This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier: M6a6GQCN1Iv39pmls9MUC7Q9MIeQyMRUNsLJHlUC49c=
Subject key identifier: 76:15:E3:09:27:3E:B7:B3:E9:D3:F7:C2:4E:35:70:3B:F8:A6:36:35
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number: 0169
Signing time: Sun 25 Jan 2026 03:14:58 +0000
Manifest this update: Sun 25 Jan 2026 03:14:58 +0000
Manifest next update: Sun 01 Feb 2026 03:14:58 +0000
Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: IuCxMBRLhpuIdGozWmhEJ8oky+mGmutCdGEL/x2GF9c=)
2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Validity
Not Before: Jan 25 03:14:58 2026 GMT
Not After : Feb 1 03:14:58 2026 GMT
Subject: CN=69758ab2-a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:08:e3:2a:84:8a:82:9b:9b:b8:1a:b2:4a:
2c:e9:1e:26:ad:f7:e2:1a:5a:bb:87:5a:3b:ad:e3:
af:d2:b2:90:7a:24:2d:e2:94:8a:1d:75:e4:12:e7:
5b:50:61:c0:00:94:71:a0:e4:0b:9c:9e:1d:9c:be:
7b:6a:a7:ff:99:fa:57:4d:26:b3:74:fc:1d:5c:a3:
fc:d8:6d:4f:50:15:f5:7c:41:d9:d5:99:96:49:d4:
35:f3:23:0e:0a:15:5c:48:c2:ca:80:8b:df:8a:13:
8c:13:6f:6a:34:be:bc:d4:0c:c2:71:15:03:30:3a:
c2:a8:88:0c:ed:7b:ec:dd:20:38:77:42:73:d9:28:
36:a1:06:af:a6:f8:3c:41:fb:b7:ac:f5:d3:a5:a4:
8a:65:59:6b:1a:c6:b2:2d:20:48:53:7f:2e:19:b5:
19:a7:d8:6e:88:1f:c4:38:ff:d6:f8:39:15:31:e7:
7c:25:b1:61:70:74:ee:aa:bc:d8:19:6c:49:6e:2f:
0a:52:9c:2d:b2:15:23:34:eb:02:fc:11:1d:cd:4b:
4f:2f:37:37:d7:90:fe:f2:fa:63:a0:60:d1:03:e4:
96:52:b4:8e:00:e6:bf:3b:bc:af:0d:6f:3e:ab:db:
8a:fd:30:e7:1d:79:b2:4c:9b:95:dc:62:af:e8:a7:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:15:E3:09:27:3E:B7:B3:E9:D3:F7:C2:4E:35:70:3B:F8:A6:36:35
X509v3 Authority Key Identifier:
keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:20:2f:22:9f:49:14:93:39:4c:02:33:25:79:d9:ee:31:
fa:c6:73:f3:70:fd:66:0e:4f:ac:d8:ac:6b:e5:ce:7f:8c:aa:
0c:e3:34:8a:ff:54:0d:2e:51:ae:90:cd:55:9b:b0:a6:af:1f:
23:9b:9e:9e:f2:d5:d7:6f:68:21:84:76:7d:9a:51:b3:2e:05:
12:e2:62:43:e6:d4:0e:91:29:e7:da:19:27:7c:c9:58:34:89:
b2:82:33:b0:29:97:18:ec:94:db:00:06:dd:a9:f3:71:37:86:
e0:ce:e2:88:18:c5:0a:35:eb:8b:23:1b:88:a7:31:96:f9:64:
97:68:d7:68:33:a5:c2:50:c6:64:d5:70:a7:c0:95:ab:39:05:
62:cc:c4:cf:33:a4:4a:e8:b3:f6:b9:ce:dd:d7:f9:ea:9c:7f:
8e:80:a4:73:cc:26:28:62:39:32:2a:ec:04:44:31:03:f2:4f:
60:99:af:9f:d1:cb:3a:13:72:b5:cc:aa:7d:56:19:d9:49:3f:
4e:84:25:4f:a2:67:99:5d:86:36:f0:33:14:b8:5f:55:50:50:
77:5c:69:a6:1a:a7:85:c9:e2:6b:6f:b2:f9:f4:3a:82:54:f5:
3c:ea:71:e5:ce:5b:d1:8c:60:51:2d:2d:14:c9:8f:a3:9b:ad:
11:6d:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:11 2026 by rpki-client