This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier: Gh5haoQ7z/xpacQYXpj9G70N/SBhmx7DRzPMV+KY07s=
Subject key identifier: FC:39:83:12:7C:48:97:07:40:C4:63:CC:6B:41:DE:2B:EE:C3:5F:19
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number: 087C
Signing time: Sat 24 Jan 2026 20:00:14 +0000
Manifest this update: Sat 24 Jan 2026 20:00:13 +0000
Manifest next update: Sat 31 Jan 2026 20:00:13 +0000
Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: hco3YsUiXgOy7UDGH4/YD9q665mYMYDgaZ/5+1fxJDE=)
2: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 66DABlOmlKanBg15AydHS4VXq/M6pzfU0oFhd1sQmaw=)
3: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 5mbzjcjzxDZf01pjMXDuNhQqBvsv1vcB9wr2EMeLZMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Validity
Not Before: Jan 24 20:00:13 2026 GMT
Not After : Jan 31 20:00:13 2026 GMT
Subject: CN=697524ce-9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:8e:79:b8:ba:13:c0:88:60:0e:7f:ed:ef:
cc:77:f9:b5:94:81:13:eb:a7:7e:4d:6a:16:6c:bc:
fb:d4:4b:51:ad:db:57:7a:78:81:12:05:ee:e1:54:
24:a4:d2:12:09:b3:21:a1:b3:78:f2:10:1d:dd:44:
6d:12:93:33:13:39:27:c0:ad:37:89:e3:86:5b:e0:
60:30:6f:72:66:c3:52:f8:f0:a2:f4:ca:42:bf:12:
12:be:09:6b:66:f4:49:5f:58:7b:79:1d:f1:40:6f:
be:51:36:1b:2a:52:b7:7a:b5:40:39:e7:4f:be:05:
e8:7f:74:cb:3c:7f:b3:f4:2f:6b:c1:9c:6e:d5:79:
e4:0d:53:a9:4e:23:e7:c5:f3:2d:5f:4c:23:2c:e6:
0d:87:a4:6a:9b:88:46:13:c7:95:eb:c1:43:7d:89:
c6:9d:11:a7:c7:34:b3:cc:92:e5:e2:9c:fb:21:d1:
fd:fe:b6:8f:c4:41:41:93:13:dc:e6:ff:55:61:b2:
84:c7:88:b6:f1:84:7d:d2:bc:1a:28:8a:72:98:bd:
ba:51:e5:37:25:b9:7b:05:9e:a0:fc:f4:b3:69:9b:
79:98:7f:8f:7b:8b:bb:30:9b:d7:5c:8f:c8:49:28:
ae:1b:fd:5f:74:a0:8a:0c:9b:18:85:23:23:c4:bb:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:83:12:7C:48:97:07:40:C4:63:CC:6B:41:DE:2B:EE:C3:5F:19
X509v3 Authority Key Identifier:
keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f8:74:65:6e:5a:ae:e2:e8:c2:e7:e6:c0:71:4e:1a:d3:d6:
f1:c9:d9:7e:27:86:a3:47:40:ab:98:b8:da:13:79:91:df:b9:
67:e7:42:65:4a:63:6a:77:ff:07:1e:f5:f4:24:3f:bf:da:a5:
70:59:3a:b8:1c:54:32:c6:5c:9a:cd:df:73:20:86:53:c0:4d:
87:b0:9b:33:61:03:f7:bc:fe:f1:90:4b:dc:c3:c9:60:62:d5:
d7:72:d6:2e:1d:9b:8f:12:a2:38:4d:fa:97:7f:fb:a7:b3:b0:
59:82:f8:c6:4e:84:f3:da:9b:60:0f:f9:9d:c7:1e:b9:7c:33:
33:6a:d1:3b:62:12:67:0f:38:44:c3:6e:51:9d:74:e2:3a:73:
92:d6:45:d7:e0:4a:37:26:88:4c:89:e2:9f:51:48:85:00:32:
76:48:b3:35:e1:02:57:c6:e5:7f:70:6a:f2:13:55:64:96:07:
56:4d:9f:ee:da:b8:89:86:b4:e3:c6:5b:46:b7:e2:78:25:b5:
f1:e2:88:3f:11:3c:c9:6b:2e:9f:dd:51:66:2f:64:f7:3d:07:
0c:9b:1d:91:d6:48:39:8d:e7:16:1c:b4:e2:a4:cc:d4:03:06:
9d:bc:7a:40:f1:42:93:f7:63:c5:02:27:ef:e7:fd:76:10:f8:
ee:7b:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:07 2026 by rpki-client