This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier: VX3sWH12/bS2ZlgU+v/++QidiLFzHgs4ag3i2wb+aWQ=
Subject key identifier: 99:46:1D:8B:63:46:68:B3:68:BC:A5:87:30:43:3C:56:41:CC:FB:66
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number: 01AE
Signing time: Sun 25 Jan 2026 02:32:53 +0000
Manifest this update: Sun 25 Jan 2026 02:32:52 +0000
Manifest next update: Sun 01 Feb 2026 02:32:52 +0000
Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: wQX002xYFkuvqKA7Az0ArnCsydPMKt0G1LUGwVpNGQM=)
2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: T+njLY2SFAOPX3VSAe1EY/xCteiDMwgUqIpmnoo6/ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Validity
Not Before: Jan 25 02:32:52 2026 GMT
Not After : Feb 1 02:32:52 2026 GMT
Subject: CN=697580d4-3c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:d0:0e:33:9c:a8:89:6d:c3:b1:a4:5b:a2:
81:7e:0a:f8:c3:5e:2e:23:01:84:c2:75:31:a7:97:
e6:a9:40:2b:31:f7:40:ed:b0:28:4f:d5:a6:f6:50:
22:1d:4f:7a:74:00:99:81:1d:86:25:50:eb:c1:c9:
22:34:e4:4c:fa:83:a2:11:be:54:10:04:e3:57:e7:
84:a3:1c:8e:5c:e8:f1:65:a7:01:88:08:70:4d:3a:
ae:f3:0c:fa:ee:24:7a:7a:6e:b7:5a:61:e1:b1:42:
bb:ab:ab:56:56:d0:77:ea:06:98:4a:3d:bc:97:96:
0d:fd:b3:39:69:c8:2b:1a:0a:b3:14:c3:b8:aa:6a:
d1:38:c7:3c:e2:19:89:a4:b6:b2:5a:6f:66:75:77:
71:f3:49:b1:63:82:89:c8:ef:bd:17:39:2b:65:f2:
79:3c:c4:f6:12:39:20:1b:c3:e8:b5:f7:5a:cf:25:
a8:b1:b0:c8:5b:28:30:0f:63:99:4e:a4:2c:4c:ae:
38:8c:f3:d8:d4:df:05:6c:eb:61:f5:cd:77:e1:bb:
7a:ca:81:94:41:1b:c2:99:bf:e5:3b:31:a2:16:56:
d4:31:f5:3b:6a:ae:b0:eb:77:d5:36:73:de:c9:33:
b8:95:05:3a:af:ba:07:b4:97:5f:19:7c:ed:b4:1e:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:1D:8B:63:46:68:B3:68:BC:A5:87:30:43:3C:56:41:CC:FB:66
X509v3 Authority Key Identifier:
keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e5:9d:5d:1c:60:8f:dd:e6:67:28:fd:9f:a5:08:79:62:3b:
c7:3e:a7:5e:21:6e:7d:73:d8:9b:90:8e:54:8c:17:aa:23:2f:
53:e3:bf:ac:b1:9d:77:e4:e1:dd:b3:12:fd:10:96:be:6d:7d:
52:07:26:06:7f:e8:57:3d:97:35:ce:1b:7f:a5:27:aa:4f:f7:
7f:ed:aa:a4:54:41:c5:fa:eb:48:db:cb:fa:a1:e2:ac:96:bd:
3d:3e:66:65:05:e7:d5:3e:0a:54:10:53:9f:ce:0f:c5:4e:b4:
11:f8:d9:83:2b:cb:ce:19:c8:85:a3:7a:39:74:53:94:32:cf:
ae:02:e7:71:5d:b9:77:f9:80:a0:5f:b6:06:8c:00:ff:bb:5a:
6a:5f:21:41:c7:a3:8a:8f:01:ee:01:4a:ee:25:e7:98:e4:4b:
8a:f0:9c:89:6a:30:1e:74:37:f5:a3:bb:f3:05:22:9f:00:e7:
57:4f:6d:58:b4:ce:79:e3:98:ec:95:98:f5:44:2f:0b:a0:f8:
31:17:23:66:4d:c7:8b:b1:5b:c2:eb:28:d9:2a:3e:51:0f:c5:
2f:ff:71:eb:0b:00:2c:8e:6a:3e:f5:29:bd:e7:2e:fc:f4:83:
2d:a8:09:85:50:a7:81:f6:31:1f:73:ff:49:d7:b8:6a:41:1a:
43:1b:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:58 2026 by rpki-client