This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier: hvZIJ3feDGNo3Z1BORLHlJvj3E3vKh+u9ayrJaaHxDw=
Subject key identifier: 3B:9B:51:2F:82:C8:73:79:D8:69:47:62:F6:BC:A7:48:A9:AF:56:1F
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial: 0498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number: 0493
Signing time: Thu 04 Dec 2025 22:33:27 +0000
Manifest this update: Thu 04 Dec 2025 22:33:26 +0000
Manifest next update: Thu 11 Dec 2025 22:33:26 +0000
Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: Ympjg91SRK2mwsg4n3Jal85RcYJ1AoHeOtx52FPV22s=)
2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: bL21RN87VLUZ42gx2+jC72By39LghzvwcJOZaJQ9FMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A17, serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Validity
Not Before: Dec 4 22:33:26 2025 GMT
Not After : Dec 11 22:33:26 2025 GMT
Subject: CN=69320c36-566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:e1:0a:16:f9:b1:91:ff:90:60:a3:3b:b1:
1c:01:0c:fa:b1:a6:4c:cc:0c:4a:2d:3f:6f:46:33:
7e:a1:d0:e8:d4:2e:2a:ec:8e:0a:53:05:f6:eb:4a:
2c:ad:54:2f:81:82:04:c4:7f:c5:88:2b:82:a0:48:
14:dc:76:cf:9c:72:dd:8f:31:27:55:66:6c:74:fe:
29:d7:f4:a0:04:5b:92:88:18:28:6e:51:06:b2:88:
3a:ca:5b:3d:6a:87:a5:b4:ec:05:99:36:2b:2c:da:
8d:f0:64:4b:10:fb:e3:be:eb:3f:29:28:24:ae:12:
7e:4b:0d:ae:a9:52:07:3a:25:00:e1:a4:0e:8a:65:
b5:57:cd:b6:a6:74:a2:11:88:7c:29:d6:70:78:51:
bb:e9:45:75:36:f4:64:94:98:dd:59:a7:a7:b8:4d:
fb:89:d5:28:c9:20:bd:62:ff:70:e6:24:79:1d:07:
e7:9c:dd:00:1f:c4:fd:3b:47:da:82:2d:ee:68:2f:
a5:28:2f:66:74:f6:ee:e9:66:f3:2e:fc:3b:6c:ed:
54:60:d3:73:af:53:45:30:1c:f8:6d:28:1d:e0:c0:
e1:13:fd:6d:8f:4d:21:3d:25:8c:40:62:b6:bf:d1:
3a:30:b9:eb:bd:55:dc:58:be:39:7a:bd:16:04:14:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:51:2F:82:C8:73:79:D8:69:47:62:F6:BC:A7:48:A9:AF:56:1F
X509v3 Authority Key Identifier:
keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:c9:76:f9:93:a8:69:f6:88:f3:01:13:ff:b3:d0:4a:db:
d0:11:c6:c3:6d:7c:86:3d:57:fb:15:5b:4d:35:09:2d:e6:a3:
85:11:7d:2d:4a:d6:c6:9f:45:8a:8e:88:05:7d:ab:d5:3a:b0:
2f:28:24:1d:98:f4:b9:4d:17:72:b6:f1:6f:b2:3e:16:2f:b7:
7d:98:a7:4d:23:c9:11:01:1e:e4:ea:1a:36:e7:8a:78:de:be:
8e:c2:ca:19:72:5c:af:35:60:84:b6:01:4e:25:f7:b7:fb:b2:
f9:0b:91:da:84:64:62:20:50:a0:70:5a:57:d9:f7:16:6b:4a:
7d:e8:62:86:e4:c1:e1:09:c7:ce:a2:82:91:2a:97:b2:14:93:
ba:9d:85:e8:3c:11:6c:e5:4b:42:c7:26:1d:2b:b0:e4:9b:4a:
77:62:d9:82:bc:aa:6d:55:96:35:2d:9e:88:4c:fe:cb:6e:13:
41:cc:59:4a:73:c8:84:74:25:e2:5e:27:33:45:59:2b:c7:f7:
bb:d5:ea:b8:35:93:82:74:1f:9a:b5:97:e3:23:a2:fb:f9:7d:
af:4f:60:dc:9b:55:0e:ec:34:09:b6:c3:ef:10:f0:bc:9b:5b:
46:8d:78:d9:91:32:74:02:60:1e:50:3c:eb:1f:40:bc:5f:9d:
b2:cd:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:29:31 2025 by rpki-client