This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier: pUGswOreA43PZszvevMdOfGruLn/a/UeTCkfg5cYItA=
Subject key identifier: 61:4C:07:88:DB:E8:B2:54:13:3F:A0:68:37:1C:62:0D:4B:5B:B9:20
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number: 0189
Signing time: Sun 11 Jan 2026 02:52:02 +0000
Manifest this update: Sun 11 Jan 2026 02:52:02 +0000
Manifest next update: Sun 18 Jan 2026 02:52:02 +0000
Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: JncQj5P4jodgTx9ahZutxjgYQzc7wdbcc6UM/hPg7ec=)
2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: rOwD6kKfHs7j3niSOFa7ZxwcRgpXDjpa8bFCR+QwO/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 02:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Validity
Not Before: Jan 11 02:52:02 2026 GMT
Not After : Jan 18 02:52:02 2026 GMT
Subject: CN=69631052-ee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:83:06:3b:50:60:57:c3:47:7e:5e:db:10:
8f:3d:73:88:33:aa:74:6b:7f:63:19:bf:af:54:f5:
df:a1:81:be:7d:57:09:16:8e:38:7e:2f:13:ac:dc:
28:6d:2e:e9:7c:b6:16:1e:9b:04:fc:1e:47:d6:e8:
80:71:2f:b8:03:08:c2:c0:90:f4:ce:63:d2:5f:1f:
d1:ef:3f:65:b0:39:b4:af:85:b0:db:bc:c9:9c:d3:
ac:0d:38:26:76:52:76:73:a4:0f:0e:e7:42:28:f1:
a4:3b:84:a7:66:43:67:2b:e2:3a:d7:e5:b6:c4:82:
cd:6b:60:c9:52:32:dc:b8:89:de:91:c0:2d:ff:10:
c8:cd:c3:99:55:0c:9f:b8:86:ae:cd:96:ca:9e:cb:
a8:1b:6b:47:ab:4f:48:71:1b:c2:84:8f:6e:11:a3:
c0:45:5f:2e:b5:96:94:4d:9b:7d:ad:e8:6d:42:a4:
6c:e3:35:49:da:83:03:c6:bf:fb:72:93:e1:ab:b9:
4f:56:f2:8c:87:a8:af:ed:f9:3b:ed:27:12:19:36:
b0:95:a4:86:94:47:ef:1a:21:41:e0:9a:2d:a8:d9:
f9:04:13:fa:4f:53:11:76:c6:ec:1e:bb:7e:77:6f:
4b:ef:4a:a4:ed:0e:cf:53:eb:d3:f1:34:93:26:bc:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:07:88:DB:E8:B2:54:13:3F:A0:68:37:1C:62:0D:4B:5B:B9:20
X509v3 Authority Key Identifier:
keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:e8:fb:4c:ed:11:24:a5:9b:74:7f:49:f6:61:2b:8f:34:
dc:42:d4:0b:99:a1:9a:98:63:94:63:64:c0:e4:35:2d:45:c6:
46:9e:96:af:c4:d1:52:6f:94:91:81:4f:a2:84:9e:59:68:4b:
86:2e:f6:02:fd:fb:e6:57:61:73:8d:ae:26:94:31:ab:e6:02:
cc:00:a3:f1:fa:d4:d8:ac:24:55:b8:39:c9:7c:c7:07:37:64:
c4:14:de:ac:8e:17:76:20:ef:0b:0a:d7:40:6f:1c:3b:63:0c:
ce:00:6d:11:81:58:88:f5:44:eb:51:df:5b:c9:1c:db:fb:ff:
ac:bb:89:08:12:15:f6:e5:6c:bb:44:f0:0d:1d:5c:b5:92:16:
b1:e9:6c:7d:79:f0:bf:5f:95:12:85:4c:6c:93:d1:c0:1f:55:
9a:c3:8c:1d:45:5a:15:78:0f:b4:80:53:e1:39:4a:a3:1d:2d:
45:a0:b4:46:34:33:f4:6d:33:bc:f0:d7:0d:0a:12:31:1e:4e:
23:f8:4f:36:1b:23:3b:41:6e:f4:da:79:e5:c6:7e:9c:69:a3:
04:73:05:11:2a:3e:1d:c9:90:c4:42:19:66:64:e8:a0:89:dd:
7d:7c:69:17:f2:75:c8:df:3d:7a:49:ed:20:f9:37:a1:3a:87:
54:f8:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:41:18 2026 by rpki-client