This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json)
Hash identifier: EerfREvvdey2tILnnrwuP0gwAWaJ4gEbJJl2k+e4gZk=
Subject key identifier: 52:30:17:64:E4:D8:DC:8A:BF:9E:CF:78:8E:5D:E5:E5:EF:79:EB:9C
Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
Manifest number: 0869
Signing time: Sat 06 Dec 2025 19:44:31 +0000
Manifest this update: Sat 06 Dec 2025 19:44:30 +0000
Manifest next update: Sat 13 Dec 2025 19:44:30 +0000
Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: H/o9wgZZLjaMI5Cl1ave8ps2TS4tLQRx6A/uyePlus4=)
2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: +rqRhoF7M98jyOj7ilINYsh86Lj18TGDOqtK2wOwgR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172
Validity
Not Before: Dec 6 19:44:30 2025 GMT
Not After : Dec 13 19:44:30 2025 GMT
Subject: CN=6934879e-e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:7b:39:56:e2:68:30:f6:bc:7a:bf:31:e4:
ac:8a:dd:92:fa:18:f0:db:d1:76:10:84:56:7a:37:
25:0d:6d:0e:23:c4:9f:2c:59:52:1e:71:3a:08:b3:
42:1e:e1:ff:4c:e0:3a:9a:98:81:ae:2a:7a:59:7c:
62:81:16:0e:bd:19:da:5f:24:4b:77:97:d1:72:ef:
9c:e3:31:79:e9:2d:40:b9:91:48:78:60:92:f1:d4:
d6:5b:8b:b0:fa:71:f5:35:f8:6f:bc:f0:cd:e6:0b:
25:16:62:e5:fe:ab:da:8f:bc:f5:80:20:da:1d:a0:
60:2f:f7:fd:27:d3:82:6e:1b:4f:f7:48:33:35:2a:
24:6d:ac:a9:20:6b:98:c2:17:e8:4f:c4:ce:2a:e0:
93:df:0c:d1:d7:60:ec:00:b9:11:0c:fd:cd:2b:e3:
56:1c:fd:b3:9c:4e:71:de:ea:60:d0:e4:f7:39:a3:
ce:1e:3d:7d:2d:c8:54:6b:ac:c8:32:1b:0d:64:17:
87:d7:e3:13:bd:20:63:24:d6:81:c8:a9:f2:db:57:
23:b7:8e:b1:b0:de:98:30:23:b4:17:78:03:a4:31:
0b:3e:c0:ba:da:e6:32:97:90:25:0a:2b:7f:46:88:
7a:01:23:f3:a5:ed:f8:f8:3e:3f:e8:b4:01:df:90:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:17:64:E4:D8:DC:8A:BF:9E:CF:78:8E:5D:E5:E5:EF:79:EB:9C
X509v3 Authority Key Identifier:
keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:04:0f:69:c4:04:67:d7:42:d5:43:e4:e5:c4:a8:53:ce:
63:95:07:fb:e9:ae:2f:cd:10:e2:cd:b3:be:36:37:08:03:a6:
9f:e7:7d:9d:97:2e:ff:0e:f3:94:3d:14:77:fb:f1:42:c1:ff:
36:77:f6:93:dc:c4:3f:ed:41:9a:a8:f0:d9:e1:3a:53:7f:1b:
5c:70:0c:e9:eb:42:fc:8f:51:2d:03:25:a3:d1:42:01:d2:ba:
bf:d0:41:6b:01:ee:5d:4c:0f:56:9d:d8:d2:70:41:c2:5b:55:
f2:cc:e2:c9:44:b4:72:d8:b2:93:a0:7f:e4:0f:e2:7f:0b:dc:
38:96:15:da:41:f5:f7:73:30:ca:46:8a:60:cb:22:a5:2b:d2:
4e:77:56:bd:e1:72:40:aa:48:1a:91:15:1d:f3:af:41:e5:8f:
b6:e6:00:9e:b5:6e:86:be:ab:57:e3:06:83:5b:ee:f3:7f:80:
bf:de:49:0e:10:1a:f4:f5:a8:48:6c:32:f0:94:fc:86:84:bb:
cd:16:4f:dc:56:87:d7:8e:5b:66:59:fb:72:d1:22:2c:05:ca:
aa:b8:3d:a4:7f:6d:61:d0:bf:9b:b5:eb:61:b8:61:2b:06:a3:
03:4c:73:5f:86:6a:b4:8b:fa:fb:6f:4e:a3:9d:ce:db:d1:01:
98:78:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:38 2025 by rpki-client