This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: 8arpSQNwH7xD6/j6KiyjpVq6NLqScpOhyP4V3wiwBgI=
Subject key identifier: 79:F6:8B:32:85:6D:D1:69:95:1B:CA:C8:20:D8:B7:22:5A:A4:E6:B8
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0A50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0A3E
Signing time: Sat 24 Jan 2026 19:12:39 +0000
Manifest this update: Sat 24 Jan 2026 19:12:38 +0000
Manifest next update: Sat 31 Jan 2026 19:12:38 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: l0JtFP6h8byKaQmxGa2pNnOT83bk5kq1ntPpWGlZNEg=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: Cf8bqRacvTWl+UzpH6e1kxekXSzzSxIQ9wSazOTj5Ck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2640 (0xa50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Jan 24 19:12:38 2026 GMT
Not After : Jan 31 19:12:38 2026 GMT
Subject: CN=697519a6-7125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:c2:f9:18:e7:18:32:6b:9c:29:f0:38:75:
12:bd:5f:f2:76:86:0d:4f:96:9b:76:ff:91:37:a3:
db:94:11:32:0f:aa:ed:8b:51:33:c6:29:9d:e9:fb:
cc:d5:dd:0e:e6:92:c5:74:1f:ac:76:27:0e:7d:21:
c9:8b:53:06:46:4b:42:59:99:c6:c7:5a:43:1c:69:
3c:71:c3:39:b3:ac:b9:a1:37:b1:71:94:f9:df:b7:
0d:3a:7a:fd:e7:81:55:b1:b5:c0:31:38:8a:83:8e:
13:f0:37:52:1a:18:2a:3b:7c:ba:5c:a4:e0:2e:ad:
c8:02:e0:94:ec:cc:c4:13:9e:b6:2b:e8:e9:77:63:
2c:32:3b:e2:17:32:3e:5c:b6:a0:90:f7:a7:2b:9c:
72:ba:4f:72:53:2c:b8:9d:26:7e:5c:43:f2:c7:42:
90:27:4c:73:65:44:05:f3:fa:7a:42:28:e2:40:7b:
64:75:c0:1f:cc:d4:e9:c4:18:c9:88:75:78:8f:b4:
24:3e:69:06:df:15:4e:49:70:34:c4:a5:10:8e:28:
ec:8e:7a:f8:39:0d:3b:35:12:4f:b6:f9:c8:86:45:
d6:ee:2c:a1:c5:0c:1d:2d:72:1c:a8:88:cb:4b:3e:
d6:c3:4c:81:c8:15:26:2b:e0:25:62:d9:2e:e6:45:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:8B:32:85:6D:D1:69:95:1B:CA:C8:20:D8:B7:22:5A:A4:E6:B8
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:4d:25:39:c0:48:09:5d:c6:8f:0c:55:c3:b1:73:79:17:
8f:c7:9c:c0:56:a4:13:72:a0:cc:6b:1e:c5:c2:ec:b5:c7:26:
46:d9:d7:dd:12:5c:16:04:ad:78:35:18:30:c4:97:44:cb:be:
04:b9:bf:54:f4:a0:28:59:85:6b:39:83:ab:2e:b1:f5:52:c1:
35:e9:4a:a0:62:87:85:df:5c:0e:6a:71:68:35:c5:da:18:19:
72:d1:b6:51:cd:9b:f7:87:cc:18:bb:7e:d4:88:e4:6f:a6:86:
0a:14:08:55:d2:d5:9d:57:84:26:15:70:03:8f:82:7a:6c:52:
2e:58:09:44:aa:c5:cf:de:3c:23:93:1c:27:3e:6a:cb:04:03:
83:c5:b4:f3:56:25:84:ea:5f:09:f6:8c:3f:6f:10:c6:0f:a6:
de:5f:19:4f:f3:69:95:e9:43:98:13:b6:de:61:b3:15:cf:2b:
31:78:69:79:94:ac:8e:9b:f3:b8:33:5c:78:b1:3b:79:89:6d:
7b:bb:11:9c:0c:ab:c9:8b:db:44:d5:d0:e0:39:b5:88:50:21:
3a:46:85:f1:50:43:80:39:83:cb:14:f0:49:67:38:89:eb:bb:
85:19:f3:7b:6c:0e:f2:b7:04:56:ff:cc:46:0c:18:15:a4:af:
f0:6c:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:43 2026 by rpki-client