This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier: xD2L9yL12psCxmlxjGeOIw4tDmYbIWksT+jMkNhMAoo=
Subject key identifier: A6:5F:8E:69:68:18:02:CE:4B:B8:34:5D:E4:73:91:2D:F4:ED:83:56
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial: 12BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number: 12A4
Signing time: Sat 10 Jan 2026 16:48:42 +0000
Manifest this update: Sat 10 Jan 2026 16:48:41 +0000
Manifest next update: Sat 17 Jan 2026 16:48:41 +0000
Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: SNdPW9khk6r0o6jhTl+jFNP7RJ1g5K/LX2mG8z4cL9E=)
2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: u2n7hXJfpPkswx+8ZUw3IUUcjyPvy2JG1QnFE+FNubg=)
3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: Xzla+9ppUwpzAJZ58gGvDCqRc3koCm2xr8tcv9e/5Co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4797 (0x12bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Validity
Not Before: Jan 10 16:48:41 2026 GMT
Not After : Jan 17 16:48:41 2026 GMT
Subject: CN=696282e9-5cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:84:b2:c2:06:44:ec:97:24:89:bf:19:ee:
e7:3b:44:28:e3:06:c9:13:c8:5c:1e:ef:43:d8:0d:
f3:3d:be:5d:25:3b:6b:af:1b:ae:3d:98:e7:06:8a:
59:7e:f1:e6:d6:e5:65:e8:32:f4:ee:fa:de:10:68:
82:36:80:6c:61:3f:3a:f7:c5:ac:f0:c6:9b:2a:12:
85:b3:b8:22:a8:df:32:8d:e0:91:78:03:4e:b3:39:
1c:85:c0:4c:e8:4e:61:87:d9:e1:44:c3:0f:68:74:
da:7f:3f:98:c8:29:fb:a5:4d:69:8b:1b:dc:1a:09:
bf:9b:30:75:a0:ca:16:c5:72:af:db:ea:67:13:90:
0e:8e:da:7a:59:89:04:43:1a:36:c2:ae:43:04:5e:
20:86:33:ad:76:f6:0e:14:5e:79:33:b3:c1:78:dd:
76:2b:66:b7:f0:3d:74:2c:38:74:cf:f0:0b:0b:3c:
86:10:df:eb:43:fa:db:12:4b:79:84:f2:01:2b:d0:
3c:e6:8b:c3:65:b9:fe:3b:70:e8:98:b5:c1:a2:6e:
3e:00:39:2b:a8:ce:00:54:1f:1d:7e:69:f8:63:46:
ab:34:86:2e:00:c1:a0:d0:e7:4c:9a:ee:36:e9:e4:
74:c0:f1:d7:11:93:2a:a0:09:ea:22:c4:3d:26:a1:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:8E:69:68:18:02:CE:4B:B8:34:5D:E4:73:91:2D:F4:ED:83:56
X509v3 Authority Key Identifier:
keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:33:ac:c5:6e:63:84:d9:af:66:e3:db:25:0d:8d:fb:2f:12:
a2:0a:d6:5d:7f:5d:e1:e1:d7:1f:2e:cb:5d:84:77:ca:06:31:
f5:4f:29:d4:8d:b3:41:7c:5b:c0:4a:3b:00:f1:98:ee:25:98:
b3:9a:87:24:a2:71:c5:73:98:c8:2d:db:36:b8:8a:b9:19:8e:
f1:f3:5c:d2:6e:29:ba:8a:21:0d:18:5c:d0:96:0b:c2:3e:a4:
94:49:dd:94:75:e5:47:c7:c3:00:12:9b:84:29:e9:50:d2:d8:
6d:1d:d7:00:83:87:75:dd:b6:9c:ff:41:6f:ec:16:2e:1b:7b:
db:8a:c2:f5:83:9e:59:78:39:6e:ba:f9:5c:d6:61:2f:da:8d:
03:26:a4:d1:0d:25:ee:88:e6:90:26:e7:eb:d8:b4:e7:81:80:
7b:d7:86:fd:6e:79:15:04:ad:a8:2b:54:c2:76:68:37:0b:8a:
32:8b:ca:13:c4:0d:03:f7:27:6d:bd:76:0f:72:9f:55:c1:e6:
df:1f:77:ec:80:bd:93:73:fc:40:aa:cc:31:42:c0:29:79:d2:
b4:12:ca:f2:68:30:f2:ee:e2:23:7a:7d:50:ca:aa:7a:2b:eb:
34:6d:fd:cb:20:9f:b8:46:84:1a:d3:87:31:54:8d:4e:fc:c3:
1e:dc:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:24:27 2026 by rpki-client