This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
File: OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json)
Hash identifier: Fpg5osMbw+rSahIl5RvUx+t7+G2MhLSAJVfGvZducGA=
Subject key identifier: 65:3E:9C:0B:F6:29:94:8A:AF:1E:62:25:EA:1E:92:16:B6:8F:72:C1
Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
Certificate issuer: /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
Manifest number: 34
Signing time: Fri 23 Jan 2026 06:33:33 +0000
Manifest this update: Fri 23 Jan 2026 06:33:33 +0000
Manifest next update: Fri 30 Jan 2026 06:33:33 +0000
Files and hashes: 1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: bRFaQAHVmF3cbcEdGWM9jpjSDNMSnssKTUcmmbP0Us0=)
2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: FoI4HeON78cJuhYbJvTWNmf/HypRelSKwk6lwHyGL/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Validity
Not Before: Jan 23 06:33:33 2026 GMT
Not After : Jan 30 06:33:33 2026 GMT
Subject: CN=6973163d-15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:05:5c:ff:95:82:08:a0:bf:21:7c:f3:8f:
ad:f1:64:0e:5d:89:16:36:8a:66:2e:2f:7f:84:d2:
17:d2:5d:42:d8:60:8c:1d:b7:92:ad:5e:59:d9:81:
39:89:70:9f:4f:88:27:7e:ff:a7:f5:08:c6:02:1c:
b9:8d:ee:27:c2:3e:82:0d:08:67:3d:1e:34:e4:af:
a7:08:d6:3c:c8:23:e2:3c:00:51:9f:f7:39:b8:b8:
3f:84:a9:00:2e:e1:05:96:24:24:19:30:db:a2:1e:
69:0e:fe:5c:53:02:dc:34:20:cf:a5:9c:76:15:49:
13:62:a5:e3:e1:b4:98:9f:bf:63:ab:dc:e2:53:c1:
0c:ec:72:6c:fa:5c:58:d2:5f:00:d3:f1:a5:0c:72:
19:fb:9f:a6:25:bb:82:1a:37:a7:76:b3:2d:14:07:
0b:74:6f:62:2f:28:a0:23:6b:9d:f1:b7:3e:b6:a9:
96:51:c7:a6:23:f6:b7:7b:e8:49:60:45:53:66:ba:
2c:c1:5f:68:a9:b4:cc:9a:57:b1:06:9c:ec:78:8c:
4a:c8:bb:af:7f:4f:03:fc:a7:b5:a6:00:9a:b7:9c:
04:73:d8:b7:a9:71:6c:06:3e:5c:bf:73:c1:06:af:
e9:74:02:b8:15:a3:87:ce:f4:a6:06:77:85:c5:1e:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:9C:0B:F6:29:94:8A:AF:1E:62:25:EA:1E:92:16:B6:8F:72:C1
X509v3 Authority Key Identifier:
keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:20:7a:7e:f5:7c:01:17:8e:89:4e:31:9d:01:3f:c1:f0:eb:
ec:c5:84:47:0d:19:b3:1f:98:4d:bb:18:f0:94:cc:26:25:7d:
37:09:55:95:5d:2d:02:0d:f0:e1:cd:90:01:77:c9:57:cf:58:
d7:a5:f4:12:ee:35:ad:19:94:3b:f4:a7:74:92:86:46:47:e9:
4e:ec:34:e5:71:04:07:16:48:e7:43:1d:de:2b:d5:6e:9f:05:
6b:ca:36:ab:24:82:d8:c1:94:62:29:9f:80:55:ea:0c:ae:3e:
54:3a:1c:01:2b:88:88:d0:93:13:8d:29:15:30:10:fb:9b:1e:
84:28:1a:a0:bf:7b:33:9b:0f:00:88:f4:cc:a2:b9:d2:3f:e7:
1c:64:5b:00:c2:3e:a6:e2:37:75:6f:6a:68:3b:af:a4:91:fc:
e8:fc:7e:79:ef:93:9b:55:74:fd:9e:a0:e2:9e:41:4d:bd:09:
15:38:e6:ea:a7:6d:20:ea:7c:17:99:36:bd:de:ba:06:27:6c:
9f:60:bf:f0:09:ba:66:b9:5f:d6:9b:8a:15:73:26:dd:44:2b:
23:ca:8d:80:96:b7:fc:23:1e:04:e2:f0:2c:1e:cf:ae:4e:0d:
88:69:90:16:0a:dc:ae:41:37:e5:a1:04:21:6c:95:07:8b:60:
c2:f9:10:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MUU3NDExMC8GA1UEBRMoMzk4REI2NDIzRkM1RTBGNzc3NEYyQTMzMzFEN0RCQ0M0
QURCRjUzNjAeFw0yNjAxMjMwNjMzMzNaFw0yNjAxMzAwNjMzMzNaMBgxFjAUBgNV
BAMMDTY5NzMxNjNkLTE1ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnUQVc/5WCCKC/IXzzj63xZA5diRY2imYuL3+E0hfSXULYYIwdt5KtXlnZgTmJ
cJ9PiCd+/6f1CMYCHLmN7ifCPoINCGc9HjTkr6cI1jzII+I8AFGf9zm4uD+EqQAu
4QWWJCQZMNuiHmkO/lxTAtw0IM+lnHYVSRNipePhtJifv2Or3OJTwQzscmz6XFjS
XwDT8aUMchn7n6Ylu4IaN6d2sy0UBwt0b2IvKKAja53xtz62qZZRx6Yj9rd76Elg
RVNmuizBX2iptMyaV7EGnOx4jErIu69/TwP8p7WmAJq3nARz2LepcWwGPly/c8EG
r+l0ArgVo4fO9KYGd4XFHoVrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZT6cC/Yp
lIqvHmIl6h6SFraPcsEwHwYDVR0jBBgwFoAUOY22Qj/F4Pd3TyozMdfbzErb9TYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRTc0LzM3QjE1OUZFQUIz
RjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBkM1R5b3pNZGZiekVyYjlU
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT1kyMlFqX0Y0UGQzVHlvek1kZmJ6RXJiOVRZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
RTc0LzM3QjE1OUZFQUIzRjExRjA5NUExQTYzN0M0RjlBRTAyL09ZMjJRal9GNFBk
M1R5b3pNZGZiekVyYjlUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABYgen71fAEXjolOMZ0BP8Hw6+zFhEcNGbMfmE27GPCUzCYlfTcJVZVd
LQIN8OHNkAF3yVfPWNel9BLuNa0ZlDv0p3SShkZH6U7sNOVxBAcWSOdDHd4r1W6f
BWvKNqskgtjBlGIpn4BV6gyuPlQ6HAEriIjQkxONKRUwEPubHoQoGqC/ezObDwCI
9MyiudI/5xxkWwDCPqbiN3Vvamg7r6SR/Oj8fnnvk5tVdP2eoOKeQU29CRU45uqn
bSDqfBeZNr3eugYnbJ9gv/AJuma5X9abihVzJt1EKyPKjYCWt/wjHgTi8Cwez65O
DYhpkBYK3K5BN+WhBCFslQeLYML5EFc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:30 2026 by rpki-client