This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File: DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier: oXZMiXGwmkKvTXjCqO5p2Uk3edZgKptuDUtDM25nEUo=
Subject key identifier: 00:B9:C0:DA:F6:E9:23:86:82:80:1E:A3:F8:45:66:22:E0:AE:3C:C7
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer: /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number: 74
Signing time: Fri 05 Dec 2025 04:44:38 +0000
Manifest this update: Fri 05 Dec 2025 04:44:37 +0000
Manifest next update: Fri 12 Dec 2025 04:44:37 +0000
Files and hashes: 1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: JX35NHCr0ZiEyr0U9TLjNQ8F290QRT3AB1/q57DwJlE=)
2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: ttGRTVXm63FmqLPQgqhgqVrA4iCgFY4E8md2K51N5m0=)
3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Validity
Not Before: Dec 5 04:44:37 2025 GMT
Not After : Dec 12 04:44:37 2025 GMT
Subject: CN=69326335-4f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:67:56:8e:ee:24:c4:62:12:c0:8b:31:05:
1d:b2:c0:c8:82:68:1e:df:66:9e:fb:42:72:5d:9a:
b0:01:40:ba:71:85:7c:b6:f6:d7:52:00:cd:c8:33:
73:24:90:77:ac:fd:4c:66:d1:7b:df:02:71:5c:ad:
8d:4d:52:58:cb:a3:96:b2:e1:0e:82:8d:c7:43:27:
10:e4:09:a3:76:e9:2d:2f:14:b6:af:4e:6f:6f:6e:
82:07:cf:b0:46:25:d0:50:7a:46:e7:ca:da:05:a1:
69:f7:16:5f:e2:d9:cb:f0:94:f3:3c:52:60:c8:27:
34:39:72:68:91:ab:19:c6:03:f1:5d:61:37:d2:10:
75:83:a7:05:73:cc:cd:07:32:fe:ae:f6:10:80:9f:
0f:29:b0:a4:9f:eb:b8:5b:86:00:73:bc:e9:bb:14:
8f:7f:81:b6:19:db:06:d6:48:7b:f1:c9:08:07:31:
0c:39:a4:b4:e0:ea:e5:42:f5:fd:ef:c2:b7:b0:b0:
05:b8:5c:db:91:1c:72:aa:97:7a:c2:66:a7:f0:d1:
23:dc:19:63:ea:4a:2a:85:0b:26:c2:0d:3f:79:56:
33:0d:4c:fc:7c:de:9d:c6:77:46:06:e8:13:dd:b6:
44:d9:93:56:60:99:e3:02:84:f0:ac:7b:de:d6:1b:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B9:C0:DA:F6:E9:23:86:82:80:1E:A3:F8:45:66:22:E0:AE:3C:C7
X509v3 Authority Key Identifier:
keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:21:80:82:cb:bf:5f:ce:de:8e:8d:f9:3d:49:b0:b7:50:
03:d1:36:9b:21:41:da:54:4e:07:4e:ca:ed:d7:ea:00:b2:be:
2f:e5:14:64:86:e1:60:34:54:ed:1b:54:64:d7:fe:d9:1b:74:
f6:b5:c4:de:c6:a0:67:e4:4b:34:3a:41:e2:cf:af:f8:1f:37:
5b:a4:82:c5:8b:35:b4:eb:67:cc:90:93:99:33:1f:f9:09:77:
68:54:75:6c:6c:48:3b:c7:41:81:28:71:5a:8c:8e:c0:32:76:
70:72:00:68:dd:7e:8b:8b:8b:18:5b:bc:55:25:92:34:89:7e:
4e:c5:a3:ab:5d:fd:79:d0:52:b7:99:0e:a5:41:1c:8c:d4:9e:
51:eb:c3:fb:82:cc:48:a1:40:02:60:17:c4:db:e7:27:42:59:
25:97:58:bd:07:4c:ab:a4:a2:92:63:0a:cd:c3:0b:32:1f:a9:
9b:90:d7:2a:4b:7f:1e:37:8f:c0:52:20:54:36:08:4e:91:52:
bd:94:31:56:ff:27:13:fe:b1:03:9e:61:03:64:88:df:ec:d4:
72:11:62:1d:87:2c:4c:97:e6:43:7a:5b:29:99:09:6a:dc:6e:
ee:ca:0c:16:d3:54:c3:a9:49:d8:f5:fe:29:4e:d3:5a:c9:83:
52:76:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:44 2025 by rpki-client