This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier: jZM0ygMM2Ymx597q1Yi/c1FrSbdB0o3JYok8yFvORhQ=
Subject key identifier: 36:B5:97:AE:BC:16:63:65:3A:A0:34:97:D8:6C:3B:7F:FC:94:76:8D
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number: 012B
Signing time: Sun 25 Jan 2026 03:50:48 +0000
Manifest this update: Sun 25 Jan 2026 03:50:47 +0000
Manifest next update: Sun 01 Feb 2026 03:50:47 +0000
Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: nZjl4W8jURmLnco8dBQtMFOW2J5+P04019qnEAeOpsQ=)
2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Validity
Not Before: Jan 25 03:50:47 2026 GMT
Not After : Feb 1 03:50:47 2026 GMT
Subject: CN=69759317-5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:28:12:e7:46:1b:a0:e9:13:7c:19:85:6b:
f1:66:d7:27:85:f2:eb:06:1f:c0:a1:a5:e3:fa:50:
b8:69:de:ae:28:ce:18:3b:aa:69:64:60:26:f1:59:
1f:03:dd:29:0e:c8:8c:0c:56:19:d7:eb:25:32:49:
48:53:8a:00:38:f5:e5:de:51:84:9a:a1:c4:7c:72:
af:bd:10:19:9e:1e:5c:f4:7e:35:d0:01:0c:38:a6:
56:ff:15:76:42:70:98:87:e1:d4:9a:f6:39:00:4c:
2e:07:99:ff:f3:07:e9:20:16:2a:22:ba:0a:b4:58:
0d:60:be:c2:8b:cf:42:5b:7e:3b:52:f3:36:8f:8a:
3f:be:75:43:42:46:98:1b:d7:a2:65:8a:f9:40:cc:
42:0f:17:0f:c3:c4:32:f5:26:49:d3:a8:f4:99:79:
5a:ca:3c:61:f0:67:9e:3b:b2:6a:aa:30:bc:d5:7f:
b3:9d:ec:11:70:c9:9b:7d:63:bc:0f:6c:48:31:1e:
cd:45:f8:46:48:17:8e:f8:2f:47:9b:69:0b:2f:ce:
77:39:f5:a2:48:ac:ec:42:bb:2a:53:25:f4:10:d6:
c2:e1:97:4f:72:03:e4:27:2f:e5:e3:43:e6:11:cb:
89:e3:ab:5d:ca:17:54:c0:62:5d:85:97:69:94:c1:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:97:AE:BC:16:63:65:3A:A0:34:97:D8:6C:3B:7F:FC:94:76:8D
X509v3 Authority Key Identifier:
keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:00:68:a7:59:16:87:c5:80:74:ea:ef:19:42:11:4b:0e:
bc:a4:14:2e:73:38:d9:66:f9:e4:df:da:ae:35:d3:1f:cd:98:
95:39:ed:21:bc:f9:72:68:c8:16:a2:c8:7a:36:9f:13:d9:41:
64:6d:71:64:82:47:2e:2b:93:ca:12:47:97:9a:c8:a8:07:92:
54:3a:b3:fe:2b:ae:31:24:b8:d4:d6:7f:e0:ad:66:fd:73:f1:
1b:b6:72:0d:c1:6f:6c:ce:ea:41:b8:bd:98:a4:06:5b:d2:c1:
37:cd:75:9d:ee:42:d3:4d:1c:aa:30:ad:a7:c5:a2:b9:d4:d4:
1e:66:2a:36:b3:ea:71:72:b1:52:98:78:ab:ec:c6:e6:c8:73:
01:44:d6:a2:26:3e:72:21:5d:19:79:1a:4b:55:6f:53:62:06:
50:9d:aa:37:c0:09:6e:b7:92:83:62:1c:a3:8f:0d:e2:19:43:
54:88:bb:b8:a9:68:2c:4d:b9:83:2d:bc:a9:64:3b:f4:50:28:
3e:4a:a9:7c:ce:0f:b0:02:52:1b:57:3c:fd:9e:a3:fc:fb:a7:
b8:c7:79:a5:3c:69:dc:1f:db:f2:8f:e4:80:0d:eb:0e:4a:b1:
c8:9f:d2:ee:c2:d3:04:09:d3:d0:97:a8:cb:ae:6b:78:c8:4b:
56:f7:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:49 2026 by rpki-client