0TEW1Ui+RhorvyUOFTVBRpfjFmC3
wjoyxGDqChCtVrtxa7aVH7rwVP2ewEUoXhYRhbnTOI5l4zuNzydyzqDjisRLTLCj
PWiAGv9y+inNNidEkD14v/y6ciehWFQ+iu/uUIEWhwA9+se3nAsp2R2/i4UeMe05
ychaxfsBdjmzWLMEh2lr0OHjUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxDGQ2r
ArSqD8INf9lkT5FgrIZBMB8GA1UdIwQYMBaAFGzDhg2ph3g6UAVaUZOYMPfNHIJr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9ERDZCNzUyODA2
MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVEcFFCVnBSazVndzk4MGNn
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JNT0dEYW1IZURwUUJWcFJrNWd3OTgwY2dtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFtSGVE
cFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABg3ZyDAbTmSlE+oCMHAWLI2rh5nr5gCiyvb67z3xjZpGGIKuRZFlx
nGZ4NSudp+ETmbg7x3exNiU0CChVRAp1ImzZMRXcHLcSe1GEcjlcOeUELQq+E1nj
gjOxyzAosj7VG5aw7g35+zymRsGxNqdSeigAxwkGPlQSUgg+d7Il90jAqT7npRhZ
3GL9UQe8aHNEY+eNA2BcqkofSqpo5Xsb57rZBL0eroPRGWjpNFLMasvvTd1BAyPg
qJvptrX5URiMVdo1xb9PNDV6IDVay/suCpMe3zgqI9ObiX8xgIL27mBZyCuij9Ae
xDaz2+DgRsLUZ74ExUqvxrptxyaAeBws
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:47 2025 by rpki-client