This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier: PqWcZmVcZhhvcIEvBU/xkAzB+0FebgSWBZ2gYNU1J6E=
Subject key identifier: 48:80:9C:58:C6:0E:A7:9E:FA:A0:F7:64:A3:99:0F:BD:6A:20:2F:38
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number: 0137
Signing time: Fri 05 Dec 2025 02:39:43 +0000
Manifest this update: Fri 05 Dec 2025 02:39:42 +0000
Manifest next update: Fri 12 Dec 2025 02:39:42 +0000
Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: VEJ7W1KlcYP0LZ5xsQV2GnntMTXFC5CtRU+fPpPkwXc=)
2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Validity
Not Before: Dec 5 02:39:42 2025 GMT
Not After : Dec 12 02:39:42 2025 GMT
Subject: CN=693245ee-6fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:f6:21:19:0e:12:f9:7f:28:49:ac:8d:5e:
c5:49:e1:02:c7:27:f2:19:ee:22:2c:19:d7:b0:d8:
0f:9c:7c:ec:8c:f7:23:e5:70:4b:a4:b0:ec:a2:9d:
7d:6c:74:82:b5:75:3d:b6:53:0a:be:8b:25:64:d2:
a3:f5:3d:50:a6:3b:90:7b:0f:e5:7f:f7:81:71:d4:
73:d5:49:49:16:0e:a4:88:a5:d6:bb:ec:54:86:2d:
69:f5:ec:66:26:de:13:79:08:11:48:e4:f7:aa:42:
ab:1c:cb:f7:da:b4:e7:1d:b0:84:f9:55:24:5d:ca:
16:e0:f7:2c:72:90:79:89:a2:a8:47:e6:cf:e3:c2:
f4:b2:99:66:8c:2f:2c:9f:c1:e7:bf:cd:b8:85:b9:
fc:bc:71:e9:39:ba:d4:1e:70:49:3b:f6:75:e6:11:
43:59:52:c7:3e:f0:a8:b2:40:a4:1e:b6:cb:02:e6:
b5:f5:4c:83:fe:d0:a5:be:37:e2:64:57:31:10:14:
c1:f9:20:94:21:0c:e3:98:8c:48:97:55:7a:7c:0b:
63:d3:69:ff:54:19:3d:25:b2:f8:2b:55:30:8e:ac:
aa:87:92:fa:b6:6b:35:83:b2:2f:30:3d:8f:ce:93:
7c:f3:f9:cb:ee:ec:26:f0:16:6e:fb:21:ec:e6:96:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:9C:58:C6:0E:A7:9E:FA:A0:F7:64:A3:99:0F:BD:6A:20:2F:38
X509v3 Authority Key Identifier:
keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:36:93:92:3c:fe:2c:1c:3a:44:aa:41:37:55:d0:1e:26:4c:
6f:16:e3:f9:d3:1e:6f:08:d1:44:c6:26:70:30:c8:f4:6a:da:
9c:4d:42:98:39:cb:aa:94:dd:de:83:07:07:3a:b8:7d:fb:01:
af:58:d5:fb:8f:b0:91:9c:88:42:bf:54:b7:ae:e5:ff:3c:a8:
7f:fd:1c:69:61:81:bc:b8:bb:27:c7:19:68:d2:94:fa:ff:c0:
35:86:97:28:fb:3e:58:58:4c:02:4a:53:d0:13:ca:99:97:17:
f0:2b:f5:42:20:b5:33:48:6b:a3:52:e4:45:29:65:26:6e:1b:
03:24:45:f2:d7:83:93:0b:5f:7e:47:e3:0c:1a:c0:7d:47:77:
30:3c:27:58:35:d3:c7:e5:41:20:30:06:65:60:45:b0:7f:df:
39:48:bf:cd:e4:86:42:c4:6c:4c:f8:e8:c0:14:7f:0d:2a:aa:
2b:15:1c:c7:9c:2d:fd:f1:8f:c7:ce:be:a0:b6:d8:22:ab:2d:
ae:14:8e:ef:ba:b6:5b:fb:3c:36:e7:eb:ae:bd:e7:1c:38:a2:
04:0e:ad:d0:ff:15:d3:13:3a:ec:76:10:a2:c8:ca:62:d5:9f:
52:6d:57:5a:92:92:d3:1d:de:f6:14:01:10:3e:51:27:47:36:
e0:8b:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:20 2025 by rpki-client