This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json)
Hash identifier: aoFn8kIZ+UfOsBdk90P7pROLQTANb0/KdAmWkGgw0Xs=
Subject key identifier: BD:2B:F3:2D:19:F9:0F:85:1C:40:37:BD:16:74:2A:C1:3C:81:8E:34
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
Manifest number: 0311
Signing time: Sun 25 Jan 2026 00:21:02 +0000
Manifest this update: Sun 25 Jan 2026 00:21:02 +0000
Manifest next update: Sun 01 Feb 2026 00:21:02 +0000
Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: As6mnygq/1TvxM/Bw8nsz+UCDNoNcuTlEGUqN1+kka8=)
2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: laAl8Txo1gIHcxVocQuJwP60FGqDJ3pXtoHTwy2bFVE=)
3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: 2yxooHg2J0c3MSXXKFuW6gpFsAXkYNwDiL8UbiBNepU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Validity
Not Before: Jan 25 00:21:02 2026 GMT
Not After : Feb 1 00:21:02 2026 GMT
Subject: CN=697561ee-199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:af:5c:43:a4:39:9e:b7:36:c1:e1:6f:8c:
90:32:dc:ba:50:c5:85:dc:1d:c5:27:2a:44:24:2e:
b4:03:31:36:ca:20:43:0c:d5:9d:3b:9f:cf:f6:4c:
39:58:33:1a:30:51:e4:80:ff:8c:34:6a:f5:2d:8b:
06:61:2b:b9:af:af:a3:8a:c7:5d:3e:99:5b:5e:e1:
25:47:e8:2e:ac:f7:02:6b:3c:d6:d9:17:67:19:52:
e3:94:47:7f:e7:d5:e1:45:a2:fc:a2:6a:59:9c:f8:
cf:69:31:de:1c:f6:87:99:27:7a:67:77:34:03:35:
9e:70:69:d8:43:da:84:c6:70:cd:58:84:38:7a:fc:
3a:65:68:58:e5:cc:ee:ea:7b:6d:80:33:fc:2e:ca:
d3:98:0f:2f:33:b5:f8:c1:17:20:54:f4:64:aa:e4:
ca:08:3c:49:21:8f:b2:80:3f:b1:01:f8:13:da:1c:
ea:a7:0b:b9:81:8c:2f:40:5c:a0:ab:b7:44:3e:19:
06:e2:29:b9:e2:07:91:a2:e0:4a:80:db:87:5a:e5:
bd:e6:b2:1d:e2:86:ca:f8:9e:4d:f0:7f:0a:7f:6e:
c1:0c:7b:92:2f:5c:ee:bf:ca:7d:eb:11:72:21:53:
b5:51:b6:5b:57:c3:af:45:b2:9d:85:5a:2d:dc:e3:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:F3:2D:19:F9:0F:85:1C:40:37:BD:16:74:2A:C1:3C:81:8E:34
X509v3 Authority Key Identifier:
keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:a3:86:e4:99:96:72:75:0e:34:9f:01:0d:73:d2:1b:a1:
d0:36:50:7f:d1:7c:23:ff:da:4e:de:53:d5:dd:53:0e:66:41:
4b:f2:d0:d6:29:07:87:64:c6:58:3c:a4:f0:e6:82:3f:f1:23:
7e:b4:0b:a5:f8:88:c0:95:b7:ca:99:12:4e:b5:4a:e4:00:f5:
6f:d1:a2:e8:65:17:5e:85:62:e3:0a:0b:aa:92:ce:3a:e7:8e:
60:cf:e5:e4:00:42:1f:53:81:b4:0a:01:e3:12:0e:52:21:8a:
6d:74:b6:39:da:18:60:b3:ab:bd:1f:93:f7:2b:9c:9a:b4:e3:
94:68:f3:73:17:00:11:0f:ed:92:08:a1:82:ee:1c:0c:ee:f7:
28:ac:96:de:a3:c2:03:89:49:67:9b:63:7e:ba:a4:19:07:0a:
7f:0f:5f:80:d2:35:80:cf:8d:87:c1:0a:5d:fe:d5:c3:42:9e:
e3:8b:86:e0:1d:2a:e8:e0:dc:3a:e7:9c:6c:b4:b6:48:f9:0c:
9c:b1:73:cb:ff:b3:b6:6f:64:4e:8f:28:e4:05:a4:a8:9c:7e:
72:a5:47:8b:f4:ef:ce:71:78:29:6b:3c:8c:a0:27:b9:78:eb:
b8:0f:e0:ad:29:c6:de:63:40:6b:cb:60:32:a2:83:95:68:c8:
d9:73:bc:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy
QjlDRjgyRDAwHhcNMjYwMTI1MDAyMTAyWhcNMjYwMjAxMDAyMTAyWjAYMRYwFAYD
VQQDDA02OTc1NjFlZS0xOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4pyvXEOkOZ63NsHhb4yQMty6UMWF3B3FJypEJC60AzE2yiBDDNWdO5/P9kw5
WDMaMFHkgP+MNGr1LYsGYSu5r6+jisddPplbXuElR+gurPcCazzW2RdnGVLjlEd/
59XhRaL8ompZnPjPaTHeHPaHmSd6Z3c0AzWecGnYQ9qExnDNWIQ4evw6ZWhY5czu
6nttgDP8LsrTmA8vM7X4wRcgVPRkquTKCDxJIY+ygD+xAfgT2hzqpwu5gYwvQFyg
q7dEPhkG4im54geRouBKgNuHWuW95rId4obK+J5N8H8Kf27BDHuSL1zuv8p96xFy
IVO1UbZbV8OvRbKdhVot3OMAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0r8y0Z
+Q+FHEA3vRZ0KsE8gY40MB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1
QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j
eDJRcGRMcko0VkFyblBndEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCugqOG5JmWcnUONJ8BDXPSG6HQNlB/0Xwj/9pO3lPV3VMOZkFL8tDW
KQeHZMZYPKTw5oI/8SN+tAul+IjAlbfKmRJOtUrkAPVv0aLoZRdehWLjCguqks46
545gz+XkAEIfU4G0CgHjEg5SIYptdLY52hhgs6u9H5P3K5yatOOUaPNzFwARD+2S
CKGC7hwM7vcorJbeo8IDiUlnm2N+uqQZBwp/D1+A0jWAz42HwQpd/tXDQp7ji4bg
HSro4Nw655xstLZI+QycsXPL/7O2b2ROjyjkBaSonH5ypUeL9O/OcXgpazyMoCe5
eOu4D+CtKcbeY0Bry2AyooOVaMjZc7zE
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:36 2026 by rpki-client