This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier: zHwfVYxVjqOqxcb0TteiVtU8tJ+xuNuuzuw8Y1QXZrk=
Subject key identifier: 56:10:C7:13:AC:CF:2F:67:31:83:62:BA:85:87:5B:88:B7:0F:77:49
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number: E5
Signing time: Fri 23 Jan 2026 04:38:18 +0000
Manifest this update: Fri 23 Jan 2026 04:38:17 +0000
Manifest next update: Fri 30 Jan 2026 04:38:17 +0000
Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: jXtnd+r46Ef1e7i9eJu5bZrWCxi8GAhk9LvPhwcxgCQ=)
2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Validity
Not Before: Jan 23 04:38:17 2026 GMT
Not After : Jan 30 04:38:17 2026 GMT
Subject: CN=6972fb3a-0566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:7b:c3:6a:cf:d3:40:e6:7f:8a:cf:42:a8:
4d:1e:0a:7b:ff:6a:57:18:41:06:59:d6:f9:0f:4a:
88:c1:32:d0:bc:32:62:5e:30:b6:4a:aa:5f:99:48:
7b:09:48:42:a0:9b:3b:06:c1:31:f7:d9:23:8d:82:
ff:d2:8b:5b:ad:94:cf:84:80:e8:61:a5:01:76:6d:
39:cc:9c:09:ee:09:ba:e1:2c:9a:21:9a:fe:92:49:
a8:8e:21:ce:98:6c:42:31:e9:68:61:83:62:6a:37:
97:e6:de:9b:ef:e7:89:41:62:0e:98:e9:67:bf:71:
4f:bb:4f:86:3e:e1:05:63:38:64:53:3c:31:ca:56:
75:92:99:c6:2f:68:16:65:ed:da:00:13:41:c1:20:
82:ba:5a:63:a4:cb:a7:b9:1f:86:8b:f4:f8:35:b4:
11:be:7b:00:72:e6:f4:0f:17:f1:ff:e5:ed:9b:19:
33:a7:e1:08:83:2e:5f:5d:61:c4:7d:32:5d:84:ec:
97:ca:67:9f:66:bd:e6:da:6a:0d:6f:9a:49:18:b9:
c6:c7:ec:9a:53:b4:ed:4c:41:c0:ab:d5:df:7e:b7:
7a:f3:93:95:e0:67:33:1e:9c:e7:af:76:60:a5:7c:
08:81:8d:4e:86:ce:d0:a6:e7:b8:b2:a0:56:fd:21:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:10:C7:13:AC:CF:2F:67:31:83:62:BA:85:87:5B:88:B7:0F:77:49
X509v3 Authority Key Identifier:
keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:30:54:62:4e:6b:bf:e9:4b:61:fe:a8:14:37:87:b8:a3:
c2:01:da:c7:92:ee:2a:9b:82:aa:5b:a5:b4:80:d4:76:11:6a:
b7:7c:1e:cc:53:b5:ae:a9:86:2f:3f:5a:0e:20:68:c4:2a:f8:
6c:5c:17:56:44:78:5d:31:9e:90:4b:86:72:90:00:63:7d:44:
1b:7d:ce:2c:8c:91:74:5d:c0:2d:78:28:04:07:34:66:3d:86:
10:ad:e6:b2:e5:10:71:d5:f6:f0:d4:3a:be:9e:79:0d:fa:ef:
6e:1e:06:57:8a:c1:33:d7:94:1d:81:1e:47:d6:83:e9:54:e3:
af:3c:71:15:9d:76:2c:7d:65:5e:8e:e7:16:c0:00:3f:e0:ef:
6a:6f:d8:80:c8:bc:c1:15:5c:0e:2e:ca:1e:a8:a8:68:8b:a9:
ba:10:d7:13:df:fb:e7:82:a3:ea:5a:6b:7b:02:cd:db:20:55:
43:97:0a:11:5d:ff:4a:03:93:0b:6d:91:bb:a8:34:df:44:7e:
30:a4:fe:90:81:7e:b2:32:b1:7f:92:9b:d5:f5:dd:e6:00:9b:
b8:0d:44:d9:61:8d:99:d7:1b:ac:50:f4:52:a5:b3:e7:72:cd:
e5:42:8f:da:1f:a8:dc:0c:74:70:2f:72:40:8e:5a:81:25:04:
a9:3e:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:05 2026 by rpki-client