This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: CxpkVT3qmSDfiHDDJP8qk0H2c/zoDICEaEeNTb30HaQ=
Subject key identifier: 98:A9:26:09:70:19:60:31:52:56:FF:5D:24:F6:2E:E1:E3:92:27:8D
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 0378
Signing time: Sat 24 Jan 2026 23:44:56 +0000
Manifest this update: Sat 24 Jan 2026 23:44:55 +0000
Manifest next update: Sat 31 Jan 2026 23:44:55 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: fLNrxv9xfR10ts1QJfTd/q+iR7qa4m6ySnhkp0BIze0=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Jan 24 23:44:55 2026 GMT
Not After : Jan 31 23:44:55 2026 GMT
Subject: CN=69755977-6cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:3c:9c:ad:dc:be:d4:c4:3c:13:79:81:2c:
e0:67:e4:db:85:ab:c2:25:07:5d:b4:93:db:4a:93:
6c:47:4c:32:bb:5f:03:0e:c9:bb:7a:90:03:23:7f:
f5:55:66:de:bc:4e:b2:7c:fd:db:00:01:16:d5:c0:
8c:1e:0b:d1:b4:be:81:a5:05:5a:ab:e4:c7:43:4d:
c4:28:4e:47:fa:b0:b1:5d:8f:51:c2:e7:92:14:08:
24:38:8e:62:33:df:50:b6:1e:ea:d1:4d:18:90:3a:
e2:cd:ca:33:c0:52:3f:ec:b2:76:58:36:a7:5c:ae:
97:00:ae:25:6a:d2:4a:26:94:eb:3b:39:2a:88:a8:
cd:ea:3a:95:d4:21:2c:8c:c1:d9:28:67:20:03:e6:
0d:d2:04:7e:94:7b:e0:56:b8:9a:b8:70:2e:15:af:
8a:36:24:e0:59:0c:f0:46:79:78:77:d3:79:a4:c0:
a8:5f:d8:57:a4:d5:87:0f:0e:b2:5b:2f:1e:69:77:
67:bf:0a:be:c8:6a:ab:82:17:01:a7:60:6b:7f:66:
6c:bc:60:fe:73:fb:0c:67:7b:36:c6:b3:bb:a3:20:
8c:80:b6:0e:aa:74:78:88:b1:dd:0f:aa:45:d7:30:
16:c6:21:95:25:55:0d:97:5e:32:71:05:b5:06:e6:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:26:09:70:19:60:31:52:56:FF:5D:24:F6:2E:E1:E3:92:27:8D
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:82:bd:43:a7:1e:66:fb:0c:98:f2:60:a2:8d:88:e4:31:
53:6e:23:49:41:15:48:51:bb:4c:c9:6e:22:51:c4:ed:7e:69:
69:60:3b:ba:39:63:37:74:62:ce:b0:73:0e:64:28:27:dd:52:
c5:7b:3b:bb:5d:84:a5:4e:75:75:17:4a:86:63:5e:8b:5d:1a:
7e:b3:ad:b6:c2:6e:8f:78:c7:cb:2c:31:ef:dc:8f:a5:79:56:
cb:25:63:98:2d:af:16:ec:77:76:9f:47:be:c6:c6:3b:59:73:
8b:ff:5f:db:5b:bc:bb:2d:87:3c:93:a2:34:cf:91:ad:99:69:
06:67:75:ab:b2:40:e6:e2:1a:da:ff:0c:c0:14:f5:6e:6d:18:
59:68:3e:56:3c:5c:47:6e:c4:c4:d9:7d:b3:6b:65:3a:c6:90:
cb:05:d4:a8:89:c1:b1:e3:84:cd:7a:eb:9a:0c:0d:3b:09:7e:
79:8f:6a:e1:96:5e:b2:70:41:f4:4e:9c:3d:d4:2f:e7:48:84:
3e:ce:92:49:92:fd:8f:81:6a:02:0d:2f:0f:85:1d:bc:4c:63:
ee:73:94:f0:97:2c:aa:52:5f:3f:76:5e:40:9b:a3:86:1c:4f:
2b:7a:c6:d3:2d:7d:cc:51:aa:95:ad:31:99:ff:e7:3d:84:d5:
20:a5:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:11 2026 by rpki-client