This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
File: 2OexX5y5FnTlEn_UBtfZ5xjgirA.mft (raw, json)
Hash identifier: Ie02x9Xt41kBsuErz0JHV6EI6g7CVhA9eDYEc+XYj/w=
Subject key identifier: C3:7F:9C:62:8E:2E:E9:49:8F:57:D7:BD:49:B9:77:B7:77:84:4E:A1
Authority key identifier: D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
Certificate issuer: /CN=A917E27F/serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
Manifest number: 5B
Signing time: Sun 25 Jan 2026 06:15:16 +0000
Manifest this update: Sun 25 Jan 2026 06:15:16 +0000
Manifest next update: Sun 01 Feb 2026 06:15:16 +0000
Files and hashes: 1: 2OexX5y5FnTlEn_UBtfZ5xjgirA.crl (hash: YIe8bqv7omxdDWEj+FNsB9wXHodVxBPElWUocPLM2Og=)
2: 4197AB74735611F080D68151C4F9AE02.roa (hash: uw93y6FGovmGq+bi/XnqUmoXwqLRFeM+9sTlrsvluUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=D8E7B15F9CB91674E5127FD406D7D9E718E08AB0
Validity
Not Before: Jan 25 06:15:16 2026 GMT
Not After : Feb 1 06:15:16 2026 GMT
Subject: CN=6975b4f4-5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:25:01:56:ce:8c:83:a3:e9:f6:95:59:db:
81:d2:4f:c6:00:3e:ae:bd:3c:3e:5f:d4:59:58:08:
dd:ab:be:85:99:21:da:41:2e:5e:b2:f7:19:e2:0c:
9a:5d:79:43:9b:0a:5a:f0:af:6a:bf:57:54:8a:26:
c7:7d:87:60:df:18:c1:bd:85:bb:80:84:7f:aa:74:
0f:33:24:13:1a:a7:c0:81:4f:ef:8a:f9:a3:90:8e:
c2:eb:76:0c:44:df:4c:7d:19:15:4a:ae:5f:1b:8e:
b6:ba:84:a9:99:f7:e4:94:a0:51:47:67:4c:38:81:
e8:67:8a:43:2f:1a:39:1f:a6:41:63:5a:8e:8b:d4:
60:f9:98:46:58:02:8b:dc:f9:5d:07:56:9a:03:d4:
2e:f6:8b:4d:26:0c:a7:2d:23:bd:bc:12:b6:fa:41:
b3:74:73:0b:b6:af:a5:7c:2a:0a:91:af:02:38:8f:
ce:e7:bc:78:79:f5:73:6c:97:d2:35:c8:5a:6f:3c:
16:4a:2a:5a:2d:f3:5d:49:e0:4f:a2:09:c1:b0:bf:
0d:e7:12:32:cf:75:ea:d0:1b:77:d8:61:82:e7:45:
59:64:8b:6d:b5:2d:23:e1:53:4f:7a:68:39:42:06:
c3:07:02:b6:e1:a2:9b:b0:24:12:f7:55:f6:b6:f8:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:9C:62:8E:2E:E9:49:8F:57:D7:BD:49:B9:77:B7:77:84:4E:A1
X509v3 Authority Key Identifier:
keyid:D8:E7:B1:5F:9C:B9:16:74:E5:12:7F:D4:06:D7:D9:E7:18:E0:8A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2OexX5y5FnTlEn_UBtfZ5xjgirA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/769D2D6672B711F09C04690DC4F9AE02/2OexX5y5FnTlEn_UBtfZ5xjgirA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c2:1f:bd:8e:23:b2:24:9b:5a:8d:fa:10:e9:71:f8:12:06:
1b:1f:25:77:5e:82:25:16:b9:13:0e:d7:c5:c0:5a:13:d7:69:
64:9a:41:c5:99:2b:88:4f:c3:37:71:be:39:d4:7f:16:8a:f0:
a9:fa:6d:60:be:c9:4a:d9:5d:e7:9a:c7:4b:fe:0e:99:51:56:
3f:10:d5:1f:e6:26:2f:23:bc:97:cf:31:09:8e:a8:4c:f7:f5:
2d:2f:8f:bd:60:c3:89:ed:a6:78:dd:cb:52:6b:48:4f:44:49:
ab:64:7f:cf:47:d0:60:2f:f3:25:6c:34:02:fb:0c:e4:17:7a:
5a:d9:0f:32:35:a4:8d:98:3c:06:56:48:a7:3e:26:0d:f1:c8:
30:88:73:82:07:5c:e7:43:7f:e3:eb:9f:b0:c7:6f:f1:c9:3a:
79:29:3a:2b:56:f6:85:80:07:70:65:86:bd:12:3f:15:23:8f:
8b:9b:e6:b4:b0:52:be:13:3f:b1:b2:fc:98:54:8d:fd:6f:93:
31:2c:d5:82:e1:eb:a2:47:82:ef:6b:0d:3b:37:c7:31:52:69:
e5:f8:47:b8:65:04:b7:93:c2:f9:6e:f5:64:79:ac:7e:9a:42:
1a:6a:60:1b:c7:7d:da:4c:0b:78:30:34:2e:ca:a1:9b:a7:95:
6a:07:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:36 2026 by rpki-client