This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json)
Hash identifier: vPIcMFxosc3S+VrYpbZfbX7UbWWWsqoqWbMOHq5eOOA=
Subject key identifier: 6C:71:43:81:40:2F:43:F7:70:CB:D1:52:C0:4E:86:C5:B2:23:E7:EC
Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Certificate serial: 0CF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
Manifest number: 0CE9
Signing time: Sat 24 Jan 2026 17:47:37 +0000
Manifest this update: Sat 24 Jan 2026 17:47:37 +0000
Manifest next update: Sat 31 Jan 2026 17:47:37 +0000
Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: uL3jvGbQVwhngVzOKnA9ldk9oGzFcFaSq81boc6Sv+s=)
2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: CJEgaP8KqXDJxOZP2RnxuUbrLWDCGR55rSwKPSomEHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Validity
Not Before: Jan 24 17:47:37 2026 GMT
Not After : Jan 31 17:47:37 2026 GMT
Subject: CN=697505b9-444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:2c:2e:ee:80:89:07:48:af:e2:18:05:25:
05:8f:10:1f:ba:58:0b:6c:6f:0c:d2:a8:d1:a4:8f:
7b:4a:07:48:a8:43:c7:0b:0e:7d:8c:43:57:04:2b:
f3:36:b3:c4:57:4f:dd:e6:e5:8b:77:1b:c7:9c:e4:
40:17:2d:38:9a:6b:ab:40:52:03:73:fa:52:ca:ac:
fd:6b:54:bc:d7:64:8e:4f:7e:d2:60:f1:61:fd:a5:
0e:f9:3e:ec:c3:93:a4:02:0e:53:f7:99:cb:e7:28:
d2:ea:b2:5a:49:a5:61:0c:a1:ab:71:e0:e3:47:c5:
4f:a6:30:e7:0e:e3:a2:47:ec:77:00:fb:68:f4:4d:
00:25:8b:10:9e:76:9c:9d:63:2c:c6:5a:cd:08:ae:
ed:47:40:0b:28:25:18:91:f1:ea:4f:ab:da:1b:66:
7a:f3:ab:24:91:9d:a9:cd:96:33:7d:3e:74:3d:00:
b0:d4:a4:a6:b1:50:12:cf:40:15:ab:c1:24:84:88:
46:f4:47:84:a5:7e:99:92:6f:be:14:d9:50:bd:b0:
29:d4:50:6f:c1:eb:36:27:89:fb:73:ee:42:7c:66:
94:62:c9:00:8e:f9:a1:ea:41:b8:41:d7:5c:e6:45:
fd:d8:57:af:ea:66:46:40:2f:e1:e3:f1:9c:5c:9f:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:43:81:40:2F:43:F7:70:CB:D1:52:C0:4E:86:C5:B2:23:E7:EC
X509v3 Authority Key Identifier:
keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d7:07:78:9d:2d:f8:73:b7:a6:62:4c:e8:28:93:5e:54:e5:
bb:22:91:29:93:68:b4:0b:c1:e4:f9:1b:88:9e:f5:92:31:05:
60:2a:eb:0a:b9:41:46:e2:2d:80:5b:4f:00:df:88:0f:40:1e:
41:ef:e8:d4:82:70:36:eb:40:67:bf:52:29:85:89:8d:79:45:
0d:c0:3b:44:ba:2b:37:c0:7d:84:8e:80:51:b4:72:89:05:6a:
c5:15:19:06:32:b0:e9:53:5e:0a:cd:30:58:55:5a:ab:85:e6:
56:2b:de:86:04:06:37:5d:59:27:fc:ea:ca:32:3e:54:f8:43:
6f:51:4f:04:2f:87:62:16:03:92:93:f2:79:e1:9d:25:cd:ef:
6a:80:6b:fa:f0:4a:62:06:a2:2e:b4:ff:eb:98:2e:92:e8:1b:
b8:d6:1f:9e:f5:88:bd:30:13:65:c1:7f:85:f3:d5:99:65:6c:
3d:80:e3:10:06:c4:dd:38:e7:ef:35:94:79:1d:1a:95:2e:90:
83:e7:20:de:5b:29:ef:57:39:0d:11:78:5e:11:0d:e8:28:3b:
0e:a6:38:57:6d:33:4d:b5:e5:b0:12:76:53:b1:43:12:e9:89:
a2:b4:46:5f:24:99:1e:82:86:5e:b2:6c:1b:0e:53:4d:69:1e:
fb:ca:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:39 2026 by rpki-client