This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: 9jnI1F3u1VSHbEnuEgp+toHBTYwwfNRpfxa87UC0ZXQ=
Subject key identifier: E9:BC:90:BD:94:85:BF:3B:0D:38:2E:77:DE:4E:72:27:2E:FC:7D:95
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 03A5
Signing time: Sat 24 Jan 2026 23:55:10 +0000
Manifest this update: Sat 24 Jan 2026 23:55:10 +0000
Manifest next update: Sat 31 Jan 2026 23:55:10 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: TftkQCkPDrkDSS4b3I0j6a9I6m2iSdj0SOUsxHXP7SA=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: 1PX1jYskVKNf+0dHErUm5h6atNXjuWOS1xYxAB/fHQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Jan 24 23:55:10 2026 GMT
Not After : Jan 31 23:55:10 2026 GMT
Subject: CN=69755bde-0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:c4:c2:1b:3a:2d:45:2e:ac:ab:88:5a:a7:
01:cb:ff:08:bd:dd:eb:54:32:00:81:a0:7b:3b:82:
17:2e:bb:c6:e3:85:e2:ef:60:1f:0d:68:80:03:bc:
3d:10:f2:32:94:8a:15:d0:2a:8d:71:03:c4:f0:61:
85:46:38:c5:0d:d6:4c:a9:ae:ec:f2:02:77:2d:84:
04:fb:62:3b:10:9e:2c:0f:f6:a3:35:50:2f:42:f0:
2d:22:54:99:10:62:70:dd:9e:1a:61:8e:d3:47:54:
96:ed:70:be:df:0f:e9:49:16:d6:0e:e9:a7:16:8b:
67:1f:85:17:1a:e0:8c:00:43:b2:24:4f:b4:d2:74:
b8:6d:59:b5:db:2d:ea:ac:af:9b:a0:5b:ae:40:75:
f0:bd:11:a3:1a:66:64:a5:72:e5:e1:72:5a:05:f7:
e0:d6:b1:e6:aa:11:39:80:4f:71:47:24:44:50:da:
74:54:c7:94:46:d3:ae:63:d6:25:a7:23:ed:31:81:
17:cc:fb:a7:a2:a7:75:f7:67:e6:0c:2d:da:56:be:
0f:39:96:1d:91:8b:09:fa:3b:0d:7b:ae:50:93:7a:
d6:5e:42:51:86:af:ad:01:f6:fd:ef:4e:e6:cd:5e:
1d:56:4e:38:6c:6f:4b:ee:3c:fe:23:1f:84:c9:ac:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:90:BD:94:85:BF:3B:0D:38:2E:77:DE:4E:72:27:2E:FC:7D:95
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:20:4a:27:12:0f:65:c3:c7:47:fd:7a:bb:86:53:34:9f:a9:
8b:eb:7d:e5:7c:53:13:b2:4a:da:e6:ba:fc:3d:06:78:fe:f6:
88:73:52:dd:2b:82:97:16:2e:78:2a:48:09:57:9a:dd:6f:c2:
8f:b7:6a:fa:3c:a7:19:91:86:39:53:98:95:83:50:07:bf:01:
6e:9c:79:bf:76:2d:79:41:ca:b5:dd:06:5b:4e:55:11:ee:6d:
b3:ea:46:52:be:bc:fe:82:1c:37:c3:cd:35:bd:d9:13:ff:96:
f6:78:3b:ed:d8:b3:2e:35:d6:f6:4a:b2:ca:84:b8:95:68:c6:
e0:bb:dc:2d:87:0f:6d:94:3c:27:02:d0:34:b7:d5:32:97:c9:
0c:c4:fb:b2:b9:e6:82:3b:02:c8:c4:97:80:0f:90:55:01:18:
f4:93:69:f2:d0:2c:28:aa:36:e7:7b:54:b1:36:b2:f3:5b:38:
8c:aa:79:d7:f3:4a:ad:3f:f4:89:1c:f5:19:0e:d2:44:90:8c:
eb:f9:75:88:b1:17:21:98:b2:6b:21:ae:3d:b8:10:fb:aa:1b:
2d:5a:00:8c:eb:6e:8c:3c:42:43:a1:70:36:49:9d:63:e1:a8:
15:a8:e9:79:a9:05:35:69:32:51:5d:1e:e0:04:28:92:05:a6:
78:ce:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:34 2026 by rpki-client