This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier: 9PAXH85uy1fedCOTWuVQCSVbMTDV2jdqRIX/sWy2iE0=
Subject key identifier: 56:74:17:86:82:E0:94:21:1F:F4:80:A4:70:AF:1F:F0:B8:80:81:88
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial: 1F0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number: 1F03
Signing time: Fri 02 Jan 2026 15:51:54 +0000
Manifest this update: Fri 02 Jan 2026 15:51:54 +0000
Manifest next update: Fri 09 Jan 2026 15:51:54 +0000
Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: DKONztrCMpSiw9kfUXmexNfLZ8Fv7W5i+MDGIRu7+vI=)
2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Jan 2026 15:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7951 (0x1f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
Validity
Not Before: Jan 2 15:51:54 2026 GMT
Not After : Jan 9 15:51:54 2026 GMT
Subject: CN=6957e99a-4804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:b0:13:06:a0:47:96:43:05:e8:4e:86:c5:
98:4e:78:92:22:c2:1f:e4:43:de:ef:56:fa:63:f2:
bc:12:e7:4f:8c:59:32:6b:23:d4:2c:db:72:d9:ca:
b0:1b:3a:f2:60:bc:99:b9:2f:e6:62:94:94:6a:d5:
4c:00:cb:9f:12:71:43:48:3a:24:8b:7d:90:9a:96:
15:8e:ad:71:07:3a:53:a1:f5:a7:2e:53:4a:2e:aa:
fc:a3:dd:6d:01:ce:87:91:29:aa:2b:9d:3c:39:71:
69:b6:c0:55:51:ae:e2:ab:76:49:b4:3a:fb:1a:bc:
dc:82:94:72:13:f4:8e:6d:8a:4b:e4:35:db:26:dc:
88:89:15:83:69:ab:99:10:90:62:0b:03:35:9a:32:
3a:d4:0b:99:fc:94:68:ae:41:97:1d:91:d7:e9:79:
29:15:70:16:0e:3d:c3:1a:51:7e:8a:8c:77:37:74:
7f:e5:5f:dd:80:93:76:83:1b:1f:db:04:4e:3e:c9:
22:4c:0a:8d:43:b0:b9:a8:7c:83:9b:6e:3d:44:5d:
56:7d:b3:73:b0:73:87:8e:04:db:9b:f0:8f:b8:56:
45:ee:97:25:76:51:e0:60:a0:af:35:7f:8b:6a:e3:
d3:46:f5:aa:27:c7:ad:99:df:d2:9a:16:ae:b1:7c:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:17:86:82:E0:94:21:1F:F4:80:A4:70:AF:1F:F0:B8:80:81:88
X509v3 Authority Key Identifier:
keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bd:fe:3e:ec:8c:11:14:86:b6:ba:a6:80:ae:9e:61:2e:de:
a0:7a:71:b3:81:90:77:ae:7b:5b:8b:51:0c:ed:fd:5f:ab:00:
17:01:95:40:31:72:34:58:15:17:6d:e9:04:1a:5a:05:60:72:
af:d9:4c:4b:b8:0f:f0:60:c0:33:b9:2b:ec:e6:d2:50:be:4a:
ab:de:62:d7:4f:07:6b:6b:2c:9c:61:17:bc:85:9d:dc:cf:db:
3f:7e:ef:bd:02:5d:b5:78:27:e1:a5:60:8d:75:2a:b0:5b:6a:
25:96:b5:b0:76:cd:23:5b:52:78:8d:bd:f7:ec:7d:14:30:f2:
69:e3:cb:8f:18:22:8d:41:43:d0:27:ab:e5:4e:1e:a0:31:3c:
af:dd:9a:e8:bc:d5:25:0e:27:1c:80:f5:ef:c9:9a:ee:fe:ea:
d8:46:82:e0:ce:ee:fe:a5:58:ff:e0:2d:0c:45:00:3c:74:bd:
e2:13:c1:e7:c4:df:96:82:b4:49:b9:be:0b:05:ff:15:43:fe:
49:54:93:e6:0a:5f:2b:25:37:9d:f8:69:c5:6b:13:22:14:bb:
51:9b:9a:5a:a8:3e:cb:a7:77:1f:ff:d2:3c:aa:d9:77:43:61:
54:43:d7:ae:ad:f9:3f:44:72:27:72:ed:f5:2a:0d:68:3e:98:
ab:11:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 02:20:23 2026 by rpki-client