This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier: tp0Of9r/Mq54STy/tmSp2Ec+MKnI1BtjCNQeSdQX9BE=
Subject key identifier: 07:95:A8:DE:4B:B5:7B:B2:EC:A1:7A:66:DD:60:60:E6:E7:39:4E:A4
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 033F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number: 0311
Signing time: Thu 04 Dec 2025 23:37:31 +0000
Manifest this update: Thu 04 Dec 2025 23:37:30 +0000
Manifest next update: Thu 11 Dec 2025 23:37:30 +0000
Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: r4fZjZzR99GBNGGitUWZ0mqFH21oA+N17ozSvSuwi5w=)
2: C7C081641C2411F0AAC7CA1EC4F9AE02.roa (hash: ZFFbtGk8zOSWXbD6Zc/Rlh8dcv/EHpFdM8BkbcNS8Xo=)
3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: O2oQyvWguzaYeNsrwBX/2BLJPDmDLHzJTdTHMhL++UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Dec 4 23:37:30 2025 GMT
Not After : Dec 11 23:37:30 2025 GMT
Subject: CN=69321b3b-1065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:22:65:3e:1c:f3:c4:15:00:c5:f2:9c:1f:
59:d7:48:10:8c:ea:c8:9a:9b:ac:79:25:ee:5d:8d:
01:04:c7:58:3d:54:35:53:77:9d:45:24:34:95:20:
7f:95:1a:77:76:a3:2b:71:dd:6f:58:74:91:aa:c5:
fa:dc:35:e4:4b:80:fa:1a:d1:ec:82:60:44:8c:2b:
5e:e2:9b:46:bd:66:2f:14:db:01:00:d4:95:a6:c2:
11:1a:ed:85:ed:dc:c9:65:d6:0d:f2:cb:df:1d:df:
cc:a6:ec:6f:26:9e:c4:ff:55:9f:39:ee:93:2f:2b:
f2:ab:bd:a0:f2:db:2a:00:8c:c0:7f:bb:dd:aa:12:
9e:e6:d6:3b:18:2f:8a:2e:2e:e6:d1:5b:43:c6:6f:
c4:91:e9:ae:dd:13:b2:0f:54:04:e4:3f:98:e0:f1:
65:9f:b8:0f:b9:f9:f6:8b:e3:6e:42:d3:3b:14:7a:
54:45:a2:d8:07:d0:ec:83:b0:fd:77:ca:a0:ac:7c:
f8:6b:c3:00:c4:9f:75:c4:e2:b4:77:0f:6f:85:4b:
12:e8:7b:50:9d:dc:8c:8e:87:1a:ca:a9:f6:e6:e8:
6f:e9:eb:31:6b:af:39:92:7a:8a:d3:99:0f:32:14:
6a:a5:e3:d9:2e:f7:20:21:db:f8:18:3d:7e:3a:d9:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:A8:DE:4B:B5:7B:B2:EC:A1:7A:66:DD:60:60:E6:E7:39:4E:A4
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:77:b0:f7:19:e1:dd:1a:53:73:7d:ce:e2:65:f1:90:a0:
92:73:24:76:72:fe:4d:ac:cc:84:53:49:ad:11:2f:1d:c0:20:
a7:31:b1:d4:9c:bd:33:f0:a4:77:75:81:c8:e0:b2:2c:9a:54:
0c:d9:0d:ff:bb:b6:2b:07:71:03:96:6a:8a:b1:53:75:b7:1e:
2b:de:47:b6:39:39:a0:78:aa:9c:34:a8:bd:ff:b7:21:54:1e:
f4:7b:e6:29:9b:1e:cf:a7:56:68:d5:3f:33:21:da:e2:26:15:
38:4a:16:9d:a6:a9:db:f8:ea:7c:a3:48:63:02:3e:61:a2:30:
c4:b1:9a:58:91:fb:50:89:98:4f:a6:0b:41:e7:2c:a9:94:9d:
b3:8f:d2:db:c8:2b:2f:db:16:99:d5:fc:27:88:e5:d4:5a:73:
6d:81:f4:34:d5:4f:26:37:66:94:58:8e:aa:da:00:e6:15:4a:
3e:5f:65:77:f4:fd:c9:98:82:fa:e1:0e:96:b1:31:d3:50:18:
cf:e6:1a:1a:03:27:f1:d2:b5:b7:5d:3a:65:01:e4:3c:08:63:
49:94:b7:97:82:49:73:8f:e2:4f:76:d1:60:be:02:fa:b0:a4:
1c:83:fa:9b:13:81:a7:21:42:63:4a:a3:2c:56:bb:12:73:87:
0d:08:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:34 2025 by rpki-client