This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier: oJlzhN2+yfJ6vDj3SEx071wdyubkIIfOHL9Pc1TxFJw=
Subject key identifier: 88:60:A8:46:F8:C2:9E:B2:CE:66:3A:12:6E:C2:2F:B0:E3:7C:86:22
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial: 269B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number: 2689
Signing time: Sat 24 Jan 2026 15:31:50 +0000
Manifest this update: Sat 24 Jan 2026 15:31:49 +0000
Manifest next update: Sat 31 Jan 2026 15:31:49 +0000
Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: dMB7UY0zTDCFkvKU7oKS9cxxOJEQ/HmMZxbypFljeY0=)
2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: e0co4Hat6DA/r50rufv9AFKb2G1kzZANUtcERsSzuVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9883 (0x269b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Validity
Not Before: Jan 24 15:31:49 2026 GMT
Not After : Jan 31 15:31:49 2026 GMT
Subject: CN=6974e5e6-4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:19:06:fd:3b:7b:88:b4:1c:8b:9a:da:fd:
52:9f:89:09:a9:71:55:ad:9f:cb:bb:32:5a:de:70:
1d:9d:fe:34:04:3b:c9:f1:bd:63:c3:4d:65:c7:60:
97:d7:5b:93:d6:df:57:db:57:e0:37:d8:08:4e:d9:
d8:42:8b:4b:72:d4:b9:e6:92:e3:63:f0:1d:5a:fa:
27:81:ba:b0:a9:60:09:28:61:7c:f5:3c:4b:84:b5:
8c:f9:7c:ac:f2:28:ad:0f:f6:9a:2b:49:1f:68:60:
31:d5:36:ac:72:f2:eb:1d:a6:46:15:a9:ae:1d:41:
49:18:93:4d:25:64:59:59:bd:1d:25:b9:86:36:7f:
f3:68:fc:d8:8f:8a:ac:43:aa:2a:73:9b:71:c7:36:
4b:b2:af:d5:95:07:f8:45:a5:d6:79:3e:57:89:1e:
dd:55:38:31:ce:d4:2f:86:1e:9e:60:16:93:7d:a9:
ca:18:a8:71:06:39:c9:eb:2d:57:1f:c1:67:f4:2e:
28:ac:9b:f0:3f:ea:da:e8:b8:cd:e1:3b:14:3e:87:
32:e8:48:a8:c0:ec:e0:97:2f:a6:7d:d8:0c:bd:1a:
80:e6:96:fc:a2:f9:4a:47:92:06:7c:2c:85:24:f1:
6d:70:e2:f9:73:dd:96:74:9a:39:ae:44:d9:08:66:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:A8:46:F8:C2:9E:B2:CE:66:3A:12:6E:C2:2F:B0:E3:7C:86:22
X509v3 Authority Key Identifier:
keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:75:4c:58:06:53:05:08:2a:94:55:fd:f1:9a:0f:8c:7c:22:
00:28:0b:7f:1c:bb:4e:81:af:21:ea:29:a7:d7:1e:9e:92:5d:
52:66:80:25:4f:ea:4d:95:63:e4:e3:83:56:19:83:78:03:b9:
94:ca:d0:42:72:31:ef:e2:9e:ab:ee:90:f9:51:87:1e:56:6a:
6d:6b:59:a3:75:3b:cb:b9:a3:a1:18:8a:18:ff:d5:a0:95:62:
fb:f2:6f:f1:ad:fa:bf:86:14:e7:31:19:cb:9a:5b:70:e6:7e:
39:d8:3b:e4:20:5d:d8:18:8c:17:02:a0:58:02:63:f2:7c:ad:
09:85:a7:a9:ec:3f:26:61:0b:19:7a:53:81:13:d1:3b:ab:74:
cd:e8:6b:87:d4:5c:84:69:f9:b7:19:50:7f:44:62:d2:16:36:
4e:61:26:f6:9f:65:67:31:dd:ef:3b:ff:6d:74:7b:57:84:f0:
ab:b5:31:2d:f5:1e:07:97:1f:e3:f6:f6:74:36:55:02:89:40:
2c:b7:81:8a:f5:e7:18:92:fa:e1:52:72:c0:e4:6f:e1:52:74:
b4:f7:11:78:77:8f:81:3c:36:bc:39:78:60:63:a4:3f:ff:39:
81:24:c5:7a:e4:e0:af:65:22:36:31:ca:f0:1b:15:a3:0f:b8:
25:18:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:10 2026 by rpki-client