This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier: sjTKYWNwHCEBMcE3C0FldF5Qj/wYhCHvFetetSGvNVA=
Subject key identifier: AC:E3:B3:A3:37:0F:2B:2C:12:98:89:AB:F3:A0:8F:D9:48:49:BB:09
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number: 03AB
Signing time: Thu 04 Dec 2025 23:16:49 +0000
Manifest this update: Thu 04 Dec 2025 23:16:49 +0000
Manifest next update: Thu 11 Dec 2025 23:16:49 +0000
Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: PyGkxgJNc9lGf2mVT58e0cDMQiO7CtqxLK+o7iFxDn8=)
2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: rYHOV+63ySve2lLbeG71M0SUbKfF20oOi9uas6YcF+A=)
3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=)
4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: Qa66QzBziJdm9L3gqGzaylVuTVRVatV8AuZ/B+L6zpk=)
5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=)
6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: hUEi5Mxm1d2fdxW2k3TL0lrkSD9s1MOK7bqcVMZxr0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Dec 4 23:16:49 2025 GMT
Not After : Dec 11 23:16:49 2025 GMT
Subject: CN=69321661-4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:fd:dd:56:57:ce:e5:87:69:7f:83:f4:02:
53:fb:d3:d6:c0:54:77:0e:ef:9c:1d:07:9b:90:00:
89:9e:01:59:2e:5b:8d:37:9b:0b:da:df:c0:59:29:
5b:60:bc:ea:59:9d:22:16:e6:4c:33:fb:8e:12:a6:
4a:eb:51:fa:f9:a3:7d:d2:ed:d9:71:aa:69:44:4d:
93:e2:a0:ff:e7:dc:25:7a:82:20:61:f4:b6:33:ff:
de:e4:dc:20:d6:0c:c9:24:72:e9:9f:72:4b:a7:c1:
5a:89:36:5a:e4:88:f6:48:b8:91:e5:75:20:72:9c:
08:2c:be:ce:eb:0d:31:cb:f4:ce:54:17:83:52:a3:
c3:c1:20:b6:aa:07:87:cb:e7:f9:b6:34:bf:b8:64:
9d:9d:a7:7c:a8:c8:42:72:42:4f:34:b6:d2:3a:7e:
0e:a6:3b:fa:4f:d4:7e:fa:99:f0:90:57:53:49:a7:
dc:f0:57:34:b5:83:0d:5a:94:ed:24:d0:7e:6e:d2:
d1:46:dc:fe:a0:8c:d1:25:88:42:91:2a:ec:02:8b:
56:1f:90:ab:1a:d6:07:95:26:86:4f:a7:9e:36:10:
1c:be:37:90:ad:d0:cd:ef:92:be:49:f4:b6:0a:3f:
f0:5a:ee:9a:68:b6:fe:0a:ef:92:7b:2f:f7:32:13:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:B3:A3:37:0F:2B:2C:12:98:89:AB:F3:A0:8F:D9:48:49:BB:09
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:71:ee:26:3a:01:f2:d4:a7:ae:06:71:38:a9:7b:8c:9a:df:
a5:9c:d5:83:33:85:aa:26:b8:b9:7b:57:b7:0a:45:af:59:f8:
27:99:ed:16:11:06:3b:b1:ab:11:1e:05:b6:f8:14:83:f3:e5:
01:82:f0:10:26:83:04:4b:33:51:76:b1:eb:78:6a:b2:7f:e7:
c3:5b:9b:d6:3a:61:25:50:b2:3d:22:84:99:7a:25:d5:7e:af:
fa:3c:a8:d9:ca:9f:a7:af:16:b3:17:2f:ae:73:f1:1a:be:66:
3d:bf:b4:d9:66:a5:3a:c5:2d:71:27:58:e3:d9:17:9a:66:b4:
eb:d7:38:a6:08:64:23:52:b7:13:6e:88:69:25:c0:92:a0:ad:
d0:f4:35:90:b2:31:fe:5b:25:13:5e:3a:f4:ce:c6:9f:19:49:
85:89:f3:bc:50:ec:09:ee:9a:60:0a:6c:25:a0:ad:af:34:5b:
b2:6f:e7:b2:61:7f:a4:76:db:7d:e7:11:10:06:be:0c:d8:4c:
0c:82:7a:0e:98:44:af:9a:66:fa:f1:36:d8:a1:ad:d7:ee:f5:
61:f0:fd:5b:14:57:dd:f6:6f:b5:94:b8:b9:0e:6f:ff:71:72:
3c:fd:d4:eb:88:2c:08:52:5e:ae:9b:f5:32:dd:67:13:97:bb:
71:92:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:36:04 2025 by rpki-client