This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier: N55Iw5KYzdVSgBbvom4w+6D2v/NosLjM/pPEY/C86bQ=
Subject key identifier: 3F:99:69:FD:C3:76:17:C3:38:D7:29:D7:6F:FC:DA:56:38:F2:B8:54
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial: 0CF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number: 0CC3
Signing time: Tue 10 Feb 2026 18:12:08 +0000
Manifest this update: Tue 10 Feb 2026 18:12:08 +0000
Manifest next update: Tue 17 Feb 2026 18:12:08 +0000
Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: w/izsKLUbbiQg4F0raDoJrk4ejxk84Du2YuWRNDNwFE=)
2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=)
3: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=)
4: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=)
5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 18:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Validity
Not Before: Feb 10 18:12:08 2026 GMT
Not After : Feb 17 18:12:08 2026 GMT
Subject: CN=698b74f8-1ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:2e:a2:57:c4:d1:2c:5c:68:30:f8:96:c9:
f8:ba:1e:11:3b:e5:22:c6:58:54:19:09:e4:e3:51:
f8:7e:85:18:89:da:f3:12:5e:8c:64:6c:0f:03:ab:
b0:d0:47:1b:e0:8e:8d:5b:0d:13:fc:97:5b:92:d5:
aa:63:82:1b:84:8c:cc:dc:7b:33:cc:a4:18:e7:70:
38:63:05:4f:c6:d1:2f:1d:cc:0d:10:6f:0b:bc:bd:
38:e5:a6:f6:86:af:1b:02:96:ca:4b:da:1c:38:de:
c5:ae:e8:31:9d:5c:5d:03:df:e8:6e:27:33:ba:8a:
1b:af:af:d7:4c:5d:e9:95:c4:25:9e:fa:63:42:91:
a4:26:b5:ce:87:04:f8:0c:12:82:ea:b9:21:e4:19:
88:97:15:6b:fe:65:2a:7f:d1:32:b2:6a:d1:ab:fc:
bc:43:20:52:fe:e5:b5:d4:71:8b:2d:35:38:86:94:
0e:c1:32:de:9e:fa:62:96:76:68:41:b3:11:40:ca:
78:55:d3:d9:72:de:89:65:fc:f3:39:b3:59:c0:94:
a4:64:6c:fc:1e:67:fc:64:e4:72:30:02:e8:d5:9c:
f0:0a:0a:02:5f:02:4b:97:7a:3d:43:45:4f:22:fd:
3f:5e:12:3b:ab:36:e6:03:19:fe:44:27:f9:b3:f8:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:69:FD:C3:76:17:C3:38:D7:29:D7:6F:FC:DA:56:38:F2:B8:54
X509v3 Authority Key Identifier:
keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ff:03:e7:f8:de:94:3e:49:67:30:71:92:1b:c1:7b:bb:30:
6b:6d:bf:f7:f9:02:47:02:bc:2d:f3:3c:39:66:e4:d4:e0:3a:
64:1e:f9:3c:ef:88:3d:86:01:b9:ac:67:d9:7e:a9:0b:02:9c:
12:c2:fc:74:bb:8d:c0:27:3f:76:52:7d:51:8e:80:3c:b1:96:
48:de:2b:b2:a0:e3:a2:45:dd:61:5f:9c:56:c5:bb:17:03:09:
ef:ed:18:0f:ee:c0:91:e8:11:1f:b5:8d:b5:6e:9d:93:68:64:
54:d6:81:fb:b8:93:87:0b:4e:14:01:4a:d3:8c:8d:9f:5d:ff:
b8:65:f2:0f:c9:36:3e:c7:1d:70:7c:8f:8f:e0:a5:25:d7:42:
f9:eb:11:52:85:72:28:df:9f:6a:0e:89:bd:05:4d:bb:02:be:
19:53:d0:cb:ec:5b:09:8c:c7:e9:50:8a:4f:f9:43:6f:b7:c4:
fc:6c:23:23:fb:0f:77:5b:c5:b8:00:a3:53:d5:20:7f:41:74:
37:3c:df:6a:e1:c6:0b:1a:e2:a7:57:ae:4c:28:81:8c:19:6d:
c4:c6:1d:88:7f:4e:45:ab:77:c9:a5:cd:95:87:d7:00:e9:6a:
53:e1:f5:83:e2:b5:2e:dc:56:bd:1e:42:26:9c:ce:90:bd:7c:
0e:e3:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 07:52:26 2026 by rpki-client