This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json)
Hash identifier: vjVUj5jkPjOzilrAs6m0k1iyzYEWRy0/arN4UkzA4RM=
Subject key identifier: 76:13:08:70:C2:2D:1B:07:B6:73:1B:73:A3:82:67:6F:96:91:AA:1E
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial: 036E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
Manifest number: 0365
Signing time: Thu 04 Dec 2025 23:20:32 +0000
Manifest this update: Thu 04 Dec 2025 23:20:31 +0000
Manifest next update: Thu 11 Dec 2025 23:20:31 +0000
Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: ON4QeVDlFicTckdVFLpCUUmX2TP/igB7gcBqTzjBh9E=)
2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: 4q86TaevYN4wi8FIhE98uWT6GCxVtXHFfpTKfJMTYtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Validity
Not Before: Dec 4 23:20:31 2025 GMT
Not After : Dec 11 23:20:31 2025 GMT
Subject: CN=69321740-a0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f6:c7:bb:10:5b:c7:39:fa:ea:c6:75:29:c4:
ce:f7:0f:c1:48:d8:99:76:0d:69:11:10:65:b3:58:
19:c6:a9:19:47:b4:e4:24:5a:81:a4:76:79:34:cb:
ae:37:9f:f8:36:61:37:10:e7:86:3c:c9:8e:ee:c4:
f6:a8:ce:eb:4c:04:a3:73:ac:42:8b:df:8a:2d:55:
24:7b:50:1e:06:1c:16:fe:6c:d1:bc:7b:24:0b:0a:
66:a4:3f:63:04:4a:54:b1:5c:56:75:94:09:4e:1c:
45:fa:1a:d4:d6:15:ff:78:ba:a5:1b:ac:db:b3:22:
69:00:88:19:33:f3:a6:99:04:04:8f:82:d6:51:ff:
e4:fb:a1:5e:e8:0c:e7:f3:4f:e0:7b:b2:a9:07:da:
6e:3f:f1:8b:60:d9:8d:6f:b5:09:a0:62:ed:1c:92:
ab:00:a6:d0:a9:29:e7:27:2f:70:9e:da:f9:00:e6:
c2:ba:b9:ec:e5:5a:15:95:8e:c0:f2:34:64:56:f1:
77:8d:e4:bb:eb:a0:29:a7:06:da:25:bf:e6:53:a2:
4e:74:87:b2:13:99:b2:e8:93:ac:68:7a:ae:f6:2b:
9c:b9:9d:33:86:d0:c1:99:26:dd:ef:2d:77:16:d1:
fe:f6:4a:51:9e:06:46:12:e0:a5:14:08:1e:a9:8c:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:08:70:C2:2D:1B:07:B6:73:1B:73:A3:82:67:6F:96:91:AA:1E
X509v3 Authority Key Identifier:
keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:86:d9:21:16:45:23:35:0f:d5:34:32:6f:03:93:68:53:9c:
cd:bc:cb:47:cb:38:d7:ab:9a:3e:41:90:a0:9f:5d:47:db:a1:
5a:e1:f7:ea:e9:eb:55:45:3d:d0:a0:45:5c:47:ad:b5:f7:9e:
aa:d8:16:61:44:f2:11:d3:9e:4b:4e:b1:88:2e:79:54:8c:b5:
d0:78:34:3f:00:21:3c:d8:ce:44:b2:82:71:84:b7:d5:22:93:
ad:ec:6f:4c:22:ff:c3:c8:55:fc:fc:31:7f:00:73:ab:43:5e:
65:06:40:bb:a8:b1:b2:aa:71:12:97:83:8d:17:c6:17:42:cd:
47:13:04:8c:7c:a8:f9:da:b9:d4:0f:e9:38:b9:01:56:1d:25:
93:83:31:61:88:0c:de:21:9c:52:d2:60:be:d0:86:87:f5:ab:
7f:3b:d5:42:b3:92:2f:ef:8b:77:93:ff:66:08:04:55:e6:a7:
92:0c:87:20:aa:39:63:28:aa:ac:a0:67:cb:7f:dc:5b:45:ba:
1a:9c:73:77:9b:e3:2a:33:63:50:c8:96:52:e7:ff:38:51:b5:
6e:80:4f:53:85:ee:fe:71:da:5b:21:91:02:7b:6b:8b:e5:29:
ba:ff:66:39:98:97:d2:cc:3e:99:ea:bf:11:02:42:0b:90:f8:
3e:70:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:13 2025 by rpki-client