This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json)
Hash identifier: OICjUxlLtT+Z+ZKxJ9dzt8WaBOOuHNyXsPaXCAiZY90=
Subject key identifier: 1C:2C:2F:78:5C:AD:FD:3A:94:B5:95:94:D5:CE:AF:D1:95:1A:6A:FD
Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Certificate serial: 0BD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
Manifest number: 0BC8
Signing time: Sat 24 Jan 2026 18:29:18 +0000
Manifest this update: Sat 24 Jan 2026 18:29:18 +0000
Manifest next update: Sat 31 Jan 2026 18:29:18 +0000
Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: O+ucCC/LqFnDi9919IGOmntZuAO+PkFCBrZH38/ZdcY=)
2: A79D17F2361111EA95391375C4F9AE02.roa (hash: BaWI7xJMWStFqS3rfxy1KN0Y1XDKImiSU+r05QWEXCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Validity
Not Before: Jan 24 18:29:18 2026 GMT
Not After : Jan 31 18:29:18 2026 GMT
Subject: CN=69750f7e-c99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:23:27:a6:4f:06:36:6a:45:be:8c:54:06:
27:95:02:a9:e5:d7:2b:9a:1b:60:98:17:22:a8:2b:
c7:55:81:33:d5:01:e6:c9:c0:cd:6f:58:98:60:6b:
df:98:95:36:33:21:9b:3d:0f:6d:df:bc:f3:79:f3:
1c:e5:bf:72:c7:df:32:4c:33:87:bb:a3:a3:7c:61:
07:78:be:c0:4a:7a:86:f2:6d:35:d9:e6:29:22:9c:
53:55:fa:5b:61:1d:17:1f:08:5e:03:fa:7c:b7:db:
76:ab:a7:5f:da:11:08:36:44:97:d8:bd:e9:8a:e3:
fb:8a:38:68:82:95:38:6d:4e:cc:61:d0:c1:36:20:
8c:48:3e:e0:ac:0e:88:66:d8:7b:13:aa:34:ab:f3:
fd:b6:31:4f:b9:20:1d:ff:b9:a8:c7:66:34:9d:b4:
b1:35:f6:d4:4e:f4:06:34:1f:e5:fc:66:6c:3e:55:
8d:e2:be:ea:db:68:7e:85:30:ef:d1:88:82:b0:68:
64:88:9a:04:8b:a8:d6:4b:1e:5e:c9:24:c3:1a:a1:
7c:90:11:f2:a7:4c:42:60:45:ae:99:e4:45:a2:a8:
e2:63:f6:9e:b5:c8:e1:9d:74:e2:b0:35:d7:43:de:
00:33:b9:a2:45:88:8f:03:3e:63:8d:4c:ae:f6:dc:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:2F:78:5C:AD:FD:3A:94:B5:95:94:D5:CE:AF:D1:95:1A:6A:FD
X509v3 Authority Key Identifier:
keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:7a:8c:7f:06:b2:66:96:0e:01:80:1b:24:22:24:c3:ba:
98:5b:fb:8e:90:7f:d6:e6:93:7f:08:13:bd:de:1d:a6:a9:cd:
b1:9d:c9:0e:13:ae:45:5f:c9:1c:b5:77:89:19:54:eb:e7:39:
b5:fa:17:ba:84:df:3a:80:44:e2:2f:92:fd:ef:ac:2e:37:c9:
85:8f:3a:40:2f:dc:a3:c7:a8:6d:d6:58:71:3b:f9:16:75:f2:
97:71:80:83:ab:ad:c0:4a:a5:21:1b:2b:98:51:e0:e4:41:cc:
9a:ef:8d:2e:8b:e3:fb:84:97:17:61:10:02:b8:c3:67:e2:8b:
4f:d2:76:97:18:43:ff:c6:b2:c8:bd:5f:2c:d7:46:31:8e:3f:
88:19:78:0e:71:9e:6e:c0:c3:05:38:22:e9:b8:0e:8a:ab:5d:
76:9e:f0:ec:e0:f9:50:73:17:be:58:4a:03:e0:7a:72:a7:6a:
58:04:bf:ff:61:80:bb:01:e9:d4:92:af:a7:fa:a9:8b:59:de:
69:af:3f:ad:19:01:34:36:3a:c8:69:45:ff:36:34:92:e5:d2:
8a:93:36:67:64:36:5b:1f:ff:3c:22:27:f1:57:0a:eb:45:a5:
75:35:fb:22:d5:10:1c:8e:20:5c:a8:4a:c1:f6:e0:25:73:f9:
bf:02:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:06 2026 by rpki-client