This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier: Ml5mCh366obYN8TZksPrO0gSnt0Zc6cLK0jzOzie4Nk=
Subject key identifier: 06:10:4A:D2:97:61:DC:00:1A:57:70:22:FC:F9:14:87:28:86:18:2B
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number: 0154
Signing time: Fri 19 Dec 2025 03:18:33 +0000
Manifest this update: Fri 19 Dec 2025 03:18:33 +0000
Manifest next update: Fri 26 Dec 2025 03:18:33 +0000
Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: dmpTTkI5OUKodekgeXy2EVVz1SqqbpXPj+j9/e+oS6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Validity
Not Before: Dec 19 03:18:33 2025 GMT
Not After : Dec 26 03:18:33 2025 GMT
Subject: CN=6944c409-481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:0a:4d:3f:87:aa:2d:92:4b:cf:70:7e:21:
7e:a5:04:df:77:e1:17:06:db:d7:af:ee:ab:f9:a2:
ad:2c:ad:a3:6e:ec:64:e9:29:7d:54:f1:5b:00:c9:
d3:07:ac:32:07:a2:47:12:dc:90:2e:26:ae:92:c5:
e4:8a:0b:64:5e:fb:0e:38:1e:29:4f:38:8a:48:6d:
e6:76:7b:41:3a:a5:8e:54:f0:7d:80:f2:d7:b5:f4:
61:8a:53:93:3b:9a:f5:0f:d5:e6:f1:c1:82:75:6a:
4a:a5:c1:18:1b:2d:b8:e9:6e:6e:03:52:2a:d7:f3:
6f:9a:a5:7b:7c:33:8b:bc:a6:36:0f:cd:2e:c1:54:
e9:56:43:5f:8c:57:94:d3:a8:cb:10:0f:31:56:52:
51:a1:f2:0d:a1:4f:ee:47:b6:55:a0:4a:cf:be:0b:
c4:ba:d7:74:41:be:b8:38:7f:a8:09:21:85:90:97:
28:8f:6f:90:49:08:11:b1:95:e7:98:50:35:34:3a:
90:a0:f1:a6:bc:04:43:c5:1a:7b:10:d7:11:87:ef:
0f:25:9f:94:7c:42:ab:e1:a1:c2:aa:d0:18:f2:2b:
2f:22:b5:a0:07:0b:1a:f0:12:25:04:78:86:ac:d1:
b1:b4:66:ce:68:d1:51:fd:bf:c7:92:6d:e6:0e:7c:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:4A:D2:97:61:DC:00:1A:57:70:22:FC:F9:14:87:28:86:18:2B
X509v3 Authority Key Identifier:
keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:3b:88:bc:a3:1b:68:2c:94:77:da:f2:43:ff:04:be:09:
3c:40:c6:de:f9:ae:5c:76:bb:d2:06:c4:b6:51:11:dc:1b:f3:
dd:b2:12:5f:40:0c:b7:63:5a:30:68:15:9e:12:8a:53:68:98:
3c:97:a2:b1:40:8d:aa:6a:04:fc:d8:a3:a8:f7:df:c0:5c:65:
93:02:a9:6c:7e:11:8f:c4:60:eb:78:83:c1:50:04:9c:2e:af:
f3:ed:b9:85:e3:8f:f0:00:f5:04:f2:e0:98:0c:32:7b:e7:5c:
0a:22:59:10:e0:7f:16:37:a3:eb:1d:c8:8a:57:2c:1e:9a:70:
b2:13:8c:3a:08:b8:5c:87:17:10:93:57:f7:5e:d0:15:c4:ee:
aa:2a:1a:4b:0f:6b:7a:db:44:80:28:88:0c:f7:b1:54:e9:a3:
e2:31:45:de:4f:1f:4b:c5:ca:cc:4c:35:a1:dc:75:43:4b:ab:
98:a5:c0:21:7e:01:f8:f7:92:14:77:ce:a2:2f:1a:ed:c7:18:
42:70:e4:66:22:9c:5a:dc:a3:d4:06:ea:4c:63:d0:57:d6:76:
84:9b:b4:97:24:cb:3f:88:ce:c8:4b:f5:65:33:8d:90:82:fe:
68:b6:e0:b9:35:c1:9e:a7:b6:25:20:c0:24:5a:c1:d1:eb:cc:
c2:ca:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:38 2025 by rpki-client