This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier: NUXGFqTwnB9W1EpJahqj07D1TolXqj0wW7Y7rfjCPhw=
Subject key identifier: E8:E8:98:44:42:E9:E1:3E:5B:D6:80:63:F6:72:98:C6:5A:72:14:88
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number: 0424
Signing time: Sat 24 Jan 2026 23:32:08 +0000
Manifest this update: Sat 24 Jan 2026 23:32:07 +0000
Manifest next update: Sat 31 Jan 2026 23:32:07 +0000
Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: GFv8Krfrs9j70mT8Q4y7YieQBtzNY4avFLtdR2MNglA=)
2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Validity
Not Before: Jan 24 23:32:07 2026 GMT
Not After : Jan 31 23:32:07 2026 GMT
Subject: CN=69755678-5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:70:b3:60:e7:7b:13:7a:56:74:b6:16:4d:
97:63:91:1d:09:d3:c6:2f:a3:f2:90:c9:f3:fa:65:
01:52:b3:55:ad:d0:cd:a7:df:31:23:b4:6b:a5:10:
b7:45:3f:ab:10:49:f0:91:de:70:56:0d:31:5b:41:
11:f0:0b:14:a2:45:9b:a3:65:c1:3b:74:d0:3f:b7:
4b:a3:f1:d5:6d:6e:71:5f:1e:b8:e3:e9:6c:99:86:
6d:cc:28:93:19:91:8f:ac:07:fa:c5:bd:f0:2e:99:
91:03:62:9b:29:a1:74:18:83:5c:eb:b0:75:0c:26:
48:4e:64:b4:8d:de:56:7c:c0:58:64:59:4c:31:0a:
2a:e9:f6:d1:a2:da:fc:4c:7a:cc:b6:3b:77:e3:de:
f2:1a:3c:db:92:de:8b:43:16:80:79:8b:19:86:e4:
ba:4b:cc:74:84:6d:2f:f3:e4:47:27:d4:c7:4d:b3:
3c:80:fa:a5:d7:88:64:7c:98:d6:b7:3e:b6:e8:a4:
bd:02:9c:30:c6:f8:70:23:ef:22:a6:9c:c2:5c:5c:
5c:32:6a:ed:bc:ac:c0:3a:d6:eb:33:b7:c8:5e:0d:
df:f3:9a:4a:f6:50:b6:7d:00:e6:b7:e3:26:92:5b:
6e:3a:1a:db:00:16:b3:a8:66:9c:88:49:71:7c:93:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:98:44:42:E9:E1:3E:5B:D6:80:63:F6:72:98:C6:5A:72:14:88
X509v3 Authority Key Identifier:
keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3e:05:a5:40:6a:0d:65:f8:a6:f3:97:ed:92:18:8a:88:0a:
27:76:62:45:ff:29:4d:aa:8a:4c:a7:bf:0f:fa:25:ee:24:e0:
c9:c9:10:59:86:fd:f5:01:b9:02:28:16:cc:c7:fa:04:ec:d1:
46:f2:36:04:25:f7:7d:43:a8:03:03:8d:bc:a2:4b:57:f3:4c:
c0:dd:24:2e:e5:78:6d:4f:4d:c1:2a:ae:5d:6e:0c:d8:d6:2e:
a8:88:64:ec:4f:8f:4c:d8:9e:72:f5:8b:e1:76:8b:7e:69:44:
c2:4e:ab:5c:c8:bd:04:14:36:01:35:4d:cb:bb:37:e7:c0:ed:
bf:8b:da:d7:eb:73:b8:73:5c:08:20:06:1a:2e:5b:ba:32:80:
88:2c:ca:80:67:f3:9a:63:3a:a0:14:39:e5:86:5f:bc:8c:c0:
04:a4:25:5d:64:ae:ce:b6:cf:76:09:8e:31:a9:e5:6e:49:ac:
e8:c6:a6:de:f9:f3:3d:78:da:02:b9:19:a4:4a:de:c1:7a:38:
38:9e:78:6c:8c:83:bb:73:c1:8b:51:19:ba:f0:9c:db:0b:71:
cd:7c:4b:fc:18:bc:68:51:ca:9c:c9:ce:4d:50:3b:f2:a0:6a:
f7:aa:db:7a:8c:27:f5:d0:c3:f9:e9:e7:64:0c:8a:07:0f:33:
d5:c9:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:34 2026 by rpki-client