This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: ibCoTKw2XyuvbhlRd++q/6Ei1uRiLNZUe10JQ3qxjwQ=
Subject key identifier: 09:4B:9A:18:64:B3:E1:98:48:86:CD:8C:71:B5:61:12:19:50:91:03
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 043B
Signing time: Sat 20 Dec 2025 23:31:34 +0000
Manifest this update: Sat 20 Dec 2025 23:31:34 +0000
Manifest next update: Sat 27 Dec 2025 23:31:34 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: 0zvW+7gjOV+9ysVvzXvbrGkJrmZ09tKj+L7x9PnAYAI=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Dec 20 23:31:34 2025 GMT
Not After : Dec 27 23:31:34 2025 GMT
Subject: CN=694731d6-a0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:54:46:e8:44:1d:bb:89:a1:92:24:a9:22:
9c:c3:d8:21:f4:15:65:ce:d0:3b:07:bf:2f:5b:b3:
31:8f:4a:d9:96:15:9d:cd:0a:2a:1b:91:d2:6e:2a:
2c:2a:7f:0f:34:5f:1a:aa:44:22:ff:b0:6e:5f:19:
91:08:2d:16:88:16:b4:d3:5b:56:38:c1:10:21:de:
79:50:28:d8:63:c0:34:01:fe:dd:2e:a4:55:9c:ae:
3b:76:8e:e3:da:dc:ec:57:b0:e4:0f:a7:44:74:dc:
26:9e:ea:3d:96:57:b7:36:60:72:27:ee:68:b8:20:
5f:24:6a:53:73:4a:ca:1b:4e:21:2d:27:d4:2d:c5:
d7:3e:d0:49:b1:09:a1:5e:57:b3:7b:dd:01:b9:1b:
c3:6d:f8:69:c7:78:0a:10:f2:ab:7b:d2:a3:45:32:
d2:50:3c:a0:38:cb:ec:ab:c6:f2:d6:be:08:8c:fc:
3d:e0:1c:54:24:d3:2e:2f:61:bc:ac:14:ba:36:a9:
4b:24:df:18:0e:cf:da:5a:b9:79:94:08:f4:bb:7d:
7d:9e:4c:58:40:25:11:56:80:53:86:9d:dc:50:73:
a9:76:39:2a:43:84:50:ab:39:45:45:30:b7:30:f6:
d1:6b:ab:b2:a8:50:43:98:f1:22:e9:55:4e:80:4a:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:9A:18:64:B3:E1:98:48:86:CD:8C:71:B5:61:12:19:50:91:03
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f1:0a:f1:0a:8c:f6:c7:25:b5:79:89:d6:6e:db:83:75:d8:
be:3f:9b:4d:5f:36:e0:aa:45:63:cc:43:65:a6:31:4e:7b:d2:
5b:74:aa:27:00:d5:a3:f3:77:2d:2f:60:e3:b0:f2:12:c9:53:
d6:cd:76:2b:7d:ac:21:39:de:0f:16:17:0c:91:db:ac:99:86:
4d:2d:c3:8e:ce:3e:8b:73:37:b8:75:1a:fb:40:6a:47:bb:db:
de:30:7a:1e:e1:4a:b6:f7:cb:eb:bb:1c:99:98:03:2e:46:65:
f8:04:ea:ed:25:86:85:59:3c:ca:82:37:9d:b5:e0:39:50:27:
97:9d:50:22:c3:09:fd:e9:a9:b2:74:01:65:04:51:ca:f6:50:
70:8a:7e:c5:d1:6f:ee:b9:ef:85:d8:69:84:ef:63:ea:53:5b:
8b:ae:7a:dd:a0:8f:ab:0b:0b:70:98:e8:43:ea:61:7a:79:04:
f1:85:ea:3d:32:6b:b0:30:4a:4d:7a:aa:5d:d4:b7:84:4b:ff:
a1:fe:75:3c:37:f1:e1:52:d0:77:4b:fc:30:a9:03:6d:f9:84:
81:a7:92:d5:50:c5:8d:18:af:c4:c1:f3:91:8b:94:86:f0:0d:
e3:47:73:73:c5:6d:ea:cb:f1:27:6b:63:92:ff:52:bf:d3:9b:
20:95:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:21:16 2025 by rpki-client