This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json)
Hash identifier: GDAAoFb4Lp7v/jOjjRXd/szl++o/J3ZOISg9q88xqh4=
Subject key identifier: 1B:4E:49:E9:A4:3E:62:7C:97:FA:6C:8A:F3:EE:56:82:BC:8D:73:78
Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Certificate serial: 0DF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
Manifest number: 0DED
Signing time: Sat 24 Jan 2026 17:30:50 +0000
Manifest this update: Sat 24 Jan 2026 17:30:50 +0000
Manifest next update: Sat 31 Jan 2026 17:30:50 +0000
Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: 0nhYNM4gNTzXxRGx6Fm3XEMl3xe1BFhjeldqXWms8YI=)
2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: M//W1UwKYdpgfzirMsSYlccdpo+EbdrSiaWLAUJYdus=)
3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: bubDAyNTv3SrURQ57IlrP+BsnMnB0ZguwTBhf+r4Z54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Validity
Not Before: Jan 24 17:30:50 2026 GMT
Not After : Jan 31 17:30:50 2026 GMT
Subject: CN=697501ca-db4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:9e:c6:a4:6a:4f:2a:08:3b:22:f7:e3:7b:
c8:bf:42:98:2a:3c:fc:50:eb:63:a5:78:8f:00:e6:
25:7b:65:10:bc:a3:50:45:09:27:56:a6:ba:15:35:
5c:94:63:f3:38:86:77:7a:13:80:db:fa:dc:f4:e0:
b2:aa:f4:b4:fe:41:15:17:3f:40:8c:8f:9d:2e:4e:
04:d7:95:46:57:b2:c3:be:b8:f4:61:25:0b:92:6f:
f9:17:bb:45:9c:25:39:30:b1:33:ad:c9:ce:e5:c5:
2c:b5:5d:d1:6f:ac:37:46:6a:cb:f5:13:c7:7d:bb:
1a:87:a5:a0:96:3f:f8:3a:f5:16:a1:6f:d2:f6:48:
90:e9:e0:64:41:cf:c4:51:80:a7:3d:75:57:36:ae:
d3:f8:a5:d9:4f:76:c8:80:79:fc:13:52:43:f5:a6:
70:93:e8:aa:0d:1d:e3:69:03:37:5f:50:c5:fe:13:
48:62:36:a5:8c:39:e5:42:8e:d6:ee:30:7c:83:6b:
da:fe:d4:79:ad:05:fa:9f:43:b8:fb:78:1d:70:e0:
66:13:2d:1c:e3:9c:7a:5b:67:79:a8:ad:59:a1:bc:
c1:eb:9c:c5:04:0f:43:68:cf:99:a9:29:bb:be:a5:
f6:1e:4f:9f:d0:83:bf:25:4a:e3:d0:50:4a:5c:8e:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:49:E9:A4:3E:62:7C:97:FA:6C:8A:F3:EE:56:82:BC:8D:73:78
X509v3 Authority Key Identifier:
keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:7f:82:31:db:f3:89:f9:a8:01:fb:0a:57:12:d2:d8:f4:
f5:a7:15:a4:2f:ab:69:d9:c3:49:c9:40:03:46:9e:f1:4a:90:
e7:c0:23:3a:dc:3d:2f:0e:2d:29:54:c4:6f:8f:64:ec:d5:a2:
d6:e8:fe:14:17:bf:ba:0e:33:df:b2:83:49:c1:bc:c9:ea:92:
66:10:b9:4d:e2:fa:14:12:bb:91:e8:45:e9:09:2d:9b:85:44:
73:16:2a:f5:b1:0f:4d:30:61:96:ac:09:4f:41:9c:85:bd:65:
a9:67:35:11:6f:f8:c4:b6:21:36:bd:34:8d:27:b1:23:51:18:
ca:d4:a3:d8:27:f8:ff:48:98:9b:21:4d:8a:69:77:88:10:d2:
fd:25:e3:6b:6d:fd:18:a5:e5:b8:9c:e2:19:9c:8e:ff:b8:60:
3f:4d:c6:b9:bf:7f:d8:c8:df:16:c5:5e:74:de:43:b7:0b:55:
52:0c:46:e3:e4:03:c2:c4:67:e5:d5:09:c8:b5:6e:10:17:10:
af:88:8a:86:9c:0a:c0:78:0d:eb:7f:32:22:63:41:90:56:b4:
24:7f:78:66:a8:96:61:7b:65:66:68:19:1c:12:a3:c2:f4:f3:
38:d5:21:62:70:a8:b8:48:d5:f6:68:18:60:bd:f9:64:33:fe:
e6:c2:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:22 2026 by rpki-client