This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json)
Hash identifier: O/N8j1zcmSRGsU1+NMBZJmN8BGJCLchouZnSERIbKhE=
Subject key identifier: 07:64:4D:DB:31:4D:CF:6B:8E:93:6E:9E:B6:CD:38:2F:A3:D5:CA:82
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 06FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
Manifest number: 06F2
Signing time: Sat 06 Dec 2025 20:56:26 +0000
Manifest this update: Sat 06 Dec 2025 20:56:26 +0000
Manifest next update: Sat 13 Dec 2025 20:56:26 +0000
Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: ESspteY9bwbk7ERf+dTCygRi6MljxPro0vl2xOcDfbU=)
2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: Y8t05LyVholfuhF0jMVkacpJNMh0Rpp2q0O6araserk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C, serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Dec 6 20:56:26 2025 GMT
Not After : Dec 13 20:56:26 2025 GMT
Subject: CN=6934987a-297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:15:3c:83:09:e5:f7:a0:d2:fd:9e:d6:c3:
c5:34:e4:96:fc:04:ce:65:77:61:4a:9d:8f:e8:02:
da:f7:2a:11:98:90:ac:37:fd:50:e4:a8:a1:c3:0c:
18:b4:a6:ca:e1:12:27:e7:55:59:84:47:78:69:1f:
37:6c:09:a3:a2:ba:2c:d2:a5:ff:5d:c4:48:d6:db:
29:95:19:d9:c6:a6:cc:7f:a7:ee:49:70:74:45:cc:
0f:02:91:ea:24:af:f1:14:04:b9:cd:2c:ec:c5:fb:
24:38:60:a4:f3:3c:cb:a7:a1:f8:cd:56:29:25:31:
52:45:03:2b:3b:5e:f3:cb:15:cb:95:21:14:60:42:
08:62:9b:22:5d:e2:56:d6:ce:53:97:32:0a:2b:48:
4a:ae:e1:60:32:2a:5a:d5:2c:eb:ff:39:d6:01:71:
59:3d:d6:a3:94:e4:ee:5b:33:89:ce:d9:03:5b:c8:
4e:f2:04:00:3e:64:79:7f:28:57:0f:e4:bc:ba:50:
b7:19:34:63:47:ab:27:8a:96:a4:5d:a7:1e:5d:70:
11:ff:64:0d:81:5f:31:51:ad:9c:ee:6a:e3:68:bd:
9c:3e:f2:be:cd:51:e0:2d:c1:5e:5f:06:c7:3c:32:
d6:52:1d:3e:76:61:2a:2a:55:22:e4:12:c2:e3:64:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:4D:DB:31:4D:CF:6B:8E:93:6E:9E:B6:CD:38:2F:A3:D5:CA:82
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:dc:02:61:03:d4:88:2b:91:08:ba:b3:25:f8:73:f3:a9:
8d:bc:2b:5f:aa:19:35:f1:2a:f4:12:6d:98:b5:43:f4:af:5e:
63:24:ba:e7:3f:81:53:4b:ad:b5:0a:da:e7:33:b8:f2:77:7d:
60:36:35:4f:8c:6e:78:27:de:dc:af:ac:e9:4b:07:f7:bb:2b:
71:d8:26:91:d8:60:1f:fe:98:63:87:29:ba:60:11:05:ed:fe:
82:00:c2:8b:f9:68:7e:88:2b:cc:b0:94:d3:27:43:77:ba:56:
81:ce:54:a4:bb:44:c8:30:22:4c:fb:91:d4:c2:a8:cb:8d:b9:
6d:f7:fe:c7:64:00:ff:10:25:91:76:94:36:4d:23:32:39:22:
9a:9d:0b:44:96:a8:0c:3e:4b:0a:c8:d9:d9:15:35:03:a2:cd:
a6:22:9e:07:aa:8f:f3:b8:11:49:ff:45:9f:69:33:25:98:98:
20:c4:7b:13:f8:8b:1f:e5:d3:4a:6c:cd:83:fb:83:0f:55:d9:
21:a9:0a:ae:e7:65:45:5b:e7:52:62:fb:7d:29:95:90:3e:ef:
0a:01:8c:a4:4a:78:67:a8:25:73:67:68:f7:ce:37:ac:42:f2:
dd:e7:fd:d7:dd:13:de:b9:82:c8:69:a8:e5:2e:b0:c1:a9:9d:
d8:d2:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:23 2025 by rpki-client