This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier: /gLafFJV5EPDA+pPOvGqN+jY04HtLWxsv1Pqs7UYnGo=
Subject key identifier: B0:DC:9C:9C:28:B7:59:AF:29:39:57:34:78:01:D9:99:F6:C5:E8:35
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number: 0294
Signing time: Mon 29 Dec 2025 00:35:06 +0000
Manifest this update: Mon 29 Dec 2025 00:35:06 +0000
Manifest next update: Mon 05 Jan 2026 00:35:06 +0000
Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: c7PAWlsSDMIXm1ftma+mMm29ZamVDsOVW9cBS9j/ics=)
2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: ujc0MMs38JAyLv/lgGmTZJVWFsrRIcXX0fImBXf2Gng=)
3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: FEAq+U9IY/vjb8fj+kVPH0Boa2FLCn9hMhhxSh+Ch10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 00:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Validity
Not Before: Dec 29 00:35:06 2025 GMT
Not After : Jan 5 00:35:06 2026 GMT
Subject: CN=6951ccba-2f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:b5:93:ce:0d:d1:44:2c:73:bf:24:5d:5d:
2e:eb:84:22:3d:7a:c2:73:d8:53:37:9e:1d:e0:40:
87:c0:37:1f:3f:19:57:19:12:e8:e8:c1:7f:ea:2c:
4f:7f:52:27:06:04:64:bf:f2:59:e5:ae:8b:3b:e0:
68:0b:c0:53:dd:f7:5d:a5:1e:91:af:1f:1c:9a:82:
b4:d0:8f:75:bf:f1:de:7e:cb:93:b3:8f:51:33:55:
eb:f0:68:2f:41:18:7e:67:3d:5b:15:5d:63:11:e5:
2f:ce:f0:41:87:21:87:d8:28:ce:27:5a:2f:e9:1e:
69:73:8a:ce:a2:cb:7d:f8:58:fe:68:d5:36:34:ca:
05:fe:7f:50:d4:fe:ed:f6:13:a4:f3:9a:f8:32:da:
3a:21:93:81:7f:18:67:94:25:47:a7:e8:6c:fa:ed:
f7:8a:58:60:69:82:01:22:bd:dd:6a:43:79:74:1a:
47:2e:08:70:56:28:ae:c2:14:1f:98:41:e0:f6:b8:
b3:12:2a:51:9c:7a:4c:b6:91:0a:da:be:3a:e3:47:
1d:40:f3:50:db:a2:e6:e6:0f:ae:89:44:84:70:3b:
fa:eb:bc:38:9f:96:ec:b2:c6:73:60:22:dd:c5:7a:
96:d7:d4:53:48:f3:a5:ee:ea:be:f3:66:fd:d8:d0:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:9C:9C:28:B7:59:AF:29:39:57:34:78:01:D9:99:F6:C5:E8:35
X509v3 Authority Key Identifier:
keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:27:80:e5:90:73:74:e2:8b:3f:52:03:0c:e6:a4:80:d9:
57:5f:05:2b:b8:c8:13:86:69:8c:5a:20:b7:0f:03:3e:86:e8:
e0:66:57:a7:9e:54:20:cc:85:08:25:28:66:e2:70:c7:b7:17:
57:66:e6:f7:de:57:c0:f4:97:52:7c:8f:b5:69:5a:d4:97:c9:
98:f4:4a:cd:b8:9a:d0:6c:06:a3:61:d9:74:85:be:65:94:bc:
8f:fc:cc:34:c8:23:63:bf:ac:9c:91:ba:9b:45:5e:a9:35:63:
6a:2e:30:ad:46:6f:81:c1:53:29:71:5c:41:a6:2b:0d:74:c9:
a8:57:de:33:0e:0c:0f:a4:11:86:29:4c:04:27:0b:02:84:e0:
ee:33:6d:73:45:a2:36:5d:c3:a2:ed:ea:45:60:18:04:54:1c:
17:db:db:02:6e:4c:0e:38:df:2f:0b:d4:f6:16:33:23:66:bc:
4c:b5:3d:46:da:e9:25:f4:4c:85:bf:a5:80:90:6b:0d:c3:f6:
cd:f1:ab:12:12:c4:c4:61:b2:5d:51:ef:6b:b3:37:d9:a2:57:
70:1c:9e:95:d1:11:80:e3:8c:c3:d8:9d:47:f3:77:69:38:57:
28:f5:42:8d:5d:36:4e:e6:56:f9:3e:9e:1c:b0:4c:7d:fb:ed:
26:4a:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:38:24 2025 by rpki-client