This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier: ro8+jIaLRv8V/J32cooKsLqCPMBWzyo0sf7fJwbEVT0=
Subject key identifier: AE:84:F2:33:EB:38:E3:F7:A6:D3:7B:53:1B:D6:69:56:9D:28:C6:69
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial: 0C45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number: 0C2E
Signing time: Sat 24 Jan 2026 18:21:33 +0000
Manifest this update: Sat 24 Jan 2026 18:21:32 +0000
Manifest next update: Sat 31 Jan 2026 18:21:32 +0000
Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: PQjAB2pXMWU/ZtKfpZ0amSikttWjZtpW6PooboucSb8=)
2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=)
3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3141 (0xc45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Validity
Not Before: Jan 24 18:21:32 2026 GMT
Not After : Jan 31 18:21:32 2026 GMT
Subject: CN=69750dad-5e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:c3:35:ee:c3:43:08:77:da:2f:67:43:8b:
57:34:0d:0d:51:5a:23:d4:ec:cc:43:89:d7:b0:26:
51:b7:b4:94:f9:92:30:c0:fd:10:4c:25:a4:c4:3d:
69:a2:f8:48:aa:fd:8a:f8:29:77:26:67:a5:ba:e1:
3a:da:91:d3:83:ec:25:46:14:1c:27:14:16:42:92:
1e:c9:f3:3a:71:81:32:44:fa:32:e3:fe:a8:48:ea:
6f:b7:9d:69:9d:92:8c:69:04:26:09:40:24:9e:3e:
24:0f:2a:e1:a3:8e:6d:83:ae:8a:a0:4f:56:c8:43:
f1:9f:2f:f7:f4:9e:3c:71:7b:53:34:97:8f:e6:9c:
ba:cd:b3:47:ad:da:29:9e:de:6b:78:42:12:55:18:
81:5f:be:64:be:0b:17:69:4a:99:5b:e9:7f:dd:b0:
83:ff:51:a4:9c:e8:5e:c0:64:5a:28:70:d1:2b:70:
2a:c6:32:d8:10:d0:30:e0:31:f5:a6:65:3c:d1:2c:
18:3a:20:39:42:71:9e:da:fd:a3:f7:a4:f4:91:f4:
57:18:ff:ea:1e:2e:19:a3:d8:a8:55:4c:9e:d3:bb:
c1:bb:c4:9a:c6:55:2d:dc:a0:82:58:9f:c8:44:02:
d9:88:a9:67:ba:e8:e8:de:de:a0:09:9e:27:79:a9:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:F2:33:EB:38:E3:F7:A6:D3:7B:53:1B:D6:69:56:9D:28:C6:69
X509v3 Authority Key Identifier:
keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:26:b9:bb:62:97:9d:d0:75:29:f9:0b:75:2c:78:4a:03:
8c:1c:e7:8d:5c:b9:2a:91:43:58:c6:37:f7:96:f0:29:16:a9:
09:8e:9e:16:7b:43:dc:20:08:fe:b7:dd:87:ad:46:81:7a:7f:
eb:bb:b2:d2:25:a1:55:bb:2e:d3:cf:7b:85:f2:63:94:47:4e:
37:11:bf:ce:b5:80:80:f6:b3:a7:39:76:1f:40:94:57:b9:2d:
a6:4c:2a:e1:d1:1a:55:9e:5b:fe:42:8f:3f:98:b2:51:43:b2:
b7:0f:38:33:86:13:17:85:3d:b0:7e:eb:f0:f3:4f:18:66:14:
d0:db:3b:1e:ce:ee:f6:f4:de:27:87:19:3d:65:f0:ae:57:41:
23:42:84:a0:18:64:93:df:3b:21:1e:05:75:1f:18:57:7e:9d:
23:9f:88:03:48:73:bd:30:21:51:42:43:e6:26:b1:2e:0c:9c:
82:c1:c7:a9:80:b1:8d:d3:fc:37:3a:36:ad:f3:19:86:2e:cb:
f5:a2:72:60:98:02:35:bc:ae:65:c9:15:40:c9:62:26:92:d7:
f6:de:6b:fb:f8:b4:e9:c4:bc:6c:d0:c9:18:ff:a7:3b:87:b9:
5d:b1:e7:bf:af:3e:13:03:c7:c0:0b:0d:c8:24:95:ff:ed:66:
0a:4a:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:49 2026 by rpki-client