This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json)
Hash identifier: jpakBpl/AQa/rZIFEwyafVKXZT4xuNQH+LtSvNGB+O8=
Subject key identifier: 3F:FC:DB:72:54:55:B8:D9:1F:C1:A7:D1:6A:BE:88:32:0F:39:08:EC
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
Manifest number: 92
Signing time: Fri 05 Dec 2025 04:27:12 +0000
Manifest this update: Fri 05 Dec 2025 04:27:11 +0000
Manifest next update: Fri 12 Dec 2025 04:27:11 +0000
Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: whEGgTOYhfA+YkpDuOQ100cLWa4+Byrw2WqHZFaa6Qw=)
2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=)
3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Validity
Not Before: Dec 5 04:27:11 2025 GMT
Not After : Dec 12 04:27:11 2025 GMT
Subject: CN=69325f20-78fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:0c:e6:49:a4:58:ed:6d:1a:ad:94:fc:6d:
8a:b7:0c:aa:da:3f:e8:aa:aa:2a:06:eb:bf:03:7b:
00:98:ba:9c:60:ff:73:24:3e:c0:49:8d:91:ff:84:
48:3b:cb:93:87:4e:42:b5:36:c3:6c:ec:00:43:ae:
bc:5e:dd:33:c4:ff:ab:68:42:eb:40:44:18:6d:29:
a2:39:77:30:6e:c5:cb:df:84:32:95:b7:f6:50:c4:
4a:e2:7b:7b:30:d3:1f:a6:35:4b:df:d2:9b:ac:94:
23:3c:a1:f2:ed:b6:e2:2f:e7:4a:ca:21:b2:ea:81:
f4:66:8f:13:e6:e1:36:18:cb:74:14:2e:24:37:20:
6b:6f:e7:e8:b8:8b:51:bf:5d:c2:4d:3e:c1:51:b3:
cb:3e:77:a6:b9:f0:81:ec:9e:3a:bc:92:76:68:61:
dc:c5:cc:88:7d:0e:ee:74:72:4e:af:2c:78:f9:6e:
05:e5:39:cd:ea:26:8d:0c:e0:50:ae:0f:0a:84:fd:
a1:be:5d:c0:a3:2e:b0:e7:f3:3b:11:39:c4:5e:4e:
e1:45:0e:90:47:c5:c8:dd:ab:35:07:b3:65:28:93:
f5:c9:45:39:74:b8:bf:e9:7f:c2:18:e4:38:23:cf:
82:02:4b:e1:04:00:7f:e9:03:a9:21:1e:8f:7e:0c:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:DB:72:54:55:B8:D9:1F:C1:A7:D1:6A:BE:88:32:0F:39:08:EC
X509v3 Authority Key Identifier:
keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:ce:ab:48:f4:4d:61:2f:49:04:e0:cd:ac:ce:8b:c8:3a:
c1:87:4d:0e:41:f1:5d:28:65:39:db:9a:7c:ea:ae:a2:3d:21:
b7:fc:24:5d:f8:7e:f2:59:76:15:23:9e:a9:97:c0:d3:e2:40:
71:9a:3b:13:49:96:62:41:be:e6:3f:81:85:d4:68:08:9d:bb:
46:67:69:92:24:09:73:1a:ed:98:2b:01:bd:26:9a:e3:be:dc:
d3:a5:fb:56:19:97:2d:48:af:6e:d9:d2:61:f8:94:c9:43:98:
e6:f4:bf:e4:6d:b5:c7:c3:88:0d:d6:ae:4c:da:d7:9d:48:36:
c3:27:fb:a7:8a:e2:55:b5:d8:f8:6a:b6:ef:c4:c2:6e:77:eb:
93:9c:3b:ac:c6:90:9c:6b:8f:df:f5:2f:7b:49:8b:93:cd:03:
b7:cf:b7:27:2e:0e:33:58:4a:95:f9:f3:2f:cd:20:4c:02:8a:
1c:51:26:10:2f:e0:bc:0d:62:76:e2:c0:19:a5:72:71:d8:a0:
72:97:6a:f0:09:1c:33:21:06:b1:d0:23:e2:11:ce:83:dc:77:
1b:f2:a2:f3:f1:bd:95:9d:eb:eb:35:62:ed:d0:b4:7f:c1:54:
23:76:c4:90:8a:c3:84:ec:c5:a7:1e:6b:d7:d1:88:3f:54:e2:
ed:85:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:10 2025 by rpki-client