This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: 0zEL1+zeYmPiPBocK5Qn7mcZIX5cPiuZYrGuFMOa5iU=
Subject key identifier: D9:EE:0E:F6:AA:4D:9A:C6:DF:CB:D2:54:40:1D:80:DA:F5:EC:98:1C
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 14A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 148A
Signing time: Sat 06 Dec 2025 16:26:47 +0000
Manifest this update: Sat 06 Dec 2025 16:26:46 +0000
Manifest next update: Sat 13 Dec 2025 16:26:46 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: ez75I0eZToLQsRwf5J+rUmyV0E/t0KY9W2qaOYTwpGY=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5286 (0x14a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Dec 6 16:26:46 2025 GMT
Not After : Dec 13 16:26:46 2025 GMT
Subject: CN=69345947-3256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:e0:23:d6:12:7f:04:fd:bb:af:dd:10:d8:
ec:62:e6:8f:d5:ef:f9:e8:4d:51:b9:ff:96:33:a0:
42:c2:ae:bd:4e:3b:df:f7:49:59:8c:a5:28:5d:06:
cd:9a:f9:62:1c:7c:a5:e2:08:6c:8a:69:39:d4:cd:
ed:7c:55:c7:bc:8c:e2:b4:2c:95:61:c7:84:d1:0d:
62:0a:51:57:ae:9c:ab:5f:c9:9e:15:73:04:41:8b:
7e:59:70:ed:98:68:fe:9a:19:e0:46:c9:95:1e:3e:
e2:c6:6f:71:29:dd:13:31:83:c6:c9:99:6b:5c:2b:
ed:c9:18:a1:ca:9e:0a:c5:9b:df:d6:a9:7f:18:94:
fa:7f:b7:09:1c:97:97:8a:e0:62:1a:f4:78:af:f0:
6c:0d:ec:16:55:41:10:2a:6c:c4:78:b9:15:7d:b2:
c5:2e:7b:73:b3:72:af:7f:1d:a6:a5:35:d7:10:2c:
d4:8b:a5:1a:eb:27:0a:67:74:6d:81:09:40:e5:dd:
3f:ac:d1:fb:cc:b6:ec:12:66:de:2a:31:c0:25:6d:
f2:08:9a:2f:1a:f8:7d:d8:1a:a9:d8:5b:f9:b4:4a:
2b:d8:ee:98:ff:5f:45:a7:a5:fc:03:ae:ed:07:7a:
ea:21:8f:27:0e:d9:9b:e2:cc:15:f2:2a:f0:54:6e:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:0E:F6:AA:4D:9A:C6:DF:CB:D2:54:40:1D:80:DA:F5:EC:98:1C
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:ed:e5:4a:4d:98:3f:b0:93:d6:7c:ff:6c:f8:77:9e:b0:
cd:be:16:21:94:60:09:1a:c1:e8:0b:dd:9b:47:46:a2:8b:89:
56:fe:53:76:f0:ae:62:10:2e:a3:93:c6:9e:d5:cb:41:bf:f4:
81:a6:f7:55:88:62:81:d2:47:17:69:8e:cc:b1:cb:11:43:a9:
1c:24:a2:05:df:90:c3:83:7a:72:2f:32:50:6c:bb:16:cd:84:
b1:a7:84:65:5c:c0:dd:37:f9:92:8c:ff:4e:12:6d:ac:0b:fd:
af:39:40:de:03:40:b6:dc:0a:e3:e4:de:ec:53:9d:56:df:92:
f6:95:72:64:c7:8e:be:c6:23:9d:fd:66:92:26:c7:29:83:ae:
7f:b4:f5:51:1f:eb:36:eb:53:2d:92:27:2e:2b:ef:ca:3c:fc:
a0:c2:78:0a:f3:d9:db:9c:61:98:fb:a0:b2:0f:7d:37:09:d2:
1b:39:6f:4f:77:df:88:8e:5d:bd:e0:52:6a:f4:1b:3d:c6:5f:
fc:5b:31:31:f8:fc:7c:89:c6:18:e8:dd:e8:3d:a9:d5:ed:eb:
cc:a3:9f:5d:a6:4c:55:5e:12:90:32:7c:c0:ac:ec:d9:19:95:
ae:c6:9d:86:a6:05:a1:38:f4:51:3e:14:8e:13:a0:c3:bb:45:
b1:49:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:58:16 2025 by rpki-client