This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier: EeESXgUCgDV4mFi1as1/eaPXYmIJyCa4EOYM03UNwWI=
Subject key identifier: 92:BF:1A:6E:41:EF:2D:6F:5F:ED:65:90:7E:8D:CE:AD:C7:0F:FE:DC
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 035C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number: 032D
Signing time: Sun 25 Jan 2026 00:20:49 +0000
Manifest this update: Sun 25 Jan 2026 00:20:49 +0000
Manifest next update: Sun 01 Feb 2026 00:20:49 +0000
Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: Lz60Hmes5B/jN4xPNxkc+EXjrLw4ALo7XEp6t+r69pg=)
2: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: h2VRAobnA0mg8UYqDlWy8Y+TSm17jE0upU+uVL6pvtg=)
3: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: O2oQyvWguzaYeNsrwBX/2BLJPDmDLHzJTdTHMhL++UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Jan 25 00:20:49 2026 GMT
Not After : Feb 1 00:20:49 2026 GMT
Subject: CN=697561e1-fb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:12:42:48:99:7d:17:61:ed:f6:d5:6e:9e:
47:46:5b:3c:4f:cb:a1:54:9f:3e:7f:67:4c:5c:7f:
27:46:95:e5:96:22:94:24:bd:85:eb:de:7c:99:ab:
37:e5:55:ec:d7:63:ce:3d:72:54:94:ca:8f:56:8c:
a9:d5:9f:ab:e6:45:37:be:4c:d1:84:ea:bf:29:6b:
e5:fd:69:e2:1b:e6:c3:39:20:06:48:e7:05:8b:20:
fb:31:be:3e:ae:2b:57:8e:6c:53:f5:9e:f7:6e:d0:
28:f8:3d:5b:45:1d:9a:73:f6:a0:d4:85:eb:87:22:
96:81:8d:b4:e8:1c:cf:11:c4:66:6d:eb:89:50:c4:
aa:5f:82:ca:71:c5:30:92:3a:8d:fc:61:e0:55:3c:
6c:fa:32:46:bc:65:a6:48:49:ea:29:13:ab:be:e6:
4a:f5:1b:4c:9e:f4:c4:fa:b6:ac:5b:6d:d4:d9:77:
6d:cb:8b:8a:71:29:85:c1:43:18:66:ef:7d:74:fa:
e4:3a:0e:26:d7:e0:cf:80:be:a0:e3:15:97:92:79:
20:84:ce:2b:ce:09:39:22:c4:18:ae:1f:06:0b:2b:
18:2a:8c:ac:d0:94:23:fa:72:dd:4a:d8:c8:75:54:
37:c9:ee:b7:b7:71:6d:ed:ca:38:1f:7c:42:ff:d1:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:1A:6E:41:EF:2D:6F:5F:ED:65:90:7E:8D:CE:AD:C7:0F:FE:DC
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:38:5a:0a:52:88:e6:0d:9d:5e:8a:82:67:b9:5f:7f:bf:
6b:da:71:be:99:b2:85:43:1e:e5:b7:f4:45:f0:cd:f8:a3:72:
3c:46:4f:68:a2:b2:ad:c6:17:27:94:66:78:9e:07:9c:27:ff:
b0:48:45:61:a5:bd:d5:a8:d4:d9:5d:9c:28:87:1e:9d:4c:62:
88:cb:b0:e0:eb:7c:f0:88:62:d0:46:0e:0c:45:5a:a7:d7:dd:
58:7f:0c:0e:bc:d8:03:5d:fb:94:4a:c5:e1:02:be:77:6d:d3:
8b:f7:91:38:cc:ff:48:e2:c4:74:9f:33:d0:1b:bd:99:e8:91:
a3:fa:69:ff:da:42:11:5d:eb:62:2f:f1:ae:d6:92:fe:25:44:
88:ad:ec:00:de:9d:bc:b4:3c:be:fd:5f:2c:97:69:60:f1:63:
31:d7:4b:54:3b:11:b2:7c:b9:3b:41:e2:1e:1a:9f:5d:3d:ee:
85:58:e5:82:dd:1c:6f:d7:b3:9f:f7:23:61:12:94:8d:f3:e9:
94:34:82:f7:50:15:74:8c:50:0d:53:98:da:23:3d:d6:42:5f:
5d:1e:7b:8f:2c:46:52:d3:0a:83:43:10:3f:11:af:2c:6e:91:
11:51:d1:ab:40:5e:2f:e8:9f:a1:76:c6:f5:a9:ca:39:1c:1b:
5d:d0:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:53 2026 by rpki-client