This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: CSdxfbZQ1Clgml+lQiWU/2B1hPg57/dIb6UnbBcVpQI=
Subject key identifier: AB:08:F8:EE:15:5B:54:5A:D2:BF:05:2A:5C:70:89:D5:5A:90:4F:FD
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 01FA
Signing time: Sun 25 Jan 2026 01:48:14 +0000
Manifest this update: Sun 25 Jan 2026 01:48:14 +0000
Manifest next update: Sun 01 Feb 2026 01:48:14 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: Xtjr/DfDxY+bAT4YHILVr4vOe8TCnPpdbUhDMA3VZec=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: ex5ur3WLVmySdJlK4OpXRFFofMyw8LoQvz2jf4rLqkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Validity
Not Before: Jan 25 01:48:14 2026 GMT
Not After : Feb 1 01:48:14 2026 GMT
Subject: CN=6975765e-646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:88:c8:c8:35:0f:78:54:63:d5:ca:36:7e:
6d:c7:4a:48:f8:0a:01:67:a4:c3:60:a6:29:20:40:
e0:cf:e5:6d:93:a8:76:06:2d:d2:53:43:88:0d:f9:
15:a5:39:f3:23:1e:35:e7:8b:33:f4:a1:14:b3:08:
ae:ad:d4:a4:a5:bb:14:5c:ef:a7:19:8d:61:bd:2f:
35:43:b0:2e:df:30:c1:a2:ba:15:12:79:b1:43:5a:
16:d7:5d:df:2e:06:c4:42:ea:d1:5a:d6:e9:a9:7a:
6c:6c:56:1c:52:3a:6c:c3:8d:16:58:9f:cf:e0:fe:
e6:b2:d6:e5:a1:14:57:b7:e8:6b:5a:88:45:17:03:
a4:19:f8:a7:49:fe:bc:d4:33:85:dc:f0:68:a1:ef:
9e:36:6d:0a:4d:ef:92:be:0a:3f:3f:05:e3:82:5e:
1d:8e:8d:f6:57:63:13:ee:c5:70:db:5b:a2:04:a3:
e5:00:d8:75:64:68:1a:ec:39:a4:c1:60:a7:6a:ce:
34:2b:52:b8:57:dd:02:82:ae:38:8b:6f:e0:74:cb:
9b:c3:04:6c:91:e2:e1:d2:b0:f0:c8:b1:dc:99:60:
e5:b4:48:22:39:e8:01:76:82:5c:c8:ce:69:ea:d6:
9c:71:c4:e0:f4:1e:8f:ed:43:95:c8:1a:f4:12:b1:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:F8:EE:15:5B:54:5A:D2:BF:05:2A:5C:70:89:D5:5A:90:4F:FD
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:8f:9a:ff:e6:ba:b2:32:b1:15:c5:e4:06:79:28:71:4e:89:
ec:2d:24:b6:2d:be:d0:61:eb:e7:83:ad:89:ad:6b:a1:6c:95:
18:3b:6f:11:ce:a9:02:73:19:6b:3a:43:4c:56:99:ce:5e:f8:
b9:29:af:49:b4:a7:9b:0f:3b:f7:06:a3:23:04:a8:21:fb:72:
c2:a1:43:40:dd:59:27:98:c8:85:e7:02:cd:fb:14:f1:51:7f:
48:fd:ab:b6:d1:95:b7:b6:e8:d9:e1:89:2e:41:1d:9e:39:dc:
d7:35:44:5e:9e:f5:2c:b3:2e:48:46:40:f0:1c:5a:c8:1d:0b:
12:79:9f:97:85:03:a3:69:a6:a6:58:75:95:a1:73:ed:1a:38:
bf:e4:92:8c:1a:3d:fc:c6:2e:60:85:b4:ee:53:16:18:2f:40:
85:06:bc:fe:a6:aa:9e:74:ca:77:b0:b3:b4:44:2c:ac:16:ac:
51:4f:2f:ed:2f:b3:ff:49:04:3b:73:9f:72:4f:9a:03:c6:3b:
52:bb:e5:94:6e:e5:91:91:99:2d:a9:34:ea:56:ab:dc:c5:62:
63:f2:02:e9:8e:e6:2d:77:f3:d2:83:e2:c5:af:8d:ed:11:28:
18:2a:b2:35:15:b5:a4:ce:04:b1:d3:c8:06:ff:e0:b0:09:9e:
f0:59:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:55 2026 by rpki-client