This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier: /iXqrgls3Ppyhe1TmCSJ0pj/9tpuQ8aG80wcqFf26VE=
Subject key identifier: 2D:18:0B:EA:E0:F2:F2:08:DE:40:73:AD:7F:2A:DA:C9:59:EB:42:38
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 077A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number: 074E
Signing time: Sat 24 Jan 2026 21:07:23 +0000
Manifest this update: Sat 24 Jan 2026 21:07:23 +0000
Manifest next update: Sat 31 Jan 2026 21:07:23 +0000
Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: fA8pHiaYTcDhmhjv7529xP8pyZs8Y+rZcTumXe3GCGs=)
2: 935748B4F66B11F085B6348E6F6F56BC.roa (hash: ooY2TZh5rhLCZOuRkIEjtwotMZ8hnS+oME2X4SR7uss=)
3: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: srAPN59ap0qz3Vi5pB+N2NTB2RIdIctcKW/OoPkyFl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Jan 24 21:07:23 2026 GMT
Not After : Jan 31 21:07:23 2026 GMT
Subject: CN=6975348b-e288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:84:de:79:2c:65:ef:73:2e:99:fb:b2:33:
79:8d:58:90:ae:b2:72:ee:6b:74:ed:7c:36:c5:f0:
0f:a6:26:23:9b:ff:7b:40:81:06:80:47:8f:52:33:
40:b3:cf:9a:70:93:2b:0f:3e:0f:fc:19:3a:9f:a2:
3d:4c:3b:0d:37:75:ee:5d:87:34:32:3f:5e:69:4c:
67:30:ee:62:4e:30:1c:a3:f4:e4:d7:50:ec:65:5f:
44:2a:9d:15:b6:ba:e8:df:ea:37:15:3e:05:a4:1f:
d3:8c:e2:4f:0d:64:e5:d1:2b:0e:13:cd:6e:a3:b9:
32:80:c0:91:9f:04:27:4d:a4:d8:fc:aa:88:60:8c:
1a:cb:9f:94:a3:01:3f:4b:89:bc:47:82:4f:4c:ef:
de:6f:e4:70:58:b5:1e:86:af:60:d7:36:8c:35:99:
39:35:e7:7a:cb:b3:54:09:19:b1:62:8d:57:48:78:
77:c9:5c:12:da:47:15:64:cb:5d:3e:14:ef:a1:73:
34:03:e4:7b:5c:d0:99:5b:cc:80:4b:92:d5:36:d3:
24:1f:d2:2a:12:75:ad:bb:05:82:e0:e5:d6:ab:d3:
21:1f:6c:82:51:ed:4e:e9:76:7b:a7:a9:bd:5a:1a:
83:12:02:56:ac:e7:b4:a1:dd:69:5c:8d:a3:b7:c5:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:0B:EA:E0:F2:F2:08:DE:40:73:AD:7F:2A:DA:C9:59:EB:42:38
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:02:87:a9:14:b6:c9:be:0b:81:31:09:5c:7e:4d:8d:2d:d5:
96:2d:57:87:20:6a:0d:c5:66:8b:0a:8d:9b:27:c7:8d:64:3d:
9e:72:b8:36:29:e4:7a:3c:da:6b:d0:69:f4:bf:62:31:3c:6c:
86:7d:73:dd:61:48:0b:7b:43:52:21:e4:f6:8f:bf:60:c3:91:
3b:e6:1c:4a:a9:ae:9f:89:9e:a9:3c:65:1e:52:b7:15:14:de:
f9:eb:84:2a:9b:23:74:6a:1d:3b:dc:e6:a6:a1:a8:c2:68:a0:
f2:b5:5e:51:bc:7d:4a:eb:98:b3:7f:59:58:79:f0:74:f0:16:
f4:9b:52:3e:6c:4e:41:72:b2:4b:d5:f3:36:e1:65:21:9c:94:
57:f7:4f:80:3e:e6:4d:45:4a:0a:0a:80:6d:93:c1:3c:32:56:
ee:d0:64:74:25:09:01:17:d8:62:a8:95:b2:6d:50:46:68:19:
79:41:1d:97:74:f2:6d:e5:2f:32:76:3c:aa:be:6c:c5:fd:cb:
c4:de:5b:9e:0c:35:ee:46:df:9d:0d:40:fc:62:bd:52:07:9c:
3a:f0:71:78:38:1e:45:eb:68:c1:09:dd:e9:cc:a7:26:4f:a0:
0c:b8:47:a4:c6:53:cc:15:d2:e2:c0:e9:96:9c:48:86:50:dd:
92:d8:22:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:37 2026 by rpki-client