This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier: R+aO9tiqqq9E1XLv811uUSO/YjX14E/4eBY6D8U4Lw4=
Subject key identifier: 99:74:74:CB:E8:3B:D9:47:55:03:93:70:AE:0B:9F:9D:F3:03:D9:38
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number: 0883
Signing time: Sat 24 Jan 2026 19:59:50 +0000
Manifest this update: Sat 24 Jan 2026 19:59:50 +0000
Manifest next update: Sat 31 Jan 2026 19:59:50 +0000
Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: GXkei1u16MGuXBxooTD1NYncrX3FV/0wqaH01L/ZsCo=)
2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Validity
Not Before: Jan 24 19:59:50 2026 GMT
Not After : Jan 31 19:59:50 2026 GMT
Subject: CN=697524b6-c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:9b:e8:ba:c9:aa:81:6f:38:45:2d:9d:70:
5c:eb:4a:f6:76:e1:5e:82:8d:bc:25:15:e9:d7:67:
7a:07:03:68:78:06:46:43:b9:c9:c8:e3:0a:23:16:
ff:f5:ba:2f:56:a8:fa:6d:5f:96:3d:7b:38:6d:3b:
11:ad:00:f3:84:9c:33:71:64:82:d4:56:43:d9:49:
54:14:d9:5d:e7:96:ef:ad:a4:8f:89:c0:b0:05:24:
32:b2:a4:05:38:9a:96:df:fa:06:7f:10:a1:22:25:
3c:33:a7:1a:bf:35:1d:ad:99:61:70:a6:91:7d:50:
5e:0b:38:bc:ca:31:f2:d9:f8:40:a8:b3:9b:ba:3e:
c5:e5:76:4d:88:43:8a:c6:71:73:0d:c4:42:65:20:
93:f8:48:68:a2:68:5c:90:99:1c:87:ee:f4:e7:cf:
77:86:7f:a9:7f:18:af:2e:6b:8a:98:b1:6a:01:3f:
da:80:a4:7f:ef:e5:8b:3a:bc:a4:2c:34:e5:97:a8:
71:e0:80:63:25:c6:bd:b5:a9:8a:ea:95:69:b1:24:
17:77:5e:36:0c:b6:00:92:9d:60:0f:f6:86:d6:8c:
78:eb:e0:5a:83:06:c4:a0:7b:a9:e1:e6:e6:ba:0e:
ae:5e:3d:e6:ce:56:3c:22:32:7f:18:44:98:8f:ae:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:74:CB:E8:3B:D9:47:55:03:93:70:AE:0B:9F:9D:F3:03:D9:38
X509v3 Authority Key Identifier:
keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:29:b1:55:52:4c:86:19:b8:32:82:6c:73:6c:4d:c6:9f:14:
cf:79:e8:fa:93:5c:d9:b3:e2:6b:1e:9b:ca:2c:9c:af:a1:b4:
03:f2:c3:de:ed:28:ff:cc:c5:db:dd:73:cd:06:50:7b:74:eb:
ab:cf:3e:3b:d3:06:f7:4c:14:eb:25:2f:3f:23:1d:49:c2:38:
6d:f7:52:fe:46:26:05:1a:35:20:01:43:2d:08:26:ed:9b:86:
86:25:aa:44:54:32:e7:a7:1f:e3:d9:90:75:2b:f5:aa:fe:fe:
fc:3d:a9:f2:a4:14:19:8f:df:4a:9c:1c:d2:01:aa:11:19:79:
93:1b:fb:fc:e9:99:25:f8:52:d1:57:ed:d2:84:b5:d3:cd:84:
7d:f5:09:fc:ee:f0:72:fb:5f:ac:e0:d1:c4:2e:88:5b:8f:17:
47:c4:4f:0d:ab:a9:4e:91:4c:d5:dc:d3:13:42:89:cb:9a:50:
fa:36:1d:47:57:66:64:e9:cb:ca:da:20:38:18:06:9c:3e:28:
ee:28:1a:14:61:94:99:3d:c4:9d:7f:27:d3:e4:f3:31:e4:77:
83:3a:3c:37:33:b4:97:99:06:79:ba:9d:f7:d9:ce:f7:50:08:
1f:29:16:93:f8:26:43:b1:22:cf:66:fd:79:41:92:fa:7c:8d:
14:f7:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:19 2026 by rpki-client