This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json)
Hash identifier: 4cLuiOFTx5W4VZjJaWmfjPM/jOWJEjjLo6PtvY8umQs=
Subject key identifier: 75:E3:91:8D:68:87:F5:EC:CB:AF:CE:A0:2A:A7:78:A5:CF:5A:54:14
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial: 2249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
Manifest number: 21FE
Signing time: Sat 06 Dec 2025 15:37:11 +0000
Manifest this update: Sat 06 Dec 2025 15:37:10 +0000
Manifest next update: Sat 13 Dec 2025 15:37:10 +0000
Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: mRlCj8sIKxT4byuBbLgELCb4KwzHCTwHbqJClWbrJtM=)
2: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9qbnU5NoZnRKr5UON4q3pztK39xd0U7HOmGKLDSw1XM=)
3: 5EDC2B56F27E11EE8704D12FC4F9AE02.roa (hash: IkaJ8i577C8HJn9L10GXsDg7dnEgDNc7V/0u1lmvtUc=)
4: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: W3kQqETMCmWx1rkG4UQFdMD9AvtHip25lMvzH/UT/O4=)
5: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: pHTu337dbSxJnT3CyDhgI/d9oBjNP9lN6T+b/cHszRk=)
6: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: VRoVKZ5apQPibJfYuezBj0SVEXkfapSpmG0vCNALPFk=)
7: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: tha3MuUqAY4uta6oQkpRf/6b/EDrjv+89kT9R3U6DBE=)
8: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: 8CfQ0/1GwUUp0J0kvZBXA7fizuzpoZuw6UptgYm1mO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8777 (0x2249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Validity
Not Before: Dec 6 15:37:10 2025 GMT
Not After : Dec 13 15:37:10 2025 GMT
Subject: CN=69344da6-9f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:7d:35:7a:8c:d4:68:87:95:79:8a:6b:17:
7e:59:98:74:3f:8c:d1:67:e9:64:e6:e4:8a:c8:b7:
1d:9b:44:75:39:3d:0e:39:2b:57:62:e6:86:0f:0d:
17:9d:f3:c1:37:62:4c:80:17:97:90:a9:ed:16:2e:
4b:9d:83:f1:88:d2:e9:e5:19:31:70:30:0b:1b:fc:
6b:e2:e8:76:ae:7b:1d:0c:f1:26:04:b4:b8:25:8e:
8c:4f:0b:d0:3c:3c:25:7b:e3:15:9b:85:c5:c0:96:
53:79:97:e1:8e:94:27:13:77:57:57:37:2b:40:2f:
15:52:da:ce:da:ab:9a:ba:0c:71:8b:ec:fb:32:1a:
a0:09:68:8d:ef:bd:11:d5:0c:03:02:32:f7:fc:fc:
59:0b:74:5c:7b:17:ec:00:dc:81:c5:da:0b:9c:52:
65:e1:00:33:e0:2f:f1:72:df:27:77:b8:88:00:d2:
e3:95:3e:59:7b:4a:f7:00:c5:56:2d:d9:0b:82:8b:
2c:8f:74:24:7d:0c:a5:1d:8e:a2:d8:83:4b:ba:af:
ac:6a:ee:ba:49:96:d3:4d:5d:e1:ee:bb:06:a7:d0:
e7:55:b0:96:9a:97:0f:23:c5:05:5c:7d:d9:57:e4:
ac:16:e6:52:e7:96:aa:9e:56:ee:56:c8:61:55:45:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E3:91:8D:68:87:F5:EC:CB:AF:CE:A0:2A:A7:78:A5:CF:5A:54:14
X509v3 Authority Key Identifier:
keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:da:4d:b9:a2:34:a1:56:17:f5:05:17:7e:cd:58:fc:71:
4e:f0:b6:c4:75:7e:45:38:d0:7a:c5:e0:69:ce:59:06:9f:c4:
87:44:93:6e:01:65:8c:f1:1a:2a:8b:61:b2:43:3c:e8:b0:c8:
c8:4f:5c:98:7a:8a:ff:dc:94:83:13:6d:53:3e:2f:ae:d4:a0:
e3:00:9c:6c:bc:cc:5f:d3:42:89:49:18:22:d4:7d:8c:d2:a8:
22:40:63:f3:24:c0:67:c3:f5:b0:34:76:b4:c4:4d:0a:4b:cd:
9f:16:38:37:90:ad:6c:25:b8:0b:1c:fb:6c:65:98:c9:cd:09:
71:ba:3a:4e:05:79:89:17:04:d3:60:da:af:01:bd:11:07:a9:
8b:bb:c5:be:2d:66:11:7f:f4:a0:1d:59:ab:c7:7c:5b:b6:48:
44:7f:28:08:bc:fc:79:4c:9a:83:f6:05:99:cf:a2:f4:8c:6d:
05:58:91:a7:fa:5b:cb:3e:20:c5:21:1c:1c:5a:c6:45:65:46:
d0:bd:34:ca:d2:5e:67:e4:c4:c8:a9:b9:54:0b:e0:ba:ce:77:
e4:b1:3c:71:c1:73:98:86:3a:97:bd:d8:fb:57:27:45:c2:eb:
4c:cc:4b:f0:76:63:d7:04:4d:e7:7f:57:51:9a:9e:f7:81:b0:
88:cc:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:25 2025 by rpki-client