This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: TGWvB6lwZeKzgQEgYPGW/NZDByNtLG0slRzT9EWlEQM=
Subject key identifier: 40:A3:D9:D6:C9:60:F5:81:DD:8D:9F:9E:51:A7:40:CD:FF:9F:07:83
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 30FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 30E9
Signing time: Sat 24 Jan 2026 15:18:52 +0000
Manifest this update: Sat 24 Jan 2026 15:18:51 +0000
Manifest next update: Sat 31 Jan 2026 15:18:51 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: yT7I/9NEX7Oj7WgEkvkzF2G3F0+EJJ2DNfmta/ANucs=)
2: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: pqhARhh64EGCd2MgnNHnrxWDNycvjlNc8wDHcPRwifg=)
3: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g=)
4: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=)
5: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: b3tJCOFhrOxNwX+xrXj/RF8CaJdbbK6dUe5Fw9N8cng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12539 (0x30fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Jan 24 15:18:51 2026 GMT
Not After : Jan 31 15:18:51 2026 GMT
Subject: CN=6974e2db-3b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:32:20:9e:b4:46:99:18:88:13:2b:43:5c:
fd:7d:0b:bc:8a:43:0c:66:70:42:ee:47:b4:7a:16:
b8:d9:d3:ca:c8:e4:e8:bd:0a:5e:ce:ba:cf:db:4e:
3a:c8:33:40:95:a3:e4:35:f7:c7:c0:11:42:43:a6:
95:af:2d:b5:da:9f:3c:b0:4a:5f:4e:9b:51:f0:cb:
11:b6:7a:5f:a7:04:cb:0c:71:0c:ff:81:fa:53:e4:
77:19:77:cd:a7:ce:e1:5e:19:e9:74:42:e7:24:7e:
3b:6d:01:47:0c:35:8d:2b:6f:87:70:ce:c4:e5:4b:
3e:46:a6:b6:70:05:55:d8:16:c0:2a:e7:45:f8:d5:
ad:86:85:72:51:e3:73:8c:6c:b4:d6:aa:b8:44:45:
6d:3f:bd:8d:c7:97:fe:f9:6c:e1:05:31:25:a0:96:
0c:62:66:75:c6:5b:7c:89:0c:e9:a4:b0:a2:4c:99:
28:58:4d:e1:26:eb:a9:d2:64:0d:b9:e1:46:b2:5b:
3f:f0:c9:c6:8e:83:e2:59:34:33:0d:df:e3:13:dc:
c3:11:2c:78:be:90:b8:53:85:57:01:59:3c:b2:b1:
11:a5:ba:df:d0:8f:0f:d6:ff:08:8e:65:2d:e7:9f:
cc:bb:59:7e:be:8c:ae:a7:99:87:e2:2a:1d:49:50:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:D9:D6:C9:60:F5:81:DD:8D:9F:9E:51:A7:40:CD:FF:9F:07:83
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e4:79:78:24:d3:79:e2:18:94:c9:e0:80:2e:68:41:b3:f9:
d3:53:8d:9e:f7:4e:08:96:48:ea:5d:78:ed:3c:3f:5e:c4:dc:
b4:a8:3b:ef:dd:7f:26:14:ca:ae:ed:9e:ba:bf:72:77:0d:b7:
dd:2d:3f:7f:24:12:62:d7:12:85:2f:66:80:ab:d3:65:9d:e8:
3e:3d:e5:f2:1f:c2:b4:52:b3:26:41:e1:35:ef:f8:1a:e1:de:
81:32:94:9c:a7:e0:60:d5:79:4e:f2:17:a9:11:9e:ff:04:e3:
9a:34:a4:da:42:46:db:81:bb:7f:90:93:8b:ac:50:f7:2d:1d:
2b:2d:c3:eb:b5:87:b7:92:b6:11:75:84:2e:07:7c:73:df:33:
d6:a4:0f:25:4a:6f:f3:4e:d8:df:6a:69:18:1e:fd:4f:89:70:
88:8e:06:90:0b:fc:ca:69:2a:2f:00:be:ce:5b:38:f0:3d:ae:
32:b0:26:8c:dc:da:6a:81:cb:4b:a4:b6:3f:3c:6c:6c:7b:7a:
7a:af:ca:63:2c:d3:30:a2:81:69:93:6e:81:94:5f:c2:5b:cc:
99:f8:a5:af:58:88:48:42:81:23:cd:d9:ec:eb:ec:05:65:ea:
6e:a7:92:5f:0b:94:64:48:b3:7c:1d:59:f2:d2:c9:9a:d0:f0:
8e:f1:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:32 2026 by rpki-client