This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier: Lv5SpT8Mq1OR2ZJddL9Tny4S7YERf6vPLeVTJGXf5IQ=
Subject key identifier: 00:F9:57:EA:61:C7:50:55:3C:1B:59:2A:B2:5D:B1:73:74:64:62:FD
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number: CC
Signing time: Fri 05 Dec 2025 03:47:15 +0000
Manifest this update: Fri 05 Dec 2025 03:47:14 +0000
Manifest next update: Fri 12 Dec 2025 03:47:14 +0000
Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: WVvU5qEUnXgpIuYrERN+gZ5CeznjIXCoheWpwHnbF9c=)
2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Validity
Not Before: Dec 5 03:47:14 2025 GMT
Not After : Dec 12 03:47:14 2025 GMT
Subject: CN=693255c2-678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:6e:be:21:97:35:c2:8e:21:d3:30:2e:56:
22:c9:e0:c5:50:c3:2f:f0:60:38:73:cb:48:52:e4:
56:a2:16:27:ef:0d:9a:0f:36:f5:95:08:f4:11:58:
4a:67:f2:f2:68:be:d5:2f:66:9a:eb:a2:de:6d:f7:
13:b4:53:87:e8:12:af:c2:59:73:e8:58:28:87:84:
af:b7:d2:ca:15:a4:ec:5f:e9:bd:6c:bc:7f:59:4c:
a5:44:ed:10:64:ab:40:f1:2e:12:58:92:84:65:4e:
00:ef:3d:a5:38:50:fd:50:a5:e2:9d:a1:61:39:87:
33:9c:d7:84:66:af:9c:f0:cd:23:9c:93:52:68:7a:
38:93:2d:71:1a:28:93:14:86:53:0a:1b:f2:91:9a:
b2:4b:ba:d0:22:4f:c1:2c:38:69:4e:d8:59:1c:82:
ac:fc:2b:f1:75:71:16:e8:82:f5:51:3c:69:74:0c:
b1:b7:f7:4e:6b:94:b3:07:5a:9d:de:f7:07:52:c6:
60:e7:b0:7c:c1:c6:d7:2f:43:5c:9c:90:01:92:78:
e7:4e:56:2f:95:13:36:46:d8:17:a1:1c:9b:c1:a2:
c8:1a:40:c8:66:1b:98:53:75:74:70:52:03:02:71:
ba:47:48:73:4e:f3:08:1a:cc:73:4a:66:03:4f:92:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:57:EA:61:C7:50:55:3C:1B:59:2A:B2:5D:B1:73:74:64:62:FD
X509v3 Authority Key Identifier:
keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:41:81:0f:45:26:2c:58:ec:85:0b:e1:f4:eb:42:2a:82:
c6:be:21:f2:13:67:58:09:4c:95:7c:d3:04:49:43:ad:f6:b2:
f4:ff:3b:bc:a5:45:e9:16:81:fb:40:35:dd:0d:11:e6:31:1f:
05:79:76:02:71:ec:91:fc:58:a3:ac:bc:3f:1b:70:cd:9d:d5:
5b:f1:70:eb:9b:76:4b:9b:23:1f:ca:6d:c3:41:0f:1f:53:b2:
1a:59:ef:4f:dc:09:df:a5:b6:ef:28:34:4e:16:71:a2:32:92:
39:5e:b1:50:d3:ae:c6:2e:d2:bd:54:d3:9c:24:dd:53:93:94:
21:df:2f:f7:b6:4b:1b:ee:58:5c:d2:e6:c5:68:78:83:97:78:
00:ff:fa:08:28:9b:76:55:f0:18:9c:e3:03:21:a0:29:a3:e6:
de:1e:17:a4:7c:79:db:8d:cb:9c:20:e1:bf:3c:da:79:d4:3f:
18:a6:4c:b6:b4:13:c8:34:91:d3:dc:11:c2:11:fc:21:26:5b:
e3:3e:5d:32:22:88:9e:ef:3d:0c:52:20:a5:68:05:da:4a:cc:
cf:37:c0:9d:67:e9:f8:11:1a:17:86:d5:d4:ea:7f:63:33:72:
10:fa:1d:92:35:0e:d7:21:a7:ee:3e:9b:be:62:bd:36:6d:8f:
52:28:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:36 2025 by rpki-client