This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json)
Hash identifier: 2YSYpwRSyg0P3rg/oa9I53/QaozULT3MH+E5JmPh++M=
Subject key identifier: 96:E4:0F:1A:F8:9C:95:6C:81:EA:2D:EB:2A:0F:C8:89:91:03:AF:2C
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
Manifest number: 0552
Signing time: Thu 22 Jan 2026 22:40:59 +0000
Manifest this update: Thu 22 Jan 2026 22:40:58 +0000
Manifest next update: Thu 29 Jan 2026 22:40:58 +0000
Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: l1rVbv9yadtyzlLzUSmaF+B3OLix9h3TFbIaxH1Vbh4=)
2: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: FkiL6AOguV/ODkMs4HRo/0ifEPFjnGb8m2pRQF54UiY=)
3: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: O4d2rjcxKIku+xiW/1KGQUyVAJ12dGdhkkO9KRL1EOw=)
4: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: ZIrhP9UDAVYRNfKeRGlyTPy785zmXCzmRz3nPy9yy2g=)
5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: 4Had5FY4pwFyUD0aCqgDusTgRp2pErIXiEruwD2H9Yc=)
6: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: 1dqO6r+A2uTRxInxtjkWF1ndg9y4kX4fvagqEnUInnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 22:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Jan 22 22:40:58 2026 GMT
Not After : Jan 29 22:40:58 2026 GMT
Subject: CN=6972a77b-d66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:de:08:c5:5d:49:59:68:08:93:f3:6d:93:
98:ad:6c:85:9a:03:a4:d7:38:3f:64:ac:ff:ed:91:
a0:0b:ac:03:5c:e2:f5:06:7e:a7:f1:a4:16:ee:0f:
1d:7f:98:2b:55:27:fe:50:c9:51:6b:50:fa:65:a8:
1c:39:a4:02:68:42:8d:44:4a:2f:66:94:cd:ea:4c:
4b:8b:8f:49:30:b3:d1:a4:26:2b:df:1a:5e:9e:2b:
99:71:eb:87:9a:8a:c1:55:d8:be:da:18:31:d0:68:
f9:5a:39:c3:50:e5:4c:b0:54:9e:d8:23:4c:37:89:
d7:40:a3:ba:4f:2e:32:3d:d2:6a:7f:bf:2a:c1:1c:
0d:bc:4b:8b:b1:76:ec:d3:84:c0:02:94:b8:8b:89:
02:a4:bf:8d:ad:d3:4e:54:f2:e9:75:bc:e1:82:ef:
9d:f3:80:75:6b:8c:52:b5:df:7f:84:3b:25:f2:61:
6a:0d:25:49:7b:11:81:32:77:90:ad:b3:66:97:36:
22:9f:e6:23:cf:15:d5:75:39:7e:3a:f1:ab:c1:cf:
58:e8:2a:5c:75:f4:98:b4:34:dd:3d:c2:09:af:ff:
2a:fa:03:6f:01:f8:29:c8:4e:e1:03:33:52:a9:f6:
c2:2e:a6:e4:0c:28:d8:36:74:b1:75:9b:ec:9a:87:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:0F:1A:F8:9C:95:6C:81:EA:2D:EB:2A:0F:C8:89:91:03:AF:2C
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:07:b8:dd:a9:d4:5f:3c:e9:1d:f0:c5:a8:f9:e1:a3:e0:4a:
22:1f:2b:50:33:a2:15:1d:a4:d6:bc:79:92:d6:41:89:f7:84:
ef:2a:42:cc:93:ee:48:03:39:90:1d:a1:e6:31:43:d1:3c:5a:
3e:d4:44:4c:a7:11:0c:8b:5c:53:66:d0:5e:bf:b0:45:39:7d:
56:fd:fe:5f:07:31:27:d6:4a:a0:3c:00:31:34:6a:06:10:0c:
9c:bf:f6:e1:19:24:ac:15:02:dd:26:4d:5f:ac:48:7a:05:a9:
17:28:47:38:15:bf:29:11:94:a2:ef:d4:b5:cf:72:4b:37:0e:
c9:9d:5e:e1:7a:4a:f0:fe:77:8b:b7:e5:ca:a7:16:c9:9a:8e:
2d:26:cc:c0:e1:73:ee:28:1f:a3:3d:ef:d6:34:aa:70:86:d0:
cd:e8:4d:c7:08:c7:8b:2e:d8:2f:2a:f1:9d:ea:44:51:b2:58:
8d:38:12:72:9b:45:18:aa:3f:a9:67:90:e5:3e:4b:6f:27:0a:
17:e1:9d:82:43:16:ac:3a:70:ec:6e:0a:38:26:3c:64:11:17:
aa:ba:5a:4d:d4:89:9b:41:84:80:9e:f5:7d:15:30:73:df:11:
6a:84:5c:78:05:23:9e:78:a4:4b:08:20:ac:fb:bb:6f:07:e2:
78:b7:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 12:59:22 2026 by rpki-client