This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: nc6vsRuFEq6j6INP3xoQEcuM4KQpvz0xUFNaZAILfy8=
Subject key identifier: E6:8F:D1:57:77:F4:96:81:1E:86:9F:19:05:72:37:7D:01:D4:9C:29
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 3505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 3501
Signing time: Sat 24 Jan 2026 14:48:15 +0000
Manifest this update: Sat 24 Jan 2026 14:48:15 +0000
Manifest next update: Sat 31 Jan 2026 14:48:15 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: E0kheB92q6aeLuOQoK6K3hLM5ts0ms56tlxAfhH73TQ=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: e40Fx6yfX6nJRx1dMJZUnN8AeYmm3aJoH7MptW5kCWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13573 (0x3505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Validity
Not Before: Jan 24 14:48:15 2026 GMT
Not After : Jan 31 14:48:15 2026 GMT
Subject: CN=6974dbaf-bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:36:43:3e:1d:02:1c:38:c9:ec:37:00:2d:
bf:e1:71:86:e6:e3:48:27:2d:96:6b:25:3f:43:d9:
97:1f:30:ce:3b:e3:4b:a9:a3:35:86:b1:9a:8a:fb:
2c:b1:63:98:7b:bd:b6:e8:ba:16:15:4d:6e:2d:cd:
72:21:f8:ab:f2:cf:e0:f4:df:fe:89:ce:44:d6:da:
05:f9:d3:90:25:59:73:c7:31:ce:40:fc:90:0a:ab:
52:ac:01:f9:24:8c:cd:05:6b:b3:18:4e:5e:2c:2e:
8a:9f:c6:5a:0d:f7:28:78:75:46:f8:46:cf:8e:be:
bd:14:89:6e:3c:a8:54:43:b2:df:3b:07:7d:e6:2b:
ba:24:51:3f:2a:ff:45:99:a6:cb:09:88:08:d4:1a:
4d:a3:61:4b:31:0b:41:bc:06:6e:ca:e7:43:96:ba:
2a:c0:5a:70:28:b9:e3:99:d1:54:70:c1:ae:07:b6:
50:ef:d9:1a:c0:fe:f5:2c:c9:15:ee:a2:9d:c4:43:
b0:fd:86:be:9b:bf:90:06:85:cb:fe:87:c1:48:0d:
fc:3f:5e:f1:f1:d3:0f:64:fe:d1:37:f0:82:d1:b8:
27:06:66:a6:78:9d:2c:f7:47:a1:74:4f:63:47:fc:
2d:ee:a1:a8:04:5f:3d:c7:a8:b0:e9:ba:a8:f7:e4:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:D1:57:77:F4:96:81:1E:86:9F:19:05:72:37:7D:01:D4:9C:29
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:be:cd:d1:a2:e1:11:6f:2d:36:f8:4d:a9:fd:3c:99:3a:
01:52:4c:b5:0b:0d:0a:b8:e3:dd:f8:e0:10:c3:37:aa:fb:36:
08:af:03:5f:7b:09:b1:c8:b0:31:51:b0:f0:6f:3d:53:95:20:
05:45:6c:a5:67:97:60:9b:80:1b:8c:8d:cd:9e:1c:c7:21:70:
95:fd:4f:bf:8d:e2:cd:95:6a:dc:c5:34:7e:b2:ff:07:71:df:
7e:65:59:68:ac:df:91:2a:e8:72:97:6f:93:a3:c6:37:d7:ca:
c0:86:90:19:23:2f:d2:d6:c1:14:7d:69:73:d9:0d:4c:85:e8:
c4:a4:2e:d3:3a:56:9d:18:12:07:f1:95:6c:89:34:59:05:bb:
84:98:57:70:cd:99:83:5d:d1:9d:70:d4:8e:55:67:75:9e:32:
89:d5:17:b8:3e:7e:da:b5:18:3f:3f:61:02:da:99:8b:07:b8:
50:61:99:19:0c:4b:da:b3:67:f4:5c:26:a3:8e:87:17:1c:8b:
2d:f7:b8:f8:49:54:8e:00:a0:f6:c3:f8:f5:9e:70:03:39:ea:
ba:e4:16:ad:87:ad:f8:a9:40:97:cf:32:ce:f2:3b:b3:7c:60:
d2:b1:2e:22:e5:f7:d2:90:cf:8a:c8:61:9a:ce:fd:53:c6:70:
99:0d:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:33 2026 by rpki-client