This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier: jmIcQ7SFjSPgzoXJqmuDjC4aJb3WtFLyO5IrNJ6RISc=
Subject key identifier: 56:98:66:7B:65:16:3C:80:22:06:17:2F:26:14:A2:62:69:B2:A7:FD
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial: 0C2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number: 0C15
Signing time: Sat 06 Dec 2025 18:08:16 +0000
Manifest this update: Sat 06 Dec 2025 18:08:15 +0000
Manifest next update: Sat 13 Dec 2025 18:08:15 +0000
Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: ZXXbaLUWeeub0cn5jn9DDtUp+Ou0GcHBgYbib2Sy04U=)
2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=)
3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Validity
Not Before: Dec 6 18:08:15 2025 GMT
Not After : Dec 13 18:08:15 2025 GMT
Subject: CN=6934710f-562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:93:22:8a:f0:49:b2:31:24:66:af:2c:40:
05:8a:5b:46:86:7b:0b:56:ad:f1:3f:7a:3d:62:ee:
16:31:e5:1d:5f:21:2c:2e:a6:3d:a1:fb:88:8c:2d:
9d:25:0d:08:4d:6c:c7:6a:fd:98:23:c9:12:0c:c4:
db:f4:75:83:18:05:f4:6b:40:56:b9:df:0d:4c:9d:
63:68:53:1d:5f:47:61:a4:0b:04:bd:f5:c2:f5:eb:
62:63:88:02:f4:98:98:dc:83:27:9a:46:7d:0c:ed:
ed:89:5c:2e:de:1c:96:7e:58:45:4c:26:26:d6:20:
b5:32:5a:d1:06:6c:28:4c:63:9b:7f:a3:74:97:0c:
cc:bb:4b:6d:b9:fa:e3:b1:dc:f2:af:60:ac:69:8d:
77:3d:0d:63:37:49:b4:d8:f8:93:dd:b6:a1:c6:d5:
93:1e:8f:68:87:a6:93:73:c2:a8:6b:35:af:da:74:
08:d1:f4:3a:f7:64:9b:e5:c5:87:c9:5a:ec:c4:be:
65:36:0e:a1:7d:96:95:8a:19:fc:7a:7c:6c:79:b2:
e7:eb:58:c1:8a:bc:76:ef:fd:b9:76:d0:f0:c1:88:
0a:bd:50:42:4c:3a:1a:47:06:54:a4:ec:d2:67:f1:
a0:35:93:79:f6:f7:bf:62:36:ef:c8:3c:f6:a8:d7:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:66:7B:65:16:3C:80:22:06:17:2F:26:14:A2:62:69:B2:A7:FD
X509v3 Authority Key Identifier:
keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ce:63:d1:2e:02:17:25:16:3e:4a:04:19:d0:bf:f1:3a:ab:
7a:20:cd:0c:81:7b:df:84:93:44:70:a1:5d:cd:e6:8e:11:c8:
fe:3f:a0:65:dd:0a:ce:a7:28:6d:c7:00:ec:58:6b:ab:97:b7:
5d:f5:e9:ab:41:b7:7f:97:2c:4f:b8:0f:f7:78:89:b6:5c:3e:
9a:99:6d:29:8a:14:e4:2c:ee:74:7e:cc:6a:27:87:9f:a0:b8:
c3:42:8c:e4:69:de:bf:00:80:d2:68:c8:a0:b9:2f:41:54:45:
6f:be:69:7e:11:01:4a:b8:af:b9:54:4b:2c:fd:b8:a9:09:c3:
e2:df:28:68:62:98:46:70:2f:f7:ec:54:34:66:5f:19:fb:90:
b0:09:06:5e:01:85:66:bb:cb:44:87:6e:e6:6b:f3:23:f6:4b:
d5:ce:13:ae:b5:44:2a:5a:06:47:f1:53:17:96:c9:3a:a7:1c:
13:39:70:e8:1a:00:b0:ec:ae:0e:54:b6:b0:9d:a1:9a:06:2c:
6f:fe:22:a0:a7:26:cb:e8:8f:b4:16:9b:3b:f0:61:d0:10:50:
7f:62:7c:97:63:de:87:78:24:01:06:e5:2c:e0:81:5d:2a:a6:
2e:99:2b:47:02:aa:64:8b:97:44:e5:68:3e:58:8f:48:cc:86:
91:e5:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:23 2025 by rpki-client