This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier: Qd72rNy58Z2hhb4K3HgegJvkbf8WheRTAikNeOehfvE=
Subject key identifier: F2:A4:7B:CB:B9:B0:C4:76:96:68:6C:72:BC:91:EA:69:07:41:9B:7E
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial: 0B1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number: 0B12
Signing time: Sat 24 Jan 2026 18:51:12 +0000
Manifest this update: Sat 24 Jan 2026 18:51:12 +0000
Manifest next update: Sat 31 Jan 2026 18:51:12 +0000
Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: L9+Rm1N3yzLEUoO7wXMfw49iecT/SgAelKTFzpF6eIo=)
2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: iGeCqjea5TKx5w3j1RMFWZOzP6n/8IBkqpNhUcYz96Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Validity
Not Before: Jan 24 18:51:12 2026 GMT
Not After : Jan 31 18:51:12 2026 GMT
Subject: CN=697514a0-a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:0d:a5:4b:53:80:74:d3:59:f2:10:df:08:
d6:a1:35:04:fc:e1:5b:b3:dd:92:84:ef:ea:46:4d:
0f:3b:d0:d4:35:aa:0e:6b:8d:9f:f7:a8:e1:9b:c2:
09:de:54:a1:3e:5f:ee:e7:fe:fd:f3:f5:a0:bb:57:
35:aa:86:b8:1c:6a:7a:2c:a3:74:ee:9f:00:44:aa:
c3:64:2c:6e:da:eb:c3:63:19:df:9c:ea:47:0f:b3:
d9:e6:0a:27:49:3c:0e:6f:82:c2:b4:94:91:3b:a4:
8a:4f:e3:30:f5:6e:33:b9:31:3a:08:31:61:4a:f6:
96:b7:2d:5b:e1:19:bb:46:5d:85:25:9a:55:cd:bd:
0e:5a:1a:15:4c:a3:98:d8:9f:bf:a4:98:b8:7d:5e:
48:9d:b7:9f:a8:ff:45:ca:44:a6:a4:8f:54:94:8c:
4b:5f:53:6e:d3:47:2c:9d:2d:a7:42:ba:bb:18:fe:
14:24:42:c9:02:8d:ca:0e:f1:62:c7:d3:f2:0a:4e:
3a:ce:44:7c:26:58:40:69:fd:f7:fc:97:37:a3:5d:
ac:0e:0f:8a:f2:d4:56:41:27:af:6e:ba:aa:80:5c:
46:0e:73:14:de:b6:17:53:61:16:d4:75:53:2b:b3:
7d:52:d0:7d:92:af:0b:9f:20:16:2b:24:1d:99:ab:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:7B:CB:B9:B0:C4:76:96:68:6C:72:BC:91:EA:69:07:41:9B:7E
X509v3 Authority Key Identifier:
keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:5e:23:a5:7e:2d:3f:33:fe:77:ad:09:c1:51:82:2d:6c:
ca:8c:90:91:d2:46:06:a8:ac:36:53:e3:66:2a:96:f0:33:d4:
6f:d0:fc:8a:45:15:42:1a:bd:c2:87:cd:be:28:18:6b:4e:00:
38:b2:df:66:27:f7:db:99:97:b7:16:25:ba:d6:d7:c8:9a:18:
b5:46:eb:2f:72:2d:52:84:8e:1a:25:fe:7c:f2:42:ac:6b:bc:
4c:01:fe:eb:62:8e:3f:f4:04:49:de:6d:ce:3a:fd:21:b3:3b:
7f:51:23:c1:8d:22:75:9a:f4:56:d0:5a:b5:c4:f8:04:34:44:
73:7d:e2:a9:ec:42:ac:6f:cd:8b:72:53:d3:c3:70:1d:7e:3b:
2f:17:c9:bb:ad:f2:f7:bc:4c:63:f6:28:cf:c2:2b:1e:2d:80:
f8:79:ed:d4:84:86:e7:88:cf:da:e3:ae:30:52:4e:3c:cf:5a:
55:38:bb:b0:ee:c4:87:94:52:7b:f9:df:e3:a4:2e:97:1d:01:
83:15:77:f1:62:99:b1:92:fb:31:c9:ea:ca:3e:cc:cd:a3:1a:
e1:5a:47:ef:25:6a:9f:21:99:42:e1:0e:ff:f5:ba:14:26:5c:
2e:95:7e:18:18:10:e4:0e:10:82:9c:0b:03:5d:56:7b:47:17:
34:83:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:09 2026 by rpki-client