This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File: oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier: GIm51aJHihhICiuXZDNgj7YzQbzc6+ZDPC71xIdxNbo=
Subject key identifier: 83:BC:44:9C:DB:95:93:43:CB:24:44:C3:2E:3C:D2:DB:5A:83:54:2B
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 1422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number: 1417
Signing time: Wed 31 Dec 2025 16:42:00 +0000
Manifest this update: Wed 31 Dec 2025 16:42:00 +0000
Manifest next update: Wed 07 Jan 2026 16:42:00 +0000
Files and hashes: 1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: upTEoeHKFIgihiAvO5E9HdVibpVNCCTxUjsSq/4hS9I=)
2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: M9FXaqMN3xRXkYSG9XQqHpw6Lro8+iU9Ajk3i3+nJw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 16:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5154 (0x1422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: Dec 31 16:42:00 2025 GMT
Not After : Jan 7 16:42:00 2026 GMT
Subject: CN=69555258-dfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:d5:fa:d8:bc:88:20:31:cb:e7:ad:a4:4c:
16:11:07:c0:1c:3b:29:e3:06:64:36:ee:04:6b:25:
ef:83:8b:75:75:69:2f:96:db:76:ab:54:56:b9:41:
d3:08:16:d8:86:c7:f1:01:bf:93:69:29:06:19:ba:
36:4c:b4:96:a5:3f:bb:cf:8d:9d:fb:38:08:a4:65:
58:a9:a8:d8:ee:84:99:96:0a:7b:74:b3:06:41:45:
85:a6:72:a1:2a:19:71:38:c0:b8:bc:ff:14:1e:3b:
a7:63:a9:8f:5f:79:06:4b:fd:6c:8f:4c:0e:0a:36:
25:f5:68:cc:47:4a:78:97:37:cd:e6:32:1a:11:06:
86:11:4e:ab:6b:eb:31:ac:b2:c1:f6:fe:9f:a4:74:
dc:ed:57:ab:1b:cb:0b:3b:e7:9b:f2:1d:7c:c2:1e:
0c:54:7a:26:8c:f5:df:d9:e4:eb:26:db:2d:41:f9:
fb:41:79:82:d1:0c:3f:5b:79:68:af:7b:08:fd:ff:
45:49:af:88:c2:7b:88:aa:9f:d7:43:88:18:54:28:
19:f9:f6:13:37:47:9e:b0:3a:74:0f:26:f6:46:cd:
ff:29:50:d7:d6:65:16:b2:e0:1b:5d:f8:e6:26:b6:
c8:3b:a8:6d:c9:4a:fb:1f:82:14:75:47:07:82:ce:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:44:9C:DB:95:93:43:CB:24:44:C3:2E:3C:D2:DB:5A:83:54:2B
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4d:e3:ee:70:2e:cc:ad:4b:df:53:a8:75:8b:96:9e:c2:88:
30:28:e0:4c:a0:0c:d8:bf:da:74:b5:bd:66:49:77:10:10:01:
b1:75:fc:d0:bb:b9:80:cf:7e:4d:90:47:5d:e9:93:71:3a:6a:
2c:42:4f:78:66:19:73:fc:48:11:19:8f:f5:cb:c0:6f:d7:04:
24:18:c3:41:34:8c:70:20:88:9d:25:e1:f4:d3:ca:68:28:e0:
7e:cd:0f:72:b2:96:42:af:cd:2a:66:35:14:1e:31:3c:ce:6a:
76:8c:a4:6f:56:b2:d4:f6:f2:3e:1a:9b:88:5b:be:f2:86:94:
05:a4:86:04:76:52:46:07:14:4e:54:76:a0:cf:09:d0:ff:7f:
b8:0a:b8:59:72:7c:56:6c:2d:d3:fd:7c:98:5d:e3:d2:08:0c:
22:db:db:6c:e5:69:f4:ad:dc:25:45:c9:d8:d2:df:37:3f:ad:
0b:a6:ed:f2:e3:52:cd:c8:67:df:2b:d2:40:8f:1b:80:ee:88:
b8:56:cd:44:61:ad:96:5d:a6:e0:aa:97:ad:df:5f:02:8c:ef:
79:05:e6:a5:f8:83:0b:95:2c:69:e6:9b:7b:a4:b4:7b:06:be:
6d:af:dc:ac:38:30:45:8f:fd:12:ab:87:1c:1b:2d:ab:00:30:
db:31:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 21:23:42 2026 by rpki-client