This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json)
Hash identifier: jgIfoYP8uefiBHic4m7aPVwn5OR/IebWNpIoWU/bouQ=
Subject key identifier: B3:24:C0:B5:0A:3F:07:F2:9C:AA:FB:D8:26:E0:91:79:36:7D:8E:51
Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
Manifest number: 2B
Signing time: Fri 05 Dec 2025 05:28:47 +0000
Manifest this update: Fri 05 Dec 2025 05:28:46 +0000
Manifest next update: Fri 12 Dec 2025 05:28:46 +0000
Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: dDgdPt+tPz4kcrfafSg8zFqHhbywlcg9+8XV6OcwMqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Validity
Not Before: Dec 5 05:28:46 2025 GMT
Not After : Dec 12 05:28:46 2025 GMT
Subject: CN=69326d8f-1081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:ca:14:42:75:ec:82:d9:75:59:d3:10:4d:
23:15:a1:33:e5:cd:0e:1b:e8:73:54:99:d1:72:da:
b4:bf:b5:6c:08:0d:33:52:f8:a4:aa:b9:0e:78:33:
f8:ad:bd:8f:61:26:66:68:ad:24:7c:ac:91:c8:46:
ac:2b:2f:98:af:d1:ae:c9:a7:6c:cc:d5:b6:f3:26:
f4:4b:20:ed:a1:b4:0b:d0:76:29:e9:dd:59:21:24:
cf:de:f5:3d:f0:d7:ab:56:f4:4d:70:55:f2:15:4d:
04:74:6b:7b:7f:6b:33:32:15:1d:a9:0c:00:63:49:
5d:78:79:62:d6:01:2c:8f:b7:64:f7:f7:17:c0:0c:
d9:0c:f0:33:5e:b8:2b:8a:69:6b:63:70:fd:15:41:
7a:89:8b:aa:c0:bc:2d:a2:c6:82:7b:6a:45:0c:e4:
d9:7f:8a:b2:6c:8d:bd:38:3a:08:dd:a4:57:4f:d7:
42:f1:2f:70:fc:30:6f:79:1b:00:e3:5c:53:cb:98:
3a:67:0e:63:ef:f4:18:27:21:f6:3b:f6:ac:79:cc:
1a:46:c5:93:e1:51:81:07:7d:92:94:82:ab:11:c9:
cf:b5:91:08:34:e8:a2:00:ad:8a:a2:e6:af:05:c5:
73:84:8b:2b:fc:76:1a:e2:c0:23:73:24:4f:44:32:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:C0:B5:0A:3F:07:F2:9C:AA:FB:D8:26:E0:91:79:36:7D:8E:51
X509v3 Authority Key Identifier:
keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:a3:15:64:d8:14:bf:f9:67:35:97:8b:45:c5:25:39:cc:
72:28:8b:e6:19:fd:7f:a7:17:dc:12:8d:e3:fe:f2:0e:d1:bb:
cc:e9:3b:0f:e8:05:dd:cf:92:1e:3d:d9:c1:95:f7:8d:e4:02:
85:22:7e:60:ea:3a:7a:b7:cf:10:36:cc:9b:5d:93:d8:f8:3c:
d3:31:63:48:de:e4:23:1e:d7:2c:6f:42:fb:75:5d:c6:dc:87:
8b:52:26:26:1b:e6:56:bf:7d:d4:9c:31:3c:bd:b9:06:44:f8:
ea:5e:d5:d6:15:9d:6a:c0:55:ed:92:a8:09:f8:dd:61:5c:5d:
be:f5:c9:57:28:8b:cd:a4:7b:e5:74:66:0f:2b:91:42:07:9b:
21:e4:ef:f2:7c:16:eb:b6:24:73:ab:72:eb:dd:30:15:a0:fb:
ba:87:9a:99:3b:95:d5:7c:17:24:78:3e:f7:22:41:38:6f:ec:
fb:15:bd:c2:9f:74:7d:1a:64:99:2f:90:ff:bf:0b:07:46:6d:
fd:52:ad:29:f9:bb:8a:e6:4d:09:4d:3c:f9:f4:2f:90:5c:76:
9e:1b:c4:c0:aa:4a:54:79:6f:67:22:06:0e:3d:8d:ff:aa:dd:
e5:f7:5b:19:ba:0f:41:de:94:d1:93:09:c9:55:95:c9:f0:16:
22:b4:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:05:09 2025 by rpki-client