This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier: 6LhnogIsnQG6IFHmulLXsDW+3YA/Sg41dqwzBZfEDw8=
Subject key identifier: 04:60:AF:9A:2F:92:55:7A:08:55:4B:4C:91:D0:A9:3F:70:C3:7E:87
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number: 0173
Signing time: Sun 25 Jan 2026 03:07:35 +0000
Manifest this update: Sun 25 Jan 2026 03:07:34 +0000
Manifest next update: Sun 01 Feb 2026 03:07:34 +0000
Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: U0mKTMzK91R7t9oeMbBuQLn4uWwthvDZoeF1jx5z7p4=)
2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Validity
Not Before: Jan 25 03:07:34 2026 GMT
Not After : Feb 1 03:07:34 2026 GMT
Subject: CN=697588f7-ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:83:10:78:8b:78:cd:ad:20:58:fc:64:74:
85:10:bf:a3:b2:19:c1:b4:8c:de:d9:b7:ad:ed:f7:
df:f9:6f:8a:39:cf:50:dc:79:e4:01:ab:2c:40:8c:
2c:11:35:bb:5a:65:cf:a7:a6:ad:c7:19:77:80:58:
77:e3:f3:a3:d7:a0:d7:f3:23:14:87:aa:65:41:34:
e1:44:ff:97:9a:3b:54:15:e9:88:a0:66:03:5c:04:
31:f1:94:ca:4b:64:3f:f6:2a:c8:9c:8d:1c:d9:d6:
c9:b1:97:51:95:c6:e6:18:a9:de:6f:5c:08:d6:33:
10:75:27:1e:cd:4b:bf:f0:b6:e0:a8:b2:33:fa:4b:
98:ed:1f:cd:d4:a9:de:af:aa:7b:27:28:42:67:d8:
99:02:f9:de:45:9a:ff:b8:e6:0b:9b:a7:d3:7f:af:
09:8e:ed:ac:ae:a6:93:a7:ad:4a:20:28:70:f0:6e:
b9:2f:d4:90:6a:b1:cc:3e:dd:d1:e1:8b:09:a4:e6:
7b:1f:af:39:a4:61:c6:82:06:8d:b4:5c:1c:1d:1b:
1f:a9:31:51:78:c9:30:ad:d8:0a:88:1c:08:71:8f:
12:d4:72:e2:93:bf:e4:a9:b6:c2:4b:23:c2:36:85:
a7:0b:c8:95:28:6a:35:e9:77:84:08:c1:03:a3:89:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:AF:9A:2F:92:55:7A:08:55:4B:4C:91:D0:A9:3F:70:C3:7E:87
X509v3 Authority Key Identifier:
keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:9a:55:18:34:d2:04:85:8a:c7:0d:b0:8c:64:a3:74:04:
6d:ce:42:cd:8c:5f:18:cc:12:15:7b:99:74:ac:cf:fa:ce:67:
e5:47:12:07:f1:2c:55:91:bb:8f:cb:2f:55:ff:e0:e0:bd:31:
d6:8c:ad:39:ab:69:16:78:a6:6f:dd:3f:3a:05:29:d8:3c:3c:
fd:b5:3c:d9:db:82:f3:8f:fa:da:66:01:83:45:18:43:c8:b2:
6b:b2:27:a8:17:89:71:ec:e2:59:98:2d:ad:a2:4e:c0:26:2f:
8f:62:07:17:9e:72:f9:49:9c:e9:87:23:62:fd:de:9a:be:6a:
5a:58:b5:87:82:19:61:a4:32:83:8a:f2:8b:7d:a0:55:b1:af:
8d:b5:48:07:1f:c1:d6:8c:2c:9f:00:5b:d1:22:e2:00:01:c3:
de:ff:5f:8f:a4:5a:d0:7a:f5:fc:ce:9d:e4:9e:73:e6:1b:93:
43:8e:1e:68:a6:7a:98:7d:2d:a9:c0:70:8b:2e:45:90:6a:5a:
a1:be:57:cd:87:b5:1f:d7:a1:5d:10:b2:39:a0:e6:a4:96:1c:
c8:78:bf:21:5f:fc:45:50:8a:9f:07:27:74:d3:87:7c:ac:a0:
12:6b:8a:37:8d:a8:14:8c:28:64:48:47:71:98:90:80:ca:97:
fa:33:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:32 2026 by rpki-client