This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: zczPLSuyFFpUJZmUsX7tMkuDxixvJI+MGwsBCtQNlqo=
Subject key identifier: 4E:B6:91:78:5B:A2:B8:AA:10:4A:6B:F1:85:AB:03:83:CF:7D:50:C3
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 0261
Signing time: Sun 25 Jan 2026 00:53:18 +0000
Manifest this update: Sun 25 Jan 2026 00:53:18 +0000
Manifest next update: Sun 01 Feb 2026 00:53:18 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: pOWaKfQIApiHTlSzSmoAFRRAfxsHx+Vu1oCOCdvg6dM=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 7KGpbBEEym6owc+uaT6+xmtVoaHn3I3Wf4REEkb7Hck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: Jan 25 00:53:18 2026 GMT
Not After : Feb 1 00:53:18 2026 GMT
Subject: CN=6975697e-1eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:9b:81:e8:21:6b:c7:1b:51:2b:3f:e2:6f:
8a:5a:14:ed:52:ce:81:5b:b6:4b:cc:43:6e:d6:7e:
04:46:a2:c8:72:24:8d:5f:16:e3:52:ce:4d:e7:72:
bd:9a:10:9a:9e:5a:83:fb:31:c2:52:48:36:63:dd:
94:0b:3e:42:e8:e4:b1:ba:d7:e3:fc:93:3b:b7:38:
5d:a2:dc:68:9f:01:71:57:f5:35:1b:33:7b:6c:26:
c8:18:76:2e:b0:93:a9:08:4e:10:5b:36:f5:34:98:
77:38:f7:ce:19:d8:44:8a:4e:dc:12:a8:f1:e3:f0:
5f:e9:6a:41:02:e3:c4:ca:ae:61:03:1b:8b:34:d8:
36:ca:a2:88:bd:8f:27:74:ea:57:8c:09:8e:7d:cb:
93:f8:bb:61:34:10:11:28:30:f2:f4:ff:43:24:83:
71:31:89:59:63:77:f6:cd:52:47:d0:52:72:a7:62:
66:ac:bf:9c:2c:52:7b:a7:5e:98:3e:36:30:a4:f5:
a7:db:e4:3a:86:1d:9c:5c:2c:df:42:de:61:9a:23:
1b:40:b4:db:ca:1f:25:79:08:ad:06:af:45:18:70:
6b:70:c3:25:23:0b:5b:98:f3:f8:ce:7b:2e:cd:e9:
c3:ff:fe:e6:06:06:44:79:ff:d3:a7:7f:c5:e2:10:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:91:78:5B:A2:B8:AA:10:4A:6B:F1:85:AB:03:83:CF:7D:50:C3
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:b5:b5:ea:ce:ee:1d:84:e8:98:27:f4:93:f2:68:9b:05:
d0:0e:4b:ff:9a:c6:5b:5f:aa:e2:5d:cd:17:32:96:33:e8:28:
c4:1e:ac:f4:fb:f5:87:bc:da:46:cb:4f:f8:2d:94:3a:86:c9:
73:a8:12:66:75:ba:0c:b5:f0:39:f9:a8:34:eb:ec:41:f2:5b:
77:8d:2e:4f:21:28:3b:c9:98:1c:53:a6:7e:1c:bb:44:a0:17:
ea:74:45:4e:93:f5:01:6c:af:9a:d7:22:b2:49:03:de:74:28:
9c:55:a7:60:46:90:4c:cf:11:38:d6:34:b5:0f:78:e0:8e:fe:
93:e5:75:06:98:35:01:90:21:93:fe:2b:1b:25:76:1c:ee:25:
46:1c:1e:dd:3c:58:77:1f:f5:91:7f:37:b0:f9:85:a1:35:b5:
b1:dd:0c:20:2c:eb:4a:88:20:63:58:06:67:e1:a1:09:3e:5f:
e4:ed:0f:7a:dc:fc:93:fc:2b:e3:17:63:86:7b:3f:d9:8f:16:
81:d5:7d:5b:9e:c2:ac:55:28:d6:77:4b:5e:e1:4a:3f:2e:0f:
c5:c1:18:19:85:05:ea:cd:de:4b:87:9f:dd:3b:54:85:f0:50:
93:33:47:8b:c1:28:0e:13:f9:ff:98:f8:60:10:18:15:25:cb:
a5:11:0c:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1
OEMyNjdDMzYwHhcNMjYwMTI1MDA1MzE4WhcNMjYwMjAxMDA1MzE4WjAYMRYwFAYD
VQQDDA02OTc1Njk3ZS0xZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8ubgegha8cbUSs/4m+KWhTtUs6BW7ZLzENu1n4ERqLIciSNXxbjUs5N53K9
mhCanlqD+zHCUkg2Y92UCz5C6OSxutfj/JM7tzhdotxonwFxV/U1GzN7bCbIGHYu
sJOpCE4QWzb1NJh3OPfOGdhEik7cEqjx4/Bf6WpBAuPEyq5hAxuLNNg2yqKIvY8n
dOpXjAmOfcuT+LthNBARKDDy9P9DJINxMYlZY3f2zVJH0FJyp2JmrL+cLFJ7p16Y
PjYwpPWn2+Q6hh2cXCzfQt5hmiMbQLTbyh8leQitBq9FGHBrcMMlIwtbmPP4znsu
zenD//7mBgZEef/Tp3/F4hDoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE62kXhb
oriqEEpr8YWrA4PPfVDDMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3
NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V
QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA397W16s7uHYTomCf0k/JomwXQDkv/msZbX6riXc0XMpYz6CjEHqz0
+/WHvNpGy0/4LZQ6hslzqBJmdboMtfA5+ag06+xB8lt3jS5PISg7yZgcU6Z+HLtE
oBfqdEVOk/UBbK+a1yKySQPedCicVadgRpBMzxE41jS1D3jgjv6T5XUGmDUBkCGT
/isbJXYc7iVGHB7dPFh3H/WRfzew+YWhNbWx3QwgLOtKiCBjWAZn4aEJPl/k7Q96
3PyT/CvjF2OGez/ZjxaB1X1bnsKsVSjWd0te4Uo/Lg/FwRgZhQXqzd5Lh5/dO1SF
8FCTM0eLwSgOE/n/mPhgEBgVJculEQwf
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:43 2026 by rpki-client