This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier: Fad4dLm95APwFVVJR3BwuvV7NZ6eHN2T3ECf8YO8NUI=
Subject key identifier: 50:6F:E4:F1:14:6C:A3:8E:74:11:7A:66:3C:5A:4E:51:1D:C2:00:6B
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number: 025E
Signing time: Fri 05 Dec 2025 00:09:35 +0000
Manifest this update: Fri 05 Dec 2025 00:09:35 +0000
Manifest next update: Fri 12 Dec 2025 00:09:35 +0000
Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: aCpJQK3j+QD/UV7xXr3erHtxEp5/R2wII9dInNM2kd8=)
2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: bVJLQavVrYOipcbUXf1ayhdXIKI6W1duH5Bj01W/zWg=)
3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: DFfr6A3Q6Z0rtiDpIfnn7HaR1OPP5j2ZlUMfeqmSe80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Dec 5 00:09:35 2025 GMT
Not After : Dec 12 00:09:35 2025 GMT
Subject: CN=693222bf-0ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:b0:c8:82:a1:97:df:b1:fe:b0:e8:4f:fc:
9c:d0:25:72:73:c6:11:68:a1:0b:f0:07:ad:50:0f:
95:01:1a:3f:64:c1:3a:31:2a:60:98:a4:69:71:de:
ec:63:91:95:b5:7b:d6:4f:dc:4a:af:7c:11:a3:39:
33:f3:de:87:d9:47:51:b3:ee:da:10:1d:41:a8:48:
bc:f9:90:c3:a2:20:ee:97:14:2f:14:a6:1d:b3:33:
7e:d6:99:ae:7b:73:4c:43:bd:64:69:97:72:11:40:
f0:6d:72:b9:18:58:83:9c:24:5b:5e:b6:16:91:df:
e2:d8:8d:1d:d8:60:4f:a6:02:7b:01:db:b3:43:fe:
ef:57:f9:7c:a0:1d:0f:d1:bb:70:57:3a:06:6e:06:
12:48:3c:d7:58:57:50:ab:a2:df:9b:48:f5:d1:ac:
9d:e7:74:c2:00:fb:b4:a7:4c:8c:99:81:f8:38:d7:
84:96:a8:a0:bd:22:93:bf:84:e2:2a:3f:cd:a7:10:
13:60:7a:4a:eb:b3:2a:d8:ca:a6:f0:1e:f2:a8:98:
96:a5:d8:c4:82:b0:fd:b7:f3:0a:3f:c6:1c:ec:87:
27:91:80:62:0b:6a:6c:25:21:12:69:15:01:ef:68:
e4:09:e9:08:6b:0c:a6:41:02:0c:58:9b:98:e4:83:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:E4:F1:14:6C:A3:8E:74:11:7A:66:3C:5A:4E:51:1D:C2:00:6B
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:02:f9:e2:7d:c9:93:ba:b6:9c:8b:15:e8:65:75:c0:e7:
50:da:17:87:80:0f:53:71:50:0a:94:01:8f:1f:c3:0d:3d:22:
57:35:7a:e8:d7:44:69:f3:09:00:f2:0c:51:d2:66:71:ee:9e:
ee:35:66:1d:ff:cd:fd:bc:65:80:f8:d5:ad:4c:58:35:17:9f:
49:4f:7e:83:01:4c:4b:dd:ea:38:18:59:9a:4d:83:d2:96:5c:
b4:94:bb:b4:d6:77:d4:18:93:0b:10:5a:d2:35:a7:a6:24:b1:
a0:42:61:3d:e0:f0:5c:71:8c:82:72:57:78:c6:29:41:c1:b6:
16:a6:2f:48:3c:59:4a:38:24:7f:b3:a2:ac:c5:44:24:61:6e:
f9:2c:01:e0:42:89:68:45:78:f6:10:87:95:85:42:62:74:49:
9c:ab:7c:d7:fd:a0:45:63:ba:da:7a:44:69:f8:50:2b:06:cf:
75:e5:c8:d6:4b:e2:2f:6a:0b:70:7e:4d:cb:31:1f:1b:ab:a5:
2c:d8:5d:80:00:bd:d8:1d:2b:5f:2c:73:45:aa:09:7b:61:79:
c7:cc:49:21:e2:1b:35:97:ab:f6:b0:cf:63:ca:1d:41:c7:04:
9c:d4:bb:59:f2:a1:90:35:78:23:fc:63:8e:9b:63:5c:1f:6a:
e6:2b:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:32 2025 by rpki-client