This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json)
Hash identifier: ny/vQltrxSEdQpZkcFcn8YymZ3Y6nH6JIOsSbJhjXKs=
Subject key identifier: 2F:36:1C:BE:91:7E:F4:C7:94:26:22:DD:21:AC:13:D7:09:A5:B3:9F
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 03BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
Manifest number: 03B1
Signing time: Tue 03 Feb 2026 00:10:50 +0000
Manifest this update: Tue 03 Feb 2026 00:10:49 +0000
Manifest next update: Tue 10 Feb 2026 00:10:49 +0000
Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: kXTy/Yk/Il9l5/5ZU9QEb8dRpWZq1tPSObxwPXnKMyo=)
2: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: hW5FiSV5239AbImQE/mYJwi40OATdFzGCdVUMZFhemo=)
3: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: SFUw1crOwEdM2KZGmzmI0Y/ekMkiUyOErHqNpQ3ZimY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 00:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Validity
Not Before: Feb 3 00:10:49 2026 GMT
Not After : Feb 10 00:10:49 2026 GMT
Subject: CN=69813d0a-54c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:7e:b6:02:e9:44:61:31:86:5d:5b:2f:fc:
31:23:13:52:bf:7e:6f:59:8c:4b:41:b5:7f:01:48:
a0:7c:cf:01:d5:83:82:c7:dc:f6:91:7c:ba:ea:51:
eb:6a:db:ac:54:b7:20:79:ce:a0:e9:f5:7e:12:b3:
db:52:83:f5:ba:d0:1a:43:ea:1f:b1:d0:74:5e:63:
ae:9e:2c:2b:82:01:93:10:06:33:7f:00:f0:ab:b2:
39:83:c7:9c:b9:06:13:60:04:c8:88:a7:a6:01:fd:
46:d5:76:dd:e7:78:f1:b9:2f:c1:a6:bb:35:13:62:
52:02:4d:b6:34:f7:d2:72:4c:d4:30:9d:da:67:30:
53:d9:c7:de:32:2a:d2:63:4e:b9:f6:5f:61:33:51:
77:8d:fe:88:ba:50:64:98:c7:6d:15:8c:dc:9f:b9:
a5:8a:83:f7:87:b2:41:9c:a8:72:a5:19:09:9b:96:
fe:90:65:4e:71:4a:33:c2:98:6a:fa:76:2f:9c:0d:
13:0c:91:54:4d:6c:fe:78:3c:a9:d4:89:59:1a:94:
8e:36:05:6e:63:19:de:34:4f:8f:d0:6d:da:fa:cc:
6b:dc:b4:70:25:b2:03:d8:ad:42:57:7e:f1:4b:aa:
80:f7:46:0e:f4:7b:9b:91:d3:3c:30:b6:64:83:be:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:1C:BE:91:7E:F4:C7:94:26:22:DD:21:AC:13:D7:09:A5:B3:9F
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:e9:e1:18:5e:47:3c:83:35:42:e6:7a:a3:a7:82:de:44:
bd:3a:d7:9d:5c:4f:d4:7f:34:43:2e:9c:69:a3:ef:ab:d6:3a:
c9:e9:53:05:a1:cb:cb:97:ed:fb:31:74:72:81:da:e0:2a:86:
60:5b:67:16:99:0c:26:82:48:38:8f:ac:67:ed:a2:14:d4:26:
40:b5:89:17:c5:4d:43:c7:c8:b6:57:f3:d2:79:07:fb:13:66:
70:ac:e9:ba:f9:27:7a:16:e4:10:15:e6:93:64:6f:73:97:21:
c3:49:31:d1:b4:0a:a7:0b:e2:12:e2:17:6d:de:ce:17:76:0f:
9e:25:b8:b5:27:87:08:a5:91:cd:d6:43:3c:b9:df:b0:72:c1:
0b:a6:d1:5c:e0:23:11:53:49:9b:d7:ba:75:c4:d1:8e:15:59:
50:89:51:83:93:d8:00:4e:11:59:69:cd:56:67:f6:41:4c:f6:
f2:6e:c3:f4:ec:88:1b:02:eb:2f:91:1e:43:7b:d7:f5:1f:39:
2c:b2:b5:9b:7a:66:2a:9d:6f:f5:83:ce:69:4b:21:7b:62:d6:
29:73:c5:e8:39:4f:15:4f:c6:59:4f:cc:af:62:08:50:18:00:
ad:b4:c5:ba:24:4e:a4:6f:14:f6:a0:ef:48:b3:09:8a:b8:c4:
72:72:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:19 2026 by rpki-client