This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: nZEffNDQ3//JwDRBL5N7zJb4JK6sJFc+Sfuxa1MkcdE=
Subject key identifier: 2A:30:D5:34:B0:07:84:2D:D8:E0:36:1E:76:CF:90:CD:2A:E0:E8:4D
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0CE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0CDF
Signing time: Sat 24 Jan 2026 17:47:30 +0000
Manifest this update: Sat 24 Jan 2026 17:47:30 +0000
Manifest next update: Sat 31 Jan 2026 17:47:30 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: Akrg0EwxtG3Jh8ULq7oEyjNSeHlZhxP9n8Dzn53BT2Q=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: osYkBFEZo4TGPYEkCTIfOfI2cJcgpXjHG6X4+VVwtkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Jan 24 17:47:30 2026 GMT
Not After : Jan 31 17:47:30 2026 GMT
Subject: CN=697505b2-aa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:f4:a2:01:84:26:37:3c:19:04:13:f6:d2:
a0:f9:8b:3f:d1:f5:2d:f1:e7:c6:25:52:0f:bb:2e:
42:14:5f:16:ad:ae:76:96:66:5d:9c:e5:81:a8:b6:
18:fa:ce:be:81:03:2a:47:a0:44:5d:6a:fb:18:d7:
2d:fa:57:a7:28:00:0c:54:dc:8a:d8:6a:15:00:d4:
74:56:97:7e:e3:42:0e:be:40:33:18:5e:20:3b:9c:
24:64:7a:f1:80:08:19:d8:ad:2a:69:c9:88:c8:4d:
12:59:8e:ac:52:4c:a9:81:44:37:00:6d:ac:9b:64:
04:37:35:66:30:c1:61:1b:da:ec:83:a9:9c:b4:81:
a6:89:42:66:c3:5b:9e:8f:4a:96:0b:40:73:9e:30:
5f:70:e7:d4:c5:25:4f:d5:da:11:92:e3:c4:e9:31:
5b:06:76:09:31:c7:29:01:87:ab:31:9e:6b:6b:b2:
ff:53:40:95:fc:2e:5d:1f:6c:fd:9e:96:72:43:b3:
fc:6c:6c:c9:a7:77:6f:09:b7:1a:de:69:99:8d:34:
d5:71:3f:04:eb:65:81:d6:6d:6d:a5:98:87:5e:a7:
9c:38:19:3c:5b:25:cc:6f:ac:ba:04:71:ba:ac:e8:
7b:b3:a2:24:19:6b:73:69:e5:81:9d:67:56:aa:2e:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:D5:34:B0:07:84:2D:D8:E0:36:1E:76:CF:90:CD:2A:E0:E8:4D
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:45:06:32:49:b0:76:c7:37:24:f7:29:95:7e:8c:36:c9:49:
d8:04:12:af:c3:fb:ff:99:ef:f0:74:97:f0:c8:88:2d:ee:43:
c1:a3:ae:19:b7:b1:88:e0:03:08:9a:05:ef:24:0d:ab:49:5d:
17:c3:93:38:ed:ec:dd:76:14:c7:7f:72:79:c2:04:ec:02:c7:
58:d2:3d:57:66:c0:71:1a:f3:1d:37:4b:79:f2:c6:a0:f1:47:
e2:0c:71:63:2c:a2:5e:90:84:92:f6:1a:c9:69:21:2b:b1:55:
ab:59:f6:20:14:93:0b:45:e2:1e:4d:28:96:1c:be:63:36:5d:
49:97:6b:e0:14:ce:67:b0:86:5d:d3:9e:57:f2:47:40:ac:90:
2f:ff:3c:b6:d1:6e:7c:8d:93:79:79:a8:86:60:3e:9a:93:f2:
d7:70:a4:35:49:26:4f:5d:a0:39:35:29:95:a0:35:d9:cd:f2:
a8:a2:ca:74:6e:1b:23:b2:df:78:bf:41:72:0c:ef:78:a0:1e:
8e:38:dd:4d:53:ff:2d:97:d0:0d:e4:5a:16:f8:c6:17:03:9a:
20:72:c8:c9:06:bf:ef:6e:72:24:5e:65:2e:56:ce:c0:0c:1f:
f5:d7:ad:15:12:80:df:e5:4c:49:54:1c:81:b4:f1:20:a6:27:
54:19:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:00 2026 by rpki-client