This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: 030r1JENIGPf8QcAdNy9U0iw82m01nsY4sNKxYg37CA=
Subject key identifier: 52:DD:3B:9D:EB:DD:4E:9C:C7:17:B6:F5:25:9F:74:ED:80:C3:8D:D6
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: 014B
Signing time: Sun 25 Jan 2026 01:41:44 +0000
Manifest this update: Sun 25 Jan 2026 01:41:44 +0000
Manifest next update: Sun 01 Feb 2026 01:41:44 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: UzfpwMt5++EEsO+6Z6CyRHR3ETmA9izQMinSkNsQwo4=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: nFQQw/dyghkb1sXKy9uupZRqxzdAPtcnxFOFgRiXGi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Jan 25 01:41:44 2026 GMT
Not After : Feb 1 01:41:44 2026 GMT
Subject: CN=697574d8-889f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:bc:df:1d:7b:44:d8:72:a9:bd:2b:6a:f2:
f3:1c:1d:1d:1b:eb:e3:96:fa:81:f1:c4:82:14:48:
c0:ba:a8:f4:da:3f:1e:c8:07:32:e7:4d:8b:0d:ae:
e8:ed:43:e2:3a:4f:0c:e8:74:69:13:c2:c4:60:b2:
ef:f7:b3:f8:17:2e:af:f7:1c:b1:4e:eb:e5:2c:23:
f0:c0:c7:37:92:74:e3:fa:1f:a1:5c:18:ca:83:5e:
94:db:cb:e8:06:cc:ff:3d:fc:5a:58:26:9f:60:d4:
a3:72:f7:64:0e:45:bd:5d:04:2c:e3:54:14:11:77:
f3:8a:02:b5:32:62:43:38:7b:81:1b:ef:99:48:28:
bd:0d:97:56:9d:ac:05:7c:62:75:0d:d1:32:6b:ec:
f1:bb:9e:aa:a8:fb:7b:09:d1:28:37:0e:04:71:e7:
b7:fe:14:93:50:23:47:ee:23:55:45:e6:ea:f5:9f:
73:88:1f:85:fc:af:70:48:66:b9:fa:e4:f5:45:07:
a1:71:0f:23:b2:f2:2c:f9:1f:74:5e:2a:da:50:1c:
20:53:cd:14:5b:74:f4:fa:04:69:03:e1:e9:85:38:
ae:5e:07:5b:10:1a:73:65:eb:1f:8a:16:05:1a:fd:
eb:82:31:10:5f:00:8a:6b:bb:cc:54:b6:08:43:fe:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:3B:9D:EB:DD:4E:9C:C7:17:B6:F5:25:9F:74:ED:80:C3:8D:D6
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ff:53:fd:e0:81:a8:f0:07:87:07:31:e8:2a:54:d2:76:76:
ac:23:bc:e8:7e:f3:b7:97:54:e7:35:2f:99:f6:59:33:f5:11:
c3:01:36:f8:bb:c6:5b:cd:e7:7e:c0:8a:77:f5:d0:24:6f:e5:
c4:bf:c0:30:e9:f9:f7:22:fd:92:87:12:9f:e7:b7:69:9d:14:
31:55:bb:e2:88:a3:4d:f9:62:c4:97:75:04:20:ef:ec:c8:f1:
41:9a:9e:f1:8c:44:fe:cb:8e:d4:be:e4:3e:1b:f5:57:6d:0b:
59:ae:9d:8a:25:16:c2:03:f1:a1:ca:b1:72:2c:0b:b3:bb:90:
00:07:c9:6b:55:59:bd:f7:73:53:df:6b:1b:af:96:04:2b:ae:
2d:f3:b3:04:03:50:4a:b8:f6:f2:9d:f5:c4:95:ba:d3:5f:1c:
e3:fc:2d:2b:5e:f4:25:e5:41:29:f1:0c:4d:57:58:6c:5f:cb:
c5:b0:a3:34:d1:d4:9d:8e:49:36:43:10:c8:6f:94:65:4e:c5:
82:6d:96:e6:2c:c8:7d:50:68:d4:46:95:8f:0f:f3:a4:19:a2:
46:a8:c9:fe:54:94:83:10:36:db:e7:1c:1e:de:a8:c0:92:3d:
b6:de:d4:d5:0d:22:41:3a:6d:02:bb:4b:8f:82:d1:3d:46:b3:
81:d1:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:53 2026 by rpki-client