This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json)
Hash identifier: DaMKHdZyFrjhP7e2Ik+L5Gcril6nUCXyXg/cE+blyRI=
Subject key identifier: 23:48:5D:41:7B:FB:38:C0:B9:A9:68:00:68:2E:BD:4B:02:9B:45:5F
Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Certificate serial: 03A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
Manifest number: 039F
Signing time: Sun 15 Feb 2026 00:25:38 +0000
Manifest this update: Sun 15 Feb 2026 00:25:37 +0000
Manifest next update: Sun 22 Feb 2026 00:25:37 +0000
Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: 5V2WCcsIseFx+sBFi794RlB1+D6SCUH4iXS1LBRQFaE=)
2: 2D613294CD7611EC83259862C4F9AE02.roa (hash: HUqC6JNil8MpabByxXZUWUh1z061818LFUdkHBUaghY=)
3: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: m1T9GaVF/kOA3y3lDclBiCBdGMqPbCm1SzZbjGctr8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 00:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935 (0x3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Validity
Not Before: Feb 15 00:25:37 2026 GMT
Not After : Feb 22 00:25:37 2026 GMT
Subject: CN=69911281-adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:9f:a0:a7:15:ef:c9:6e:81:99:71:10:91:
66:f6:d3:e8:bc:cb:1e:ff:d3:e8:5c:a7:00:7e:c3:
24:8d:65:a5:00:ff:45:62:0b:f7:2c:3f:2b:9c:ca:
86:03:f5:00:91:12:45:2b:a2:2c:3a:cf:f0:59:a6:
20:12:cb:4d:3b:37:fb:f8:11:33:97:b8:c3:a2:94:
2d:b1:f6:3d:ae:a6:92:7b:cb:cd:7c:03:4d:a7:55:
71:ec:2e:84:51:d2:fc:0c:62:0a:df:eb:cc:db:19:
d6:1d:43:0f:7d:c1:99:ad:c4:e9:f7:92:06:a9:49:
fd:44:8f:d4:a9:4a:6c:f7:49:8f:4e:a1:4d:2d:3b:
f8:03:0a:32:b7:5d:37:87:9d:7a:47:36:3f:f1:bc:
06:db:3f:24:00:dd:e5:dc:9f:1b:df:bb:0a:39:81:
20:59:b5:1e:c2:23:b9:65:3e:32:2b:31:58:df:8d:
c6:28:14:79:b2:9b:7e:b3:93:24:8b:23:df:41:b3:
95:25:cb:2a:29:44:85:fc:ff:82:34:b6:f4:64:0e:
14:b6:9f:91:40:20:43:bc:00:0e:84:a2:92:d7:d2:
22:c1:26:e5:68:75:bc:7a:09:78:e7:10:3f:af:72:
5b:3f:ee:49:6f:87:d1:6b:8a:95:19:40:6c:0c:43:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:5D:41:7B:FB:38:C0:B9:A9:68:00:68:2E:BD:4B:02:9B:45:5F
X509v3 Authority Key Identifier:
keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c2:a4:df:5f:44:d2:34:08:bb:fe:0e:b5:e8:21:87:5f:b6:
1a:4c:50:37:4b:62:cc:e7:c7:17:a7:ed:30:aa:0b:c4:88:cb:
6c:c6:df:49:96:c4:09:d3:4a:79:99:ca:b3:b5:f5:30:96:89:
3e:8e:31:bc:e3:dc:77:49:ac:70:c9:d8:86:6e:7d:a5:86:45:
9b:75:bf:cc:ec:fa:23:9c:a8:a1:2f:f2:13:47:86:1c:7e:96:
db:5a:c9:f4:b8:5a:ed:56:5a:0a:74:c3:83:6e:1c:56:b6:04:
e7:98:d5:16:a9:03:4e:75:bd:69:24:8f:99:c0:0e:22:47:ab:
70:54:81:2b:5e:3e:83:2f:ce:62:9e:1b:8d:24:dc:3e:cc:1f:
aa:f7:c5:77:1a:9c:ef:09:37:10:69:4a:9e:7f:24:51:6f:e1:
5b:1d:9e:f4:6a:13:be:11:d6:42:7c:3a:44:94:43:ab:2d:13:
fe:1e:1e:80:02:85:08:24:b1:83:67:79:7b:c2:34:a4:bf:0b:
13:85:ef:06:c7:91:55:38:01:84:88:7d:8a:6a:4e:81:9a:22:
68:77:3a:a5:48:74:2a:d0:d0:8b:a9:3d:5a:81:9f:91:68:08:
ae:b7:7a:2e:1a:17:13:5b:38:0b:b4:24:6c:34:92:55:da:32:
6d:a9:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:09:55 2026 by rpki-client