This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json)
Hash identifier: ccpS0CB1VJyF7/Z4DClazxruprUP+2aL9LFzJM6io1c=
Subject key identifier: 4A:F6:BF:B4:CF:C3:F8:73:FF:C7:3E:95:FB:5E:02:50:49:7D:F8:CB
Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
Manifest number: 45
Signing time: Sun 25 Jan 2026 06:25:13 +0000
Manifest this update: Sun 25 Jan 2026 06:25:13 +0000
Manifest next update: Sun 01 Feb 2026 06:25:13 +0000
Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: WKxl7hHngOywyf+jl/2Bz/3t6+X1T1jSgYhDV6KVz8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Validity
Not Before: Jan 25 06:25:13 2026 GMT
Not After : Feb 1 06:25:13 2026 GMT
Subject: CN=6975b749-263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b2:f4:3b:08:e3:78:a5:a9:38:3d:ea:0f:
1d:8b:c4:0b:4e:de:4c:9c:c4:b1:24:58:79:4f:1d:
b5:c1:21:dc:a5:f9:19:ba:9a:eb:36:7f:2e:f4:d1:
71:3c:d5:b3:25:46:9e:a1:18:41:2b:88:e5:25:58:
a1:d3:df:96:d2:b3:de:ba:be:32:ad:d8:36:18:78:
1f:fb:22:96:6f:30:87:c6:c7:b3:a9:0f:61:1f:a4:
32:78:0f:2d:2e:21:3a:e6:be:15:bd:b9:d2:fa:2b:
3a:f1:ff:92:f1:7e:61:cf:9d:07:85:93:90:0d:2a:
96:bc:38:5e:2e:bd:09:06:ac:cd:d2:9b:e7:27:f6:
f2:93:9b:70:e2:5c:fd:04:a1:dd:8b:89:4e:03:d1:
2f:b1:33:cc:c5:04:2b:81:49:0e:17:fa:6e:65:9b:
22:00:85:d4:4e:bd:c3:08:87:e0:8f:7d:a3:a8:2a:
d7:bb:82:4c:31:96:b0:09:05:f9:3e:db:c8:1a:32:
c3:ce:d9:c1:dd:c3:70:6d:8d:4d:1f:b7:aa:9d:d8:
fc:b9:55:fc:c4:06:db:93:16:6b:f6:0c:e3:38:b3:
53:00:e1:3b:f6:b1:62:0d:44:44:9b:ed:1f:6e:55:
10:f0:e3:ef:98:b6:a7:f7:b2:95:f0:59:cf:fd:22:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:BF:B4:CF:C3:F8:73:FF:C7:3E:95:FB:5E:02:50:49:7D:F8:CB
X509v3 Authority Key Identifier:
keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:53:37:2d:53:88:dd:05:b4:e8:38:66:25:b9:4a:94:4c:
ad:81:7f:5d:79:5c:4e:df:22:31:cb:48:b4:01:90:09:bb:8f:
e5:39:21:ed:67:19:29:7d:c7:e3:fd:ec:b8:d3:a1:62:16:7b:
a6:46:bc:3e:5f:f2:29:18:82:3f:0a:6b:e1:8a:fd:22:83:ea:
16:ec:ba:ed:31:94:5b:c9:f9:1a:71:a5:27:2d:bd:2a:15:d4:
ea:f9:d3:e4:c0:a6:ce:49:4c:81:aa:f0:d3:ae:5b:44:d4:d5:
40:81:e8:46:0b:4d:ac:d1:76:69:09:85:0a:e2:55:69:df:53:
93:54:df:50:b2:eb:fe:d5:8d:54:5c:8c:f0:3c:d6:37:1a:58:
a7:61:71:64:a6:72:48:d2:5e:ab:54:47:e0:54:1b:bf:55:8b:
db:39:73:4e:5b:b8:bc:7a:cc:d0:13:fd:7e:a2:9a:be:62:d5:
cf:9a:70:c5:06:f8:7d:25:01:05:c6:0e:53:cf:b9:06:ef:3f:
9c:ba:b1:b3:a1:d6:de:c2:e4:2f:3b:00:22:f6:49:bb:b3:f6:
c8:be:e3:0e:20:61:0a:9b:32:dd:2f:8a:1f:e7:fe:4c:e5:dc:
c3:f1:ae:ac:c1:e7:bb:3a:31:89:18:da:d2:fd:02:87:f1:80:
0a:57:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:26 2026 by rpki-client