This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json)
Hash identifier: VNT36V2vBRhL8/dzXzcLWeIZ2IBalZV2Va1ES1tBYaA=
Subject key identifier: 9C:42:53:E9:91:78:45:22:3C:28:A2:81:74:D9:4A:FA:C8:13:34:9D
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
Manifest number: 060E
Signing time: Thu 04 Dec 2025 21:36:57 +0000
Manifest this update: Thu 04 Dec 2025 21:36:57 +0000
Manifest next update: Thu 11 Dec 2025 21:36:57 +0000
Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: 2OWwXwkzy2v+Vj6iwlXKyB+g7Nl81YQczwWe+UxeHLU=)
2: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: weFEOxrVQ1R73fykzCNyC6/gZBqdWvZXSpKP3W9J0hQ=)
3: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: SoMp5duXOAwol503IxpDfQSWDWEVUuEjZp2f9lzEdw8=)
4: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=)
5: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: vWRcSTu3hKVKTzFiY2NVAPZ7PA6+HMwNwvKyVpnCyx8=)
6: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: ywF33ZMJOUcpgMUIi20lZlpyg8JGMBrKC6zMJ/6wuTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Validity
Not Before: Dec 4 21:36:57 2025 GMT
Not After : Dec 11 21:36:57 2025 GMT
Subject: CN=6931fef9-8852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:98:ef:2f:d7:0a:97:61:ee:22:57:ef:93:
78:b6:cd:03:33:b3:ab:48:ca:b3:a7:be:ae:14:b5:
32:14:8a:2c:2c:08:e8:26:a1:31:65:6c:fd:ff:47:
37:89:fd:a3:ef:d5:1b:79:8d:67:c3:07:cf:d2:93:
16:aa:43:94:bf:4d:82:b9:64:44:2c:76:ae:b3:14:
41:66:8b:3b:0f:95:c7:37:e6:80:75:c6:a9:95:2d:
27:4b:53:4c:4b:72:56:8d:65:7c:c0:fa:9d:ca:a0:
74:7a:db:56:4f:67:8b:c0:54:f9:a8:0e:07:eb:dc:
db:d5:af:77:d6:c0:3b:f9:40:30:70:7f:1a:e2:8a:
04:19:a2:79:d6:84:2b:5d:39:66:b0:85:16:19:08:
a0:02:a3:11:3f:ca:34:43:5d:1c:4e:29:9c:e1:ce:
13:1e:30:34:0a:5c:dc:d7:d6:04:b4:8b:57:50:1e:
a9:be:79:7d:fd:f6:2d:5d:2d:66:2c:a6:18:80:4a:
af:5e:65:ee:28:8a:05:8c:41:24:55:6e:b6:9b:69:
c4:77:36:db:50:a0:c9:27:7f:21:8c:25:55:5a:26:
86:80:76:4d:d6:78:3e:84:24:f3:a9:a9:44:2c:fd:
94:96:98:26:7c:43:39:08:c3:79:0c:d8:df:28:03:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:53:E9:91:78:45:22:3C:28:A2:81:74:D9:4A:FA:C8:13:34:9D
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:b3:ae:9f:8f:64:a9:e7:0d:16:b8:ac:cf:2a:16:24:36:
4b:b0:9f:14:0d:70:7c:99:e6:ea:2b:f5:a3:4f:58:df:f3:51:
e3:75:ac:d0:48:c1:b3:cf:1e:d2:eb:d2:cb:64:c8:d9:29:4c:
3f:89:b5:ab:7c:82:5f:8f:5e:a4:0d:a4:a0:51:e4:10:7d:36:
0e:77:62:59:8b:20:42:5f:33:18:ff:71:8f:e5:1d:ae:69:be:
5f:1d:b1:be:bd:fe:87:91:6d:bf:d3:48:b4:51:0c:6b:ff:58:
11:87:35:de:5e:fd:7a:ce:33:e6:52:d6:c5:66:eb:50:b2:32:
e1:a6:2c:97:a6:c6:f6:b3:38:4c:2e:e0:67:6b:8f:f1:c3:44:
1a:58:2d:44:37:46:8b:4a:dc:68:55:cb:25:84:ca:f5:74:e4:
da:27:88:1d:2d:35:5d:ee:a3:9a:c8:17:69:1d:dc:bb:1c:3f:
76:ab:6d:9d:9c:08:ab:18:3c:9e:e6:29:e1:3d:79:95:0f:09:
00:de:43:47:7b:a6:4f:46:f2:da:36:44:33:7d:57:b8:34:83:
6c:37:96:8f:c1:a1:be:a3:0b:6e:17:74:c0:23:b1:3a:16:d1:
ff:9a:65:62:05:2f:b9:f2:fe:be:85:31:6a:5d:9a:2d:f9:b7:
e4:d5:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:46 2025 by rpki-client