This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier: ccxGNHAFO4XMmSdP8EmX9htX4VyqvH1rc7OSpf3h9GY=
Subject key identifier: 8F:50:5B:22:88:27:5F:44:45:73:19:6D:63:D7:A1:9C:5A:39:20:83
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial: 2463
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number: 60F2
Signing time: Sat 24 Jan 2026 14:15:24 +0000
Manifest this update: Sat 24 Jan 2026 14:15:23 +0000
Manifest next update: Sat 31 Jan 2026 14:15:23 +0000
Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: gG7pyTbXPr4yWjKM+bRu/BIKQ7356DkUj+vNyaIe7EE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9315 (0x2463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Validity
Not Before: Jan 24 14:15:23 2026 GMT
Not After : Jan 31 14:15:23 2026 GMT
Subject: CN=6974d3fb-dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:36:48:df:46:0f:0d:c5:e7:3c:2b:57:05:
e4:b0:6c:be:4e:41:22:ed:65:68:23:7f:bc:51:e9:
cc:7b:ad:ba:21:98:7d:aa:cb:79:ca:88:e9:6f:43:
1f:b0:41:e1:5c:39:d4:24:04:55:49:16:e6:fc:60:
57:c9:41:80:e6:61:23:c4:60:4d:de:e5:c3:5d:e5:
32:f9:65:6e:89:50:36:87:41:58:59:f3:8d:7b:ff:
ff:27:ce:bf:f8:b1:e0:63:4a:9a:6f:c1:d4:31:85:
6b:97:55:85:83:4b:08:c9:4c:dd:e0:b8:12:df:f8:
ed:a4:3c:a7:7e:4c:82:69:1e:18:7d:32:57:39:7b:
28:a5:a6:74:28:4f:cc:59:da:da:bb:c3:c4:38:ae:
b1:be:f2:48:ac:06:d1:9e:84:af:24:60:9a:fc:8e:
20:30:48:a9:71:ec:88:d9:75:1f:a9:b6:02:47:2e:
e9:2e:db:41:94:44:5a:33:ce:af:82:cb:63:c1:55:
e5:97:6f:f2:ea:90:9f:f1:d9:58:3a:66:63:87:2e:
ad:54:24:b4:13:ef:da:0b:f6:7f:8f:eb:e7:ac:c8:
bc:8b:1a:0b:31:04:9e:a0:10:ee:d2:01:b0:89:75:
3e:00:ad:89:af:8d:55:fa:53:dd:3a:9d:65:fd:bf:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:5B:22:88:27:5F:44:45:73:19:6D:63:D7:A1:9C:5A:39:20:83
X509v3 Authority Key Identifier:
keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:9c:08:48:4f:a2:7a:1d:08:f3:ed:7d:b4:90:47:39:16:
26:1a:27:26:f2:fa:15:4e:d8:6d:a1:fe:1b:7f:df:12:4b:ce:
0c:ee:df:f9:aa:be:5f:63:36:eb:59:25:19:c7:e7:22:fb:bf:
67:f3:ca:94:98:f9:08:0a:ae:15:59:8c:ee:54:30:cf:74:7e:
75:66:6d:35:28:1c:be:f1:d3:28:d5:69:08:af:aa:e8:fa:7e:
f3:b6:f7:5c:cd:58:6d:ec:01:82:f0:73:a6:cd:b0:90:36:d1:
0e:15:32:04:e3:c8:bb:8f:7c:86:99:95:58:1e:3d:d5:9f:e4:
dc:9e:86:87:7f:1d:c4:58:63:37:0c:13:08:fa:5f:5d:c6:14:
9b:38:55:61:7c:25:79:11:19:42:68:6c:c8:37:69:90:99:0d:
26:d5:d7:90:0c:4b:74:9c:49:55:f4:f9:41:47:f1:91:14:94:
ea:c5:55:9d:5b:bb:5e:46:a2:02:2d:09:e8:e0:fd:14:a7:c6:
0d:bc:7c:0b:39:74:09:0b:7e:b2:03:fd:39:9e:60:bc:94:28:
15:d5:87:bd:fd:42:a9:24:6a:75:a7:5f:26:3f:bb:7e:22:9c:
a5:b6:a5:3a:01:64:ed:0c:98:62:bc:4e:3d:2b:ce:c1:49:93:
f4:59:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:35 2026 by rpki-client