This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
File: o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft (raw, json)
Hash identifier: rwfj7tqEHY6DCFIxsExH7qYATaIyox5t5YIjiWNDBkY=
Subject key identifier: 3D:20:4E:C4:28:39:75:ED:00:F1:56:74:F3:EB:4D:3A:79:0E:F2:96
Authority key identifier: A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
Certificate issuer: /CN=A914E3B7/serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
Manifest number: 08
Signing time: Sat 06 Dec 2025 15:00:51 +0000
Manifest this update: Sat 06 Dec 2025 15:00:50 +0000
Manifest next update: Sat 13 Dec 2025 15:00:50 +0000
Files and hashes: 1: o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl (hash: RZ04s3/uHNbLs1BTqeCBBtoO2u2PiMwFkhVmdwh0hCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Validity
Not Before: Dec 6 15:00:50 2025 GMT
Not After : Dec 13 15:00:50 2025 GMT
Subject: CN=69344523-7ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:ef:3e:11:b5:ee:7d:b2:2b:6f:e4:52:d2:
f3:f2:cd:cc:42:dd:91:ca:76:ee:d6:ae:f3:56:52:
41:fe:92:17:eb:ad:35:97:6b:7f:61:84:57:9a:62:
82:d5:ad:ef:5e:f9:c1:a9:b2:a7:b6:3e:7c:6f:a1:
df:b7:22:90:1f:ee:e1:d9:d3:f3:e0:80:82:d0:29:
5c:51:dc:05:87:b4:88:ac:65:ef:29:98:95:18:38:
ce:56:5a:75:7d:30:96:95:19:16:ce:83:12:84:8a:
2a:84:07:0c:e3:4e:f6:33:dc:5a:f2:49:2c:b5:bb:
81:44:0d:57:47:fa:c4:cf:63:b9:79:d4:11:5f:77:
d1:c4:7c:47:3a:df:f9:75:2f:77:58:c6:de:90:59:
8c:1b:5d:40:d1:15:74:56:14:e3:62:8b:13:cb:81:
16:17:d2:cc:cf:82:e4:eb:30:c3:6d:10:32:cf:6d:
36:a5:cc:85:dd:ac:88:85:38:c9:7c:5a:c2:64:bd:
68:58:31:25:39:d0:cf:e7:fa:e3:4e:dc:33:4d:a6:
12:4b:03:4e:c5:ed:b4:50:af:a6:ab:19:66:ec:3f:
be:9b:98:c0:4b:3d:51:33:ae:5f:f9:66:c5:97:d4:
6f:9d:8e:b4:47:4b:86:06:ac:64:0a:7f:13:f8:63:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:4E:C4:28:39:75:ED:00:F1:56:74:F3:EB:4D:3A:79:0E:F2:96
X509v3 Authority Key Identifier:
keyid:A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c1:e5:bc:bd:dc:fa:30:6f:da:7c:17:8a:06:b3:38:50:83:
4d:87:f5:43:24:85:39:b9:6f:4d:d4:ea:41:65:22:57:5a:cc:
75:a2:05:80:24:77:6f:b1:8d:8c:b2:33:22:8f:01:dd:73:cc:
f8:45:d8:cd:90:14:12:14:cd:96:cd:e0:74:25:ff:56:37:dc:
41:0a:ca:fe:db:79:2d:23:de:ee:40:43:ee:f8:20:9a:5c:e3:
db:40:cd:72:aa:92:19:6f:65:e1:08:7d:ab:8b:bf:dd:9b:bb:
73:f3:f7:11:89:f5:c8:0f:fb:e9:f4:7b:88:1a:0d:f8:3b:d9:
30:58:1e:98:3c:da:02:73:75:2b:1d:13:b7:2b:89:f6:25:91:
34:53:e0:ea:65:f0:0c:ba:b3:0b:4a:ae:79:ab:97:5e:01:d4:
c2:eb:ea:90:d0:40:ec:3d:33:8c:85:94:8f:5a:41:6e:00:73:
e0:44:2a:d7:e9:44:33:01:eb:b9:92:bc:81:8e:04:6d:38:d8:
54:9b:3b:92:57:3b:e5:8e:0c:dd:eb:19:6d:9e:b6:4e:0e:46:
44:68:4a:d4:e9:c8:a6:cc:c4:02:75:0e:f4:ea:a8:69:19:86:
89:15:3e:99:d8:33:8f:83:7d:da:5d:34:3a:4d:86:72:5e:be:
63:d8:60:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTNCNzExMC8GA1UEBRMoQTNBRDgyQjI0QzdGRjhFRkY1NEM5Mjc5ODhDN0NBM0E1
QThDNDQ1RTAeFw0yNTEyMDYxNTAwNTBaFw0yNTEyMTMxNTAwNTBaMBgxFjAUBgNV
BAMTDTY5MzQ0NTIzLTdlYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM6e8+EbXufbIrb+RS0vPyzcxC3ZHKdu7WrvNWUkH+khfrrTWXa39hhFeaYoLV
re9e+cGpsqe2Pnxvod+3IpAf7uHZ0/PggILQKVxR3AWHtIisZe8pmJUYOM5WWnV9
MJaVGRbOgxKEiiqEBwzjTvYz3FrySSy1u4FEDVdH+sTPY7l51BFfd9HEfEc63/l1
L3dYxt6QWYwbXUDRFXRWFONiixPLgRYX0szPguTrMMNtEDLPbTalzIXdrIiFOMl8
WsJkvWhYMSU50M/n+uNO3DNNphJLA07F7bRQr6arGWbsP76bmMBLPVEzrl/5ZsWX
1G+djrRHS4YGrGQKfxP4Yz4NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPSBOxCg5
de0A8VZ08+tNOnkO8pYwHwYDVR0jBBgwFoAUo62Cskx/+O/1TJJ5iMfKOlqMRF4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFM0I3L0VGNDQyMzFFQzlB
MTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9fMVRKSjVpTWZLT2xxTVJG
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbzYyQ3NreF8tT18xVEpKNWlNZktPbHFNUkY0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
M0I3L0VGNDQyMzFFQzlBMTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9f
MVRKSjVpTWZLT2xxTVJGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJrB5by93Powb9p8F4oGszhQg02H9UMkhTm5b03U6kFlIldazHWiBYAk
d2+xjYyyMyKPAd1zzPhF2M2QFBIUzZbN4HQl/1Y33EEKyv7beS0j3u5AQ+74IJpc
49tAzXKqkhlvZeEIfauLv92bu3Pz9xGJ9cgP++n0e4gaDfg72TBYHpg82gJzdSsd
E7crifYlkTRT4Opl8Ay6swtKrnmrl14B1MLr6pDQQOw9M4yFlI9aQW4Ac+BEKtfp
RDMB67mSvIGOBG042FSbO5JXO+WODN3rGW2etk4ORkRoStTpyKbMxAJ1DvTqqGkZ
hokVPpnYM4+DfdpdNDpNhnJevmPYYCs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:34:20 2025 by rpki-client