This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File: oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier: 1p86X89rXoWx9y8bABtnkUrxv6CG5ND43rfjUsddyrc=
Subject key identifier: 79:EC:4C:D2:27:4F:28:28:BC:D5:FF:CD:2D:6F:2D:25:DE:25:0A:23
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number: 14
Signing time: Fri 05 Dec 2025 05:45:17 +0000
Manifest this update: Fri 05 Dec 2025 05:45:16 +0000
Manifest next update: Fri 12 Dec 2025 05:45:16 +0000
Files and hashes: 1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: +vp+Z+YuMpYQWfeEYy/W4nb9tWt8b7FllAUSz8MrXn4=)
2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: J1tjfo0Tv8cAIcr5spIPpEp7gs6ochVbVgOyTGB+uQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Validity
Not Before: Dec 5 05:45:16 2025 GMT
Not After : Dec 12 05:45:16 2025 GMT
Subject: CN=6932716c-8173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:22:72:56:65:ac:5b:70:8e:27:52:21:9a:
c7:d2:e3:55:97:7b:77:3c:da:06:93:89:6d:28:af:
9a:9c:40:29:96:53:8f:7d:f5:69:e5:ff:07:c1:a0:
89:85:e7:d7:2b:43:7c:c8:39:25:8a:0e:9a:bc:37:
24:bc:f4:8f:28:9f:00:2a:28:2e:b2:de:e8:0e:fa:
44:16:d3:e7:97:d4:a5:1c:5f:9f:1b:82:02:16:e6:
ef:0b:9c:50:f0:12:64:6a:7a:da:41:6b:b3:b7:33:
95:6b:21:67:cf:c9:7e:ed:aa:38:ee:60:a1:f3:6b:
8f:27:0d:9e:b5:84:09:13:af:44:0d:79:b9:3f:6b:
28:8f:ad:de:da:91:dc:95:6a:16:53:e6:1e:b8:12:
8b:63:7c:f2:6d:9b:36:0a:44:6a:16:ef:41:2b:77:
80:b1:20:9d:cc:02:b1:b2:7b:11:81:54:4f:6a:9d:
ed:64:1e:a4:b6:4c:bf:67:39:36:51:14:42:1c:09:
34:46:1a:d8:2d:b1:8b:2a:63:eb:10:3b:2b:92:f1:
9a:37:02:b5:cc:1f:02:30:8a:cf:ac:ae:ef:31:8b:
1c:82:d5:a5:46:67:a9:b4:70:f8:42:e4:97:43:f8:
f5:83:5f:69:98:3b:6c:69:1d:31:c4:7d:be:31:cb:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:4C:D2:27:4F:28:28:BC:D5:FF:CD:2D:6F:2D:25:DE:25:0A:23
X509v3 Authority Key Identifier:
keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:91:82:e8:f8:24:00:3a:1f:ab:fb:02:9f:6e:d0:35:bd:
e7:d9:d7:dd:9e:c3:f6:8f:1e:f3:70:b0:c8:61:93:d0:76:3e:
ed:26:cd:62:0a:c5:ec:e5:ae:dd:22:f5:e1:2a:80:3c:0e:ea:
36:84:da:db:02:c6:9f:7f:b0:33:3c:05:89:3a:bb:08:c9:90:
bc:cc:05:68:61:55:5d:4e:9c:55:f6:c7:f5:6f:df:e1:4d:5c:
49:7b:e2:85:fc:6e:b0:e2:53:d3:c8:e0:c5:f0:18:96:59:06:
7c:c6:1a:a3:88:de:52:4f:84:6a:fd:fd:e7:d7:e0:6f:b8:92:
25:9a:63:72:7f:65:cb:a0:38:16:0d:e1:29:bc:52:2f:29:93:
06:6d:b4:94:03:d6:12:e7:4f:c9:2c:cf:7f:42:39:d8:29:04:
4f:6b:5c:14:da:f8:fd:6a:8f:77:ad:24:63:76:31:8b:f0:b0:
62:01:df:aa:d3:aa:52:7c:d4:37:6f:49:94:75:3b:dd:d3:de:
4e:b0:9e:b0:38:c9:0b:11:e8:4a:6a:b6:57:d2:0e:cd:59:c0:
cf:d2:23:c1:5e:96:02:69:2c:f3:9b:78:9b:37:1f:0c:03:7c:
08:eb:da:53:ab:a5:79:b0:b8:66:c4:dc:46:22:0d:d5:7e:19:
72:4e:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:02 2025 by rpki-client