This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json)
Hash identifier: B+TpyenQUaaKEhT2XxsP4TJnKOtOoJEit3BPxRK8PfQ=
Subject key identifier: D3:2D:35:3E:47:AB:64:90:82:FC:CD:8B:A3:56:64:54:89:EE:8F:24
Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Certificate serial: 0BD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
Manifest number: 0BC1
Signing time: Sat 24 Jan 2026 18:29:44 +0000
Manifest this update: Sat 24 Jan 2026 18:29:44 +0000
Manifest next update: Sat 31 Jan 2026 18:29:44 +0000
Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: ZoS65AvrdBxCfocflXII/pBH8OhoVVrd9o6Uw7LPLVo=)
2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: dZNG5vW2l8zDaTZFXpzRrbU/LlNl+Cok+DnqXn1U2+I=)
3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: 69pkK44GCEYYO1DQ/J3aSzjtWc5Cn9UqeLLTzO9Yidc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3027 (0xbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Validity
Not Before: Jan 24 18:29:44 2026 GMT
Not After : Jan 31 18:29:44 2026 GMT
Subject: CN=69750f98-86ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:23:32:6f:56:d0:39:5e:06:78:99:bc:05:
27:33:bf:09:ef:2f:6d:17:c5:c6:5f:86:af:c9:0e:
7a:5c:2a:08:a2:14:75:16:af:8f:46:6a:de:63:1b:
04:b4:d1:78:60:42:63:ca:02:45:26:37:f2:a2:08:
64:4a:fa:98:00:9f:cc:d9:b3:e0:33:5f:0b:01:39:
11:87:6e:fe:d0:61:99:9e:2a:74:c0:97:72:5d:0b:
74:83:d4:54:cc:c0:f8:ab:ae:f7:50:39:f6:42:09:
cb:47:0b:5f:f4:0f:16:02:b8:12:ce:c8:4f:92:93:
b0:d5:35:70:f8:37:2d:e0:20:15:d5:cf:c9:28:7b:
2c:6f:01:5a:2a:fa:68:d4:92:b3:3b:e5:b5:e6:9f:
21:4c:82:61:ff:80:b3:c8:cf:fa:8d:0f:57:af:4a:
02:d3:25:5a:29:25:0a:a9:09:26:ec:ca:e1:0d:6e:
39:0b:3d:2f:3c:b9:a8:19:9e:64:a1:a2:b5:08:30:
2f:0c:10:e7:77:c0:ab:fb:d2:de:16:ad:f5:f3:92:
b2:05:1f:07:00:3b:e9:8e:66:24:22:60:6d:35:e7:
f5:10:52:67:3d:84:31:a9:b9:12:74:46:f1:51:3e:
09:90:a3:b5:46:79:7d:d8:24:47:60:5f:06:d6:23:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:35:3E:47:AB:64:90:82:FC:CD:8B:A3:56:64:54:89:EE:8F:24
X509v3 Authority Key Identifier:
keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:1f:52:af:fc:0e:4d:69:5c:5b:31:cd:7a:af:1c:1e:e4:
18:ef:0d:7f:78:eb:f9:69:00:61:bc:78:77:dc:56:e5:70:55:
43:cb:eb:86:8c:69:e4:40:48:df:48:ec:fa:71:0f:da:c9:f6:
2f:55:40:01:1a:00:e1:4a:9b:45:f1:a6:85:9b:1d:50:23:7a:
da:2d:eb:0c:73:5d:d1:e4:64:b0:0d:fb:c7:1c:34:aa:77:84:
12:0d:91:dd:95:6d:c6:5f:aa:fb:bb:d0:96:c3:3f:58:05:5b:
75:a6:f4:b8:33:04:b8:7b:e8:ac:9a:a9:ce:e4:d7:5b:e7:f2:
fd:ea:e4:39:c3:55:93:05:01:66:53:59:bc:4d:87:2b:29:95:
1f:7b:24:6e:87:3f:dd:cd:50:0b:42:cf:04:9d:84:d0:02:80:
06:79:4f:c2:23:26:c6:80:95:29:bf:44:18:c4:f9:d3:b3:73:
4d:38:25:e9:18:3c:ae:94:4b:fb:1f:fa:fc:83:b5:e5:7e:c7:
1a:0f:6d:4a:93:46:f9:60:2e:60:46:7b:c4:77:e3:2e:b0:ea:
86:0b:fc:65:cd:11:1a:22:66:69:f4:15:c9:99:5d:3a:ca:d0:
14:e4:f1:75:c2:81:a6:a2:56:36:c7:96:e3:59:f0:ea:c7:48:
f6:13:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:34 2026 by rpki-client