This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier: hUFArIwL7idPczQl1c6oPDj0qrgkurPnLOM9SHlHe5U=
Subject key identifier: 49:30:B1:2C:47:5E:51:26:CC:EA:05:B2:DC:99:11:11:75:73:AF:BF
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial: 1AF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number: 1AB7
Signing time: Thu 18 Dec 2025 16:13:07 +0000
Manifest this update: Thu 18 Dec 2025 16:13:06 +0000
Manifest next update: Thu 25 Dec 2025 16:13:06 +0000
Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: 1OL98N/rf/GDuKU8P3/QCFBRg9AB2YYyGQ+4GMVaYwA=)
2: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: dKPGvO7USSf0Gvl/Kq6maRursYdlv2phLnH5EYaGXWM=)
3: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: mlfmqDTHF8r4WiB66Nr0P3hrVzV24v6mqRzRLKrnHpE=)
4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6896 (0x1af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Validity
Not Before: Dec 18 16:13:06 2025 GMT
Not After : Dec 25 16:13:06 2025 GMT
Subject: CN=69442813-120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:03:4f:cc:f7:11:68:62:69:0a:a9:0a:51:
63:59:0c:d9:4b:98:df:4d:2b:61:ab:f4:79:7a:06:
de:cf:ca:ae:9b:d2:6f:c6:ce:89:7e:30:f4:fb:a2:
50:fe:fa:9d:22:bd:82:c3:2f:79:56:34:72:74:bd:
5d:1f:a8:66:35:33:4d:e6:07:a0:99:82:7d:49:86:
b1:e6:9d:fd:cc:97:a7:89:a4:4e:06:4d:52:33:35:
32:4f:a9:92:d7:8a:fd:03:b1:c7:51:89:85:99:3a:
10:b6:72:d8:68:56:18:bc:75:49:21:6e:b5:e9:8c:
35:54:cc:0e:f4:ec:12:83:13:ba:b6:d0:7e:6a:a3:
a8:89:8f:a8:90:94:21:24:01:3f:7c:ec:fd:09:c7:
39:21:3d:4a:eb:ed:02:73:18:c0:02:76:9f:cd:43:
73:b9:db:ba:2a:01:55:45:87:6f:af:79:25:38:be:
ee:10:9b:37:57:13:68:40:a0:ff:e6:27:cd:b0:cb:
c4:2c:42:7d:e0:b7:1e:c2:07:33:26:fd:1a:9c:0e:
2e:16:fc:63:1e:be:b2:16:c0:79:47:e4:05:ea:df:
f3:e0:0a:31:db:9f:15:de:ea:2e:a3:9d:80:60:19:
82:39:03:3a:8c:87:85:a3:ac:a1:b4:c6:e3:d6:da:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:B1:2C:47:5E:51:26:CC:EA:05:B2:DC:99:11:11:75:73:AF:BF
X509v3 Authority Key Identifier:
keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0a:2f:ad:74:9f:65:82:bd:82:f6:b3:b0:2b:f6:a6:49:b3:
b1:bd:8a:f1:6c:7a:57:f4:0f:c0:eb:0f:1f:eb:8b:fc:86:78:
c7:90:2a:aa:c2:27:78:16:1d:98:ee:14:83:1e:8f:0f:d5:6b:
1a:39:24:49:1d:4c:fd:97:48:2b:58:f5:95:6a:02:30:3f:44:
3b:cb:d9:08:73:3c:57:4f:9c:c5:d8:c3:39:bf:f6:2b:8a:d4:
c2:80:c1:1f:f6:1d:f2:d6:87:fb:69:78:90:80:66:f5:07:7e:
08:08:92:5b:a8:f1:78:6b:e2:07:c6:49:6e:b3:28:ba:36:31:
05:79:fc:90:83:ac:b0:92:7c:c2:8c:4b:5a:98:ce:41:45:4d:
63:4e:2f:43:ab:39:86:d5:7f:59:e6:f2:a4:6e:fb:7e:21:b0:
33:04:da:78:4a:02:02:63:b8:15:9d:26:9a:cc:a8:24:d6:27:
95:2a:88:a0:aa:8c:51:50:4a:db:88:7b:73:e8:e5:a5:33:ec:
7d:e8:a2:82:dd:bd:8b:19:b2:90:80:b0:3d:76:8e:2c:b7:9a:
42:d6:e3:48:03:51:3f:9b:fa:8b:99:27:8f:02:71:81:a0:4f:
2a:8d:3a:a3:bf:4c:f4:0d:56:53:2c:a4:69:93:46:6f:b9:01:
26:9b:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:51 2025 by rpki-client