This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier: Zk4XExxciSqedKpD4tKBiGbXVj+W8f8j+ESISiLkSsE=
Subject key identifier: 94:5A:FD:6F:10:72:D5:5B:B3:FD:26:DB:07:81:D4:84:42:E2:FB:51
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number: 0225
Signing time: Fri 23 Jan 2026 01:16:34 +0000
Manifest this update: Fri 23 Jan 2026 01:16:33 +0000
Manifest next update: Fri 30 Jan 2026 01:16:33 +0000
Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: 4RCQGc+q3jWa+zUAQVQkCx8NEvIVsdkZAOtaEpJTzN8=)
2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Dw2hET0XKkDZSavlAvohxfv8vlQxG1CLusRdITgzUP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Validity
Not Before: Jan 23 01:16:33 2026 GMT
Not After : Jan 30 01:16:33 2026 GMT
Subject: CN=6972cbf2-a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:db:c4:bf:68:41:7d:b8:2d:e3:e1:b4:16:
15:d6:50:e9:f6:98:96:fd:8c:45:1b:7f:c7:b1:d0:
b8:f2:a8:c9:17:b3:fc:82:06:d2:13:28:e7:05:bd:
8f:93:03:d1:7f:0c:ad:1c:c4:a9:07:2c:4e:2b:a5:
e2:e1:a6:c0:e7:01:f3:ed:2c:90:ab:a2:b1:1b:53:
f7:7f:d7:4d:ac:45:9c:08:db:e2:f1:cd:6d:65:b3:
27:f3:5d:08:47:59:d2:8e:6d:8b:4a:1c:33:16:c7:
65:6a:88:15:f6:73:9f:e7:bb:42:d9:b8:34:f7:a1:
fd:8c:12:e9:8b:40:8f:96:8f:35:b1:41:b2:30:c5:
4c:c9:a8:2a:0a:85:23:92:61:c4:27:e1:58:20:4f:
0c:06:ea:50:ee:d6:13:17:62:64:82:f1:80:96:b2:
1d:8e:dd:84:81:e8:f6:53:28:a2:b1:75:cf:3c:0f:
1a:25:c7:ef:e3:33:d5:8f:b5:6f:bd:97:2a:d7:e4:
6d:c8:38:b9:b7:4c:45:8e:5f:01:f1:40:ec:09:2e:
d9:97:dd:4f:32:dc:11:9b:f1:5d:78:7d:fa:7d:5c:
76:91:75:22:53:da:bc:50:19:43:1f:d5:e3:ca:f8:
be:f9:49:4b:31:af:13:fd:65:7d:fa:9a:cb:4e:ce:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:FD:6F:10:72:D5:5B:B3:FD:26:DB:07:81:D4:84:42:E2:FB:51
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:8a:33:dc:3e:1a:52:31:df:9a:46:d7:12:fa:87:d7:1f:e0:
66:78:91:df:f5:45:dc:72:dc:b9:30:c3:15:a9:34:6b:02:5e:
84:9f:23:6c:af:55:7d:ca:f5:1d:0c:e9:ea:7b:af:ac:56:58:
97:5c:21:eb:fd:3c:aa:ab:d3:3e:9d:23:03:bd:54:0c:07:52:
3a:4d:b2:a7:b0:f4:4b:b1:d4:94:3d:35:cd:65:37:61:22:a1:
7a:cd:f4:56:38:84:57:d9:67:57:03:9e:76:32:83:8e:62:3a:
25:e3:04:06:ff:ad:51:a7:b1:62:19:61:3b:66:72:74:08:61:
f8:fc:37:41:24:bf:58:c7:f1:30:0e:eb:a0:ac:e2:10:06:c8:
8a:cd:36:f1:7b:9a:11:8b:70:01:d5:1e:3b:96:5b:26:3f:07:
69:b8:f4:f7:d1:63:d3:ba:d9:f2:7a:19:5b:6a:b7:df:25:d8:
7f:f7:d6:4a:93:e1:24:b8:73:d7:48:b6:1a:9e:58:63:fd:59:
66:46:53:83:ef:d3:77:a7:c8:3d:fa:56:1c:a8:df:28:3e:68:
5f:ad:74:af:47:83:4e:25:ca:20:cf:5b:80:2d:03:7c:4d:ad:
0f:8d:01:5d:8d:f5:f4:16:7d:dc:31:ec:50:9b:56:51:b3:32:
5b:e8:02:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4
REFBRkRDREUwHhcNMjYwMTIzMDExNjMzWhcNMjYwMTMwMDExNjMzWjAYMRYwFAYD
VQQDDA02OTcyY2JmMi1hNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0sDbxL9oQX24LePhtBYV1lDp9piW/YxFG3/HsdC48qjJF7P8ggbSEyjnBb2P
kwPRfwytHMSpByxOK6Xi4abA5wHz7SyQq6KxG1P3f9dNrEWcCNvi8c1tZbMn810I
R1nSjm2LShwzFsdlaogV9nOf57tC2bg096H9jBLpi0CPlo81sUGyMMVMyagqCoUj
kmHEJ+FYIE8MBupQ7tYTF2JkgvGAlrIdjt2Egej2UyiisXXPPA8aJcfv4zPVj7Vv
vZcq1+RtyDi5t0xFjl8B8UDsCS7Zl91PMtwRm/FdeH36fVx2kXUiU9q8UBlDH9Xj
yvi++UlLMa8T/WV9+prLTs7TJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRa/W8Q
ctVbs/0m2weB1IRC4vtRMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE
RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS
eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWijPcPhpSMd+aRtcS+ofXH+BmeJHf9UXccty5MMMVqTRrAl6EnyNs
r1V9yvUdDOnqe6+sVliXXCHr/Tyqq9M+nSMDvVQMB1I6TbKnsPRLsdSUPTXNZTdh
IqF6zfRWOIRX2WdXA552MoOOYjol4wQG/61Rp7FiGWE7ZnJ0CGH4/DdBJL9Yx/Ew
DuugrOIQBsiKzTbxe5oRi3AB1R47llsmPwdpuPT30WPTutnyehlbarffJdh/99ZK
k+EkuHPXSLYanlhj/VlmRlOD79N3p8g9+lYcqN8oPmhfrXSvR4NOJcogz1uALQN8
Ta0PjQFdjfX0Fn3cMexQm1ZRszJb6AL2
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:21 2026 by rpki-client