This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier: 56H+G61tiKzuWOIgG0EQZqdVCWErrkXPK1jyGwkZLu8=
Subject key identifier: 3D:A5:E8:A4:5A:F7:EB:FF:B2:78:98:1F:EA:5E:70:EE:EE:79:7F:58
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number: 0102
Signing time: Sun 25 Jan 2026 04:20:13 +0000
Manifest this update: Sun 25 Jan 2026 04:20:13 +0000
Manifest next update: Sun 01 Feb 2026 04:20:13 +0000
Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: Eimg/6/VG6jD8bvbr1im1iQJKINKsTbnGQ8sS1G/VlU=)
2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: Aikvd4VQaZ5YWJuoaQst8o1un+A8abkdzu+IgmJpwMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Validity
Not Before: Jan 25 04:20:13 2026 GMT
Not After : Feb 1 04:20:13 2026 GMT
Subject: CN=697599fd-5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:3a:fa:9f:2f:9a:6c:6f:6e:44:29:19:08:
0f:44:ee:8b:1e:6a:e4:69:14:db:94:9e:31:38:33:
80:d0:dd:12:1e:ff:7e:71:ff:6c:82:2c:05:de:ce:
ec:3e:8c:61:26:42:4d:8e:94:31:e0:46:f1:2f:b3:
22:e9:ec:3a:13:9f:d0:e3:47:6e:ea:35:c7:f2:e7:
ed:29:2f:ac:fd:01:ed:b1:2f:63:57:20:d7:2f:96:
b9:2e:ad:b7:65:c9:53:86:d7:5e:04:8c:b1:a4:e4:
33:cf:1c:21:bf:90:9d:89:23:fa:03:ac:80:78:78:
b6:b4:19:52:a9:28:ec:5b:a2:6f:11:24:fe:7d:3f:
a2:b3:15:06:18:ab:24:01:71:43:df:86:5d:d3:91:
46:07:57:eb:28:ee:8a:94:7c:ee:c0:8c:a2:ac:8e:
0e:35:32:cf:39:4d:22:0e:be:97:15:85:67:04:6f:
18:d5:73:46:21:5c:0b:ed:19:27:82:3d:b1:25:49:
16:90:c8:f9:ae:f3:9b:2e:96:f1:40:a8:a9:f3:45:
f4:00:6e:3b:54:0b:8f:4c:88:90:64:aa:79:40:f0:
b8:b4:7c:d9:a6:cd:f7:a9:a0:e9:23:7f:92:35:bd:
89:63:1d:5e:d6:b3:5e:1a:ce:ff:a4:1b:5d:83:a1:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:E8:A4:5A:F7:EB:FF:B2:78:98:1F:EA:5E:70:EE:EE:79:7F:58
X509v3 Authority Key Identifier:
keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:00:6b:c8:af:43:a9:73:a2:e7:fb:da:3a:09:a0:29:0f:cc:
80:dc:24:b0:f9:d0:54:30:4b:92:04:eb:a0:d1:16:36:d3:23:
3d:dd:3f:b0:3e:b6:f5:ac:67:67:96:f8:06:a2:81:58:59:2f:
58:b1:ac:6e:5a:ad:0d:f9:5b:a2:a7:90:48:18:ba:aa:b6:66:
a3:34:1f:0c:bc:51:af:28:82:ff:eb:3a:a3:63:ed:ea:1a:c8:
f7:8c:ee:9f:2c:42:b0:83:5c:ed:9e:1b:b0:a3:47:17:dd:42:
fd:04:21:f0:24:6f:c8:2d:04:dc:b5:40:73:cc:17:01:9e:e0:
d0:48:a6:17:a4:97:f8:be:9a:37:55:b4:e3:20:d1:91:0b:70:
1f:20:ff:cc:e6:e1:75:56:59:30:16:8b:05:94:76:33:9a:32:
7f:7b:80:6f:90:cb:1a:5c:c2:b1:62:5e:77:6f:da:3d:e4:3e:
9c:5e:8f:72:cf:98:9a:e5:ce:91:f5:09:43:a1:5d:c4:fe:09:
87:be:91:eb:43:b4:dd:e6:6b:93:0b:d4:25:57:33:01:f7:31:
fc:99:e4:1d:1f:47:f2:67:4b:8b:30:05:67:c5:e6:e8:bc:27:
ee:a2:29:ec:55:bd:f9:90:50:76:04:b2:0b:b2:96:3e:7a:66:
51:14:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:25 2026 by rpki-client