This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json)
Hash identifier: TkAUowi5LwIGgZGqz8wayA2t1uiNRZYL7Kd0pNkAqi4=
Subject key identifier: B2:C8:89:D5:F7:82:E1:08:7F:A0:10:DF:17:A4:54:A0:93:96:D2:43
Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA
Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
Manifest number: 38
Signing time: Fri 23 Jan 2026 06:30:55 +0000
Manifest this update: Fri 23 Jan 2026 06:30:54 +0000
Manifest next update: Fri 30 Jan 2026 06:30:54 +0000
Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: UButqJXX9vxOg61FLqfc+Vuj3WSUzaggwJ0HLVR/0oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl
rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
Validity
Not Before: Jan 23 06:30:54 2026 GMT
Not After : Jan 30 06:30:54 2026 GMT
Subject: CN=6973159f-2111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:f9:16:d9:01:69:8b:58:5e:81:b5:4e:89:
bd:29:94:77:10:24:cf:00:88:22:c9:b1:cf:38:06:
bf:dd:50:65:a2:ec:b0:1c:03:02:81:aa:e9:6a:69:
2f:51:ad:1b:bb:29:d9:cd:02:7f:01:71:07:e9:d9:
28:93:eb:39:ad:82:29:8f:18:c9:3f:3a:9d:f4:66:
83:07:8d:44:ce:cb:b0:a4:43:31:bb:00:ed:fc:2e:
e6:c2:e6:b2:81:72:09:b7:aa:37:16:e5:f7:1d:fc:
e4:5d:82:0d:10:f0:dd:47:27:05:67:5f:1e:6d:a2:
71:5c:da:c7:38:6a:12:07:0b:cc:22:e3:a7:af:c1:
40:5f:68:92:cf:c1:43:9d:88:b7:ba:5f:75:f8:b3:
3b:41:a3:5c:8d:06:25:08:28:2a:d9:4d:2e:48:47:
ec:95:10:21:34:33:c3:3c:f2:66:f4:b0:51:78:98:
bc:e5:69:42:10:2e:fb:e4:ea:b0:5b:9f:d2:3b:ad:
cb:4f:79:0d:a7:c9:0c:29:72:aa:31:13:38:f1:e4:
ef:69:77:49:ac:52:aa:0d:82:9a:42:dd:b1:5f:2a:
37:b6:94:f4:cd:28:70:21:f0:c5:ea:1c:3c:48:b5:
73:b1:06:5d:fd:5d:4c:d2:67:3c:68:b0:88:8d:ac:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:89:D5:F7:82:E1:08:7F:A0:10:DF:17:A4:54:A0:93:96:D2:43
X509v3 Authority Key Identifier:
keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:84:63:c7:03:47:e8:96:d0:7e:dc:2c:6e:f4:be:19:77:93:
87:1e:bc:65:a1:96:f5:d7:f0:18:1d:8f:b6:8f:df:d6:b1:2e:
02:cc:24:e1:cc:1d:75:39:12:09:c0:05:21:ec:65:25:d0:2a:
00:ce:a8:bb:81:21:c5:91:82:ea:f4:d8:03:fd:6b:1e:0c:87:
8a:80:61:d9:6e:29:a6:78:84:c6:27:0b:de:d8:71:41:29:05:
db:6d:38:df:cd:aa:63:39:e8:c2:05:15:f7:b5:56:c6:48:3f:
b4:f3:bd:f6:8e:71:3c:60:67:f3:64:3e:43:6e:b8:d6:13:a9:
3c:71:fc:e7:7c:c2:8c:8f:0f:45:ac:1f:b0:9c:6d:8c:54:03:
80:7b:73:43:66:f9:7a:b5:ab:48:77:74:68:f4:e7:07:64:61:
87:47:c0:9a:41:34:79:77:48:38:e0:24:c9:6d:d9:40:8b:23:
1e:80:1c:e7:33:9c:5a:63:d0:f3:45:18:c0:8f:b5:d1:5d:18:
69:d8:1e:c4:8c:11:dc:ba:10:43:bc:ea:31:a3:30:54:c3:58:
2b:03:c0:d7:90:e3:5e:ca:e7:32:f9:88:01:51:22:d5:a3:c7:
f9:53:66:8d:06:9c:96:b7:41:42:ea:d8:b9:a9:8d:49:d1:80:
39:ea:43:ee
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2
RDE0MkJFQTAeFw0yNjAxMjMwNjMwNTRaFw0yNjAxMzAwNjMwNTRaMBgxFjAUBgNV
BAMMDTY5NzMxNTlmLTIxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClDvkW2QFpi1hegbVOib0plHcQJM8AiCLJsc84Br/dUGWi7LAcAwKBqulqaS9R
rRu7KdnNAn8BcQfp2SiT6zmtgimPGMk/Op30ZoMHjUTOy7CkQzG7AO38LubC5rKB
cgm3qjcW5fcd/ORdgg0Q8N1HJwVnXx5tonFc2sc4ahIHC8wi46evwUBfaJLPwUOd
iLe6X3X4sztBo1yNBiUIKCrZTS5IR+yVECE0M8M88mb0sFF4mLzlaUIQLvvk6rBb
n9I7rctPeQ2nyQwpcqoxEzjx5O9pd0msUqoNgppC3bFfKje2lPTNKHAh8MXqHDxI
tXOxBl39XUzSZzxosIiNrPF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUssiJ1feC
4Qh/oBDfF6RUoJOW0kMwHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF
QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv
R3lYa3YxUENGRTIwVUstby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGWEY8cDR+iW0H7cLG70vhl3k4cevGWhlvXX8Bgdj7aP39axLgLMJOHM
HXU5EgnABSHsZSXQKgDOqLuBIcWRgur02AP9ax4Mh4qAYdluKaZ4hMYnC97YcUEp
BdttON/NqmM56MIFFfe1VsZIP7TzvfaOcTxgZ/NkPkNuuNYTqTxx/Od8woyPD0Ws
H7CcbYxUA4B7c0Nm+Xq1q0h3dGj05wdkYYdHwJpBNHl3SDjgJMlt2UCLIx6AHOcz
nFpj0PNFGMCPtdFdGGnYHsSMEdy6EEO86jGjMFTDWCsDwNeQ417K5zL5iAFRItWj
x/lTZo0GnJa3QULq2LmpjUnRgDnqQ+4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:24 2026 by rpki-client