This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: Ho7m9L0K9MyEWpzb/CXLxbzA3a6IQ5Raa6qsbBznnFE=
Subject key identifier: 5A:3D:77:27:8C:CB:5B:48:07:7C:86:CA:DA:82:DB:A5:0A:CB:63:47
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 0444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 042B
Signing time: Sat 24 Jan 2026 23:33:29 +0000
Manifest this update: Sat 24 Jan 2026 23:33:29 +0000
Manifest next update: Sat 31 Jan 2026 23:33:29 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: 4stgIHdTTedjvo//YswqVOR0tEWW9B+eaZIUvQoXVH0=)
2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: G5JJTNT4PHPw15mb1pwEFBh3OwjZ888UZyxc9uGXXjk=)
3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: vdnC+qFt4udVq1B1izXx0+o2/X3aQtQham+DUqTDpDA=)
4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: II1bO3mfo86eOnAcV9DLjx45WlHcGH9mE7tGPgaK/1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Jan 24 23:33:29 2026 GMT
Not After : Jan 31 23:33:29 2026 GMT
Subject: CN=697556c9-d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:51:aa:50:e2:d0:66:5c:3e:69:85:b7:10:
d2:95:1f:16:6a:6c:fb:c3:88:1a:fb:e2:c1:9a:ca:
11:fa:de:c2:f0:34:68:0f:dc:6b:4a:a2:b5:07:16:
ce:6d:b6:64:3e:b1:81:78:9f:bd:65:d0:77:47:e7:
b9:af:c9:4b:fb:fe:03:7f:95:b4:4c:6d:c5:b9:f6:
b7:ca:da:5c:f7:bc:7a:a8:a7:8f:a4:c5:4e:ff:9d:
47:9a:9a:76:4d:40:99:fd:db:b3:4d:86:2d:a0:30:
57:a0:6f:a4:81:eb:5a:29:ec:93:9b:4c:c7:17:27:
d6:6f:f0:b1:df:13:54:a2:69:4c:2c:e1:d6:3f:d3:
55:7d:f8:ad:63:d6:c0:5c:50:64:2b:2b:44:b2:0c:
a7:0b:9f:c1:29:d8:ae:cb:43:c3:63:69:8c:8b:80:
e7:ee:ad:14:60:6d:d0:fe:f5:9a:53:6c:7a:aa:13:
eb:31:9c:0a:9d:9e:09:e2:3f:a6:b4:b0:a8:f1:97:
2e:08:39:c6:9e:41:36:60:37:59:33:de:9a:d9:30:
31:ff:83:f2:dc:2e:89:23:33:35:75:39:d2:6c:c3:
55:24:90:94:37:3c:c1:f2:80:ef:f3:e3:db:f1:9a:
f6:9f:e1:cc:15:19:3f:6a:b9:b4:b9:ad:3e:21:83:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:77:27:8C:CB:5B:48:07:7C:86:CA:DA:82:DB:A5:0A:CB:63:47
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:23:3c:80:c3:18:2a:c4:dc:53:a7:7b:d5:bf:af:77:87:
ab:e6:50:7f:23:5b:f8:74:53:68:ca:b1:78:1c:5c:a0:45:2b:
9b:0f:9a:df:f3:19:78:e9:f5:61:58:d2:2b:cb:e4:85:c1:5d:
17:21:95:ea:93:75:7b:cb:91:d5:59:57:1c:31:5f:b6:6d:60:
29:e4:62:76:1f:ef:8e:64:85:f8:bf:18:b0:e6:ed:ff:b3:a7:
93:aa:1b:9d:ab:e0:6b:62:51:14:e5:d5:7b:0c:f2:c5:48:c3:
d6:bc:79:20:d8:7c:38:0e:2b:11:a1:07:f4:b4:ac:11:25:2c:
54:2c:f5:91:69:77:dc:73:b6:01:ac:8b:57:36:f6:92:f6:b0:
56:54:48:94:68:b8:a0:67:fc:21:c2:f6:b0:3c:3c:c4:50:99:
b5:4a:f2:76:36:29:a1:cf:60:49:7e:18:85:8e:ca:a3:8d:26:
10:3a:2e:3f:dd:74:f7:d7:62:f6:12:1b:16:4b:ef:eb:3b:19:
54:e4:9c:27:bd:1d:99:92:78:b8:2a:72:eb:54:7a:6a:b9:37:
82:43:0f:74:3c:a0:4b:52:59:9a:c0:42:5f:00:22:02:48:00:
80:d4:78:bb:a1:e6:7f:ed:fc:a9:0b:08:d0:95:26:04:9b:76:
37:74:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:47 2026 by rpki-client