This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier: v4OA5LDjKQgAgNrtkkiNwxjfIidnQnkbjb0PrjEEVRo=
Subject key identifier: D9:2C:E7:32:9D:A1:35:8C:F2:21:9C:99:F0:0F:91:B5:E1:A4:D1:E7
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number: 03A7
Signing time: Sat 24 Jan 2026 23:54:37 +0000
Manifest this update: Sat 24 Jan 2026 23:54:36 +0000
Manifest next update: Sat 31 Jan 2026 23:54:36 +0000
Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: qAEI3sGoCwdiIc36UPYYGylrjRy1spgWicerOCunsOI=)
2: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
3: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Validity
Not Before: Jan 24 23:54:36 2026 GMT
Not After : Jan 31 23:54:36 2026 GMT
Subject: CN=69755bbd-6e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:76:c3:d7:00:25:21:8b:44:38:d3:6a:7a:
8a:5f:c8:71:7c:4a:00:02:bd:7e:47:3c:f1:c7:ec:
dd:93:08:1b:07:75:e2:3a:8f:eb:e2:20:de:86:9b:
79:8e:69:5a:67:48:2b:47:4f:ca:77:49:f9:63:5b:
64:ad:ca:96:be:56:98:4f:3c:98:4a:48:08:ab:e4:
73:86:d5:36:d6:60:28:c7:65:48:10:79:0b:20:dc:
05:2b:86:22:e3:ec:d2:15:80:bf:fe:f0:4b:8a:26:
43:d7:94:eb:ac:1d:e0:07:63:7f:ee:94:0e:8c:6b:
91:8b:05:89:d3:f0:a4:98:0e:ad:1c:47:ce:3d:c5:
84:df:37:e1:31:cd:18:7b:c9:f0:52:85:79:28:cf:
c7:32:03:54:2b:a8:06:99:e0:c6:ff:a8:0d:2c:ee:
55:8b:17:02:5d:96:04:55:43:f0:8f:1d:4e:80:88:
21:56:25:d7:fe:03:c1:65:0f:71:6f:ab:d4:21:d6:
3e:d0:3c:39:1b:01:a0:67:fb:3b:4b:85:2c:2c:74:
70:fc:9d:df:be:b5:6b:d6:9f:b1:38:7b:06:64:7b:
0a:d1:61:13:12:93:b0:2d:50:a0:23:b1:10:4b:5e:
80:82:ab:c8:f7:e8:4f:92:b2:42:c2:3b:39:1b:6b:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:E7:32:9D:A1:35:8C:F2:21:9C:99:F0:0F:91:B5:E1:A4:D1:E7
X509v3 Authority Key Identifier:
keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:a3:15:9b:75:9d:79:10:c0:de:da:d7:f7:0a:01:cf:55:
6c:c7:f0:b1:2c:fa:14:df:eb:a5:9b:4d:43:7d:ea:a1:8d:7f:
d3:aa:fd:6f:ec:b9:0d:92:4b:fb:d6:bf:b2:ac:1c:65:57:4a:
f7:ef:4d:6d:59:0a:e7:ef:a8:ae:74:2a:30:ee:f7:fd:9c:c0:
cc:44:2a:d1:9b:17:b3:c1:e1:d3:37:30:c0:f8:41:5c:f2:d5:
5f:55:7d:31:28:fb:ef:0b:c4:f8:3f:2c:8b:ea:93:01:02:ad:
1c:22:f2:30:07:1f:29:1a:75:c5:cc:4c:a0:37:29:61:f3:ff:
fc:3f:d0:f0:d6:f8:94:c2:cc:7a:42:54:24:6d:b1:59:15:73:
44:59:8d:0b:93:a3:ef:df:9d:7a:91:11:24:8c:a1:d6:01:7c:
d2:e7:4f:d9:9f:f0:8c:1e:11:83:a7:6c:a7:34:dd:05:bf:7c:
aa:11:7d:44:74:38:4b:d2:70:6c:d5:1e:2f:44:15:6b:97:ed:
ec:bd:5a:a9:23:52:93:96:78:22:4f:9f:65:6a:f8:6c:24:74:
10:d9:91:92:06:bf:b5:56:01:7f:cc:b9:85:f7:a4:d6:62:41:
67:eb:23:9c:79:73:df:27:89:1d:fa:b4:12:a8:09:33:87:66:
3e:01:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:32 2026 by rpki-client