This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier: 55pZmCMXdcJ4o6uEwPCjAQ5ZAhOqeDL7SptSvDE6z+c=
Subject key identifier: 15:84:AB:C5:6C:18:78:A7:F0:C4:B7:B1:55:0E:72:F5:07:69:23:CE
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial: 03E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number: 03D5
Signing time: Sat 24 Jan 2026 23:47:54 +0000
Manifest this update: Sat 24 Jan 2026 23:47:53 +0000
Manifest next update: Sat 31 Jan 2026 23:47:53 +0000
Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: qA1ccXDLcmQ5iSHES5T31NI4vNJY1ReJQ+FB8UjckHw=)
2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: 9jPLiSrAv9CpBTipdqfUpD+haiGgsN7V6kZeTNfsQaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Validity
Not Before: Jan 24 23:47:53 2026 GMT
Not After : Jan 31 23:47:53 2026 GMT
Subject: CN=69755a2a-c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:56:69:d6:d6:a9:0c:6e:7f:43:12:73:57:
ca:64:8e:71:85:bd:aa:24:e2:66:34:89:ed:17:24:
62:b6:1e:ae:54:cb:22:6f:dd:28:b4:11:ac:14:b9:
01:cd:3e:70:5d:37:08:2f:d8:24:a0:ef:40:8c:58:
90:69:ef:75:89:ac:70:09:b8:10:dd:a2:ca:51:62:
9e:dd:76:dc:62:a9:ae:13:e0:e0:65:50:72:bf:24:
96:e8:1b:26:c4:1d:9d:22:48:01:e0:1e:7e:72:c3:
c9:b0:78:e8:d0:93:22:ad:98:3e:21:27:d0:7b:8a:
95:ee:2a:21:0f:4b:b3:38:3b:4a:f8:41:33:de:a3:
7e:f1:50:b0:69:a7:fb:4d:82:3f:2a:88:81:fc:71:
41:33:9a:b9:9b:90:3d:a9:7b:30:85:e8:79:27:a9:
4f:ea:c5:9d:c7:4a:d6:de:c0:0b:8b:d7:51:e1:f5:
0c:8b:b8:29:ff:b2:28:f7:28:4d:e1:be:ba:67:94:
32:ff:96:e7:53:af:c6:3a:d5:af:9d:38:02:7d:21:
1f:9f:bf:4c:cf:b0:01:50:d9:f6:34:1b:44:c9:07:
31:25:28:b4:17:56:3a:b9:25:95:14:21:d0:7d:63:
a7:cf:76:e8:35:4d:07:98:f1:e2:de:7d:38:18:88:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:AB:C5:6C:18:78:A7:F0:C4:B7:B1:55:0E:72:F5:07:69:23:CE
X509v3 Authority Key Identifier:
keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:7a:b8:a7:1b:f4:25:32:fa:32:55:3c:f7:66:1b:7f:c5:
f9:75:63:5f:38:11:0b:19:f3:05:43:c8:ab:3c:4e:70:f3:a1:
84:bf:8a:c4:cb:49:e3:14:81:84:ad:4a:9d:fb:07:1f:d8:1d:
9f:fa:51:61:8f:66:7e:33:88:64:88:9e:9c:d6:04:af:6e:5b:
d4:3a:c4:4c:95:e8:56:3a:6b:b8:16:d9:27:68:6e:2a:d9:47:
ee:44:d9:a8:96:6d:0a:d7:12:39:72:ca:af:f2:c2:dc:e3:53:
08:ee:c0:3e:8c:fa:8a:00:4a:af:55:99:08:d3:b0:2e:17:20:
4f:b7:98:4a:23:d9:f2:97:12:f4:95:eb:2b:91:b2:98:7f:b8:
dd:20:cd:59:91:43:42:55:c5:83:5b:c1:e7:7d:be:c3:fc:5b:
46:71:1c:ac:36:95:2c:46:0a:a3:9d:63:bb:37:e8:1c:1d:16:
92:63:58:f1:56:6e:50:fc:2b:b0:3c:0a:8e:5d:90:d5:77:3b:
70:b7:c9:46:2f:d3:8c:c5:3f:3f:6d:54:c7:25:fe:d2:3e:41:
a8:79:d4:58:1b:e4:b1:82:f3:b1:82:6e:02:f9:60:98:5f:da:
ec:e5:ca:cf:55:a7:41:85:16:f3:c4:a2:a1:b7:fa:53:49:b0:
9c:23:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:28:49 2026 by rpki-client