This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json)
Hash identifier: nrDGT1BnvSJEDIKnTV9QRJHHbZlibJEIBEFe920W6UE=
Subject key identifier: 0E:7F:5E:62:EC:9E:39:08:F8:C6:65:02:21:4C:B3:BD:9C:87:56:9D
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
Manifest number: D8
Signing time: Sun 25 Jan 2026 05:02:15 +0000
Manifest this update: Sun 25 Jan 2026 05:02:15 +0000
Manifest next update: Sun 01 Feb 2026 05:02:15 +0000
Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: 9BzPPSb5BK+T5UKfls7fHCYjuZjIOn7AvOehlkUKIaA=)
2: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: dqRzvsYYzS0ot/6HGxMcWMe4B7L97QuQgSdCQiuHa2U=)
3: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: p4wINUwzjfYN0Bo2oW/pH90dIns+xH2+FFOhnoxyjpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Jan 25 05:02:15 2026 GMT
Not After : Feb 1 05:02:15 2026 GMT
Subject: CN=6975a3d7-76a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:d0:76:9a:91:da:b7:88:d0:53:57:19:5e:
31:be:55:1d:94:93:c6:66:7d:76:d6:ac:e4:e7:c6:
f4:11:ff:86:0f:8f:82:d1:fe:29:54:83:ee:b5:cf:
49:51:45:6d:db:7f:f3:54:b2:1a:f6:2e:ae:b5:b4:
ee:ac:8c:c2:16:6f:0d:00:1e:61:dd:f1:6d:29:ee:
b1:b4:0d:f7:82:4a:66:92:10:41:c9:7d:98:d7:39:
e6:e9:25:97:7b:f7:10:10:47:db:24:79:55:25:2e:
f3:72:70:79:0c:37:72:c7:d6:b1:f9:39:c6:a4:f9:
5e:7c:b7:13:d3:49:6c:39:b0:3c:79:77:d1:d6:ed:
d9:18:a8:4f:d7:c3:69:4a:68:f3:cb:f4:53:00:06:
91:08:c1:21:ce:19:09:7f:d1:9b:ec:75:bc:78:99:
a2:9f:39:a7:8c:ac:12:a1:ad:5d:4c:51:20:3b:d9:
16:41:fe:be:7a:81:e1:00:07:4b:d5:3e:0e:27:5b:
b4:ca:8a:01:8d:2f:b9:6f:01:95:9e:98:cb:81:57:
d5:14:dc:a8:f3:67:26:df:21:aa:24:70:94:6e:08:
e9:aa:60:b9:88:c5:68:9f:8e:76:55:26:33:dc:21:
08:df:2f:72:81:39:06:88:b0:36:3a:d5:e0:3b:26:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:5E:62:EC:9E:39:08:F8:C6:65:02:21:4C:B3:BD:9C:87:56:9D
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:d3:83:28:1a:00:01:e6:8f:fc:af:6d:dd:db:a1:cc:4d:
2f:87:0b:28:a2:cc:5a:10:d4:b2:2b:b2:35:b4:da:36:ed:e4:
ec:97:3f:bf:d4:06:ab:46:74:fd:14:04:36:65:31:ae:8e:73:
59:31:9c:0e:29:dc:4e:13:52:cd:09:b8:9b:c1:ee:e7:94:52:
0a:d0:e2:88:23:9d:72:0e:bb:40:f6:90:ef:79:ee:a1:cb:64:
de:15:fb:85:b8:ff:c3:5a:6d:1f:e8:2f:a9:14:ab:b5:0b:e3:
69:00:cc:75:eb:22:03:6e:a5:4c:c2:90:e7:b9:9a:f9:a6:5f:
33:a2:a7:98:1d:e1:bc:30:57:c5:f9:bb:a5:a1:7d:80:ac:ed:
54:a6:df:db:77:01:b1:29:52:f6:d6:51:5b:d7:ed:f3:d0:51:
9c:12:f5:29:89:c7:31:3b:1b:3d:17:e4:51:3a:3b:83:41:53:
3e:8c:c9:5f:f9:ef:6b:f0:17:5a:55:6e:fb:1f:c0:72:c7:69:
27:b9:c9:54:44:25:c9:ef:25:32:05:70:d4:58:54:2d:d5:71:
ed:bf:d9:8e:d3:b2:1e:75:ac:ab:90:01:f9:ae:0d:f8:eb:1e:
fe:94:2c:a2:28:dd:03:e9:16:07:7d:46:62:a2:1a:ea:f3:d4:
6c:fd:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:45 2026 by rpki-client