This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier: rl385cpyzQxI5c0mjHpRVAx4aU64JK7xPLyI5oy6WU4=
Subject key identifier: 78:5D:A1:AC:FC:63:48:57:DA:4B:77:D9:C5:A0:78:7D:CC:82:D1:21
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number: 65
Signing time: Sun 25 Jan 2026 06:06:53 +0000
Manifest this update: Sun 25 Jan 2026 06:06:52 +0000
Manifest next update: Sun 01 Feb 2026 06:06:52 +0000
Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: xlB00hOvRfkBhkddQeRIh9WZtDU5jevYGQExbHWpjlA=)
2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: Rsq6/I7qJeC3VPVdtIV32k6eG9/KeOaeWD2g/nms+lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Validity
Not Before: Jan 25 06:06:52 2026 GMT
Not After : Feb 1 06:06:52 2026 GMT
Subject: CN=6975b2fd-c9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:70:b3:35:51:e2:3b:fc:59:a5:19:45:b0:
ec:a2:db:42:d7:3c:20:e3:20:b3:29:56:f0:5e:bf:
59:98:70:0a:93:10:09:6b:0b:06:e4:6c:64:1e:6a:
67:15:a2:e1:93:c0:ac:ec:55:9e:5f:19:6f:e5:3d:
d4:de:c6:ea:f6:bb:ca:96:56:a5:fb:34:cb:33:8f:
a8:89:1d:96:48:73:cc:6b:ed:55:0f:b9:6a:de:21:
49:14:49:5d:41:32:8d:db:09:b5:75:cb:5a:e2:07:
03:ca:16:b0:b8:87:64:ad:79:09:20:e4:99:63:9d:
cc:09:58:e4:62:88:db:e2:51:00:41:1d:7c:3b:91:
96:ee:70:9e:24:96:c8:9c:af:38:bb:b1:75:f5:f9:
f4:5f:64:b5:0c:15:f5:00:d9:66:2b:2d:ff:bc:81:
13:fd:93:db:b6:95:bd:2a:bc:ec:77:92:e1:c7:8f:
a6:22:60:26:b0:54:3a:f0:6e:9c:ec:c9:e5:7f:6d:
ee:2a:b1:f6:1b:ed:c3:77:46:d0:32:ca:77:e5:63:
21:a0:a6:64:28:ca:8b:47:18:52:0e:f1:5f:99:dc:
c6:87:d5:63:7a:f4:b5:73:b9:b8:1f:d9:43:dd:f1:
33:f0:5b:7c:6b:ca:da:23:92:c8:4c:95:97:c5:b4:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:A1:AC:FC:63:48:57:DA:4B:77:D9:C5:A0:78:7D:CC:82:D1:21
X509v3 Authority Key Identifier:
keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:1c:bb:eb:2e:37:f6:16:45:dc:ed:2f:45:24:40:95:dc:
26:87:26:c5:a2:0b:1e:d8:f3:8a:68:52:8d:85:b2:90:b3:dd:
98:f4:f3:1a:36:6a:2a:f4:d7:81:6d:e3:e1:1f:b1:fb:49:7d:
b7:b9:7c:54:aa:c8:e2:f9:70:6b:9a:f3:a2:3a:a9:2f:14:34:
45:2a:36:8b:69:67:4f:97:7f:08:ff:3c:bf:25:22:73:e7:d4:
36:d9:93:7c:ad:d4:42:3e:34:24:28:44:30:72:6f:67:bf:d4:
f1:2b:52:2f:11:01:00:62:a0:d5:6b:ac:13:5b:14:1c:c9:51:
97:5c:4c:91:8c:e5:18:4a:55:5c:88:6e:f6:cd:16:e0:b0:50:
50:79:f4:ac:79:aa:5b:29:c5:3e:f5:60:21:d6:2b:8a:d3:09:
95:45:c2:f2:7e:ec:ff:f5:a4:47:75:29:7d:d9:a6:26:d2:44:
17:d9:cd:b5:e4:5b:36:0f:40:10:cb:3b:64:99:40:a0:e7:9d:
f4:af:43:f3:31:ef:01:9a:a6:b9:48:6d:2e:e8:d1:26:94:f4:
71:8c:40:32:a6:be:d6:d9:b0:70:cd:30:4e:a5:a9:e3:11:eb:
ac:85:f6:64:65:e4:b2:27:95:af:f6:13:47:ee:90:d0:03:5c:
4f:cc:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:35 2026 by rpki-client