This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier: g3w5UoomxeNCUGAN6xtrAzq9/i2lfEkNmChgeX+q8pk=
Subject key identifier: BF:DA:9D:46:0F:30:DC:39:AB:47:90:5E:4A:98:DA:6F:A7:C2:40:49
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number: 01EF
Signing time: Wed 21 Jan 2026 02:09:21 +0000
Manifest this update: Wed 21 Jan 2026 02:09:20 +0000
Manifest next update: Wed 28 Jan 2026 02:09:20 +0000
Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: gJoUzPq8qWqmbh/FxvMEz9coaT+SQU9NbXpUVcHpZvE=)
2: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=)
3: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: oVqk1V6SMsFEFFypJZwBJY7tdrNrtjHmcrmlxHpAog8=)
4: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: UClI42Nc4TAFt2EH/zfcSweF10PqmL7CvHfiL9lPAxM=)
5: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: UGq+JUcju28obC/yCTlpFMjzph+6cUj/s9U2aEaPniY=)
6: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: hs4pbkMdAj+D2UuqPGCvCOhNIxOm0iHH3n26RgqYzp4=)
7: BA917E94D65F11F090E652930BB43E13.roa (hash: 5VaeoiNxYe7urXj1q43i9rT2qxmYG2ELZC0j1WqZW8k=)
8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: kP45XXDunbMIfdqYzPQTlFvypMXpadnSedx4GT1Iwgc=)
9: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 9VTaK6okqIJvF9II2cb927AcLgrTqA9SlI29NpkDXFQ=)
10: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wpnmGkguzd61ngA1alk/0gWu0+VGdOnX4QN2iRz/PDY=)
11: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: 2oxGf1eF2vMP7e/KYqIXBpkCvgOIzwtv4aEoBWiSHEE=)
12: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: pk4iRSrrvtFGqra4UOtTwUERBl9wGLn18X+I8xUeZuo=)
13: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: idXeV/vJmvr27TLb+qveG/iLmKPYdgqQIbqbNOCFSf4=)
14: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 4eY2s8Kl/roYRAvSuHuq1ezQDh2MWHLHPTeUX63R6yM=)
15: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: czjAqWQeWsyu/4wi/BZHeovzI0scnOJ//P4FWGc4nUs=)
16: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: GBGetP5iCb9tsjZGfvDrYFe7zLDfSNoHPSI0qO5wZUo=)
17: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: jnn+3+ad82Cn/wKtacQrT2BVd7Rq7+SYdgr+JJUl5yM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jan 21 02:09:20 2026 GMT
Not After : Jan 28 02:09:20 2026 GMT
Subject: CN=69703550-a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:90:fe:1c:d0:ee:be:a0:97:d2:ba:2c:ee:
54:c3:aa:0a:b1:22:b5:c6:dd:8b:93:ce:54:d3:bb:
7d:e3:53:ec:18:f4:0a:ec:56:9f:46:96:31:55:44:
bf:c4:23:f9:5b:f9:b7:04:0f:80:7f:0e:b5:ed:cb:
9e:2c:bf:0c:9a:0a:b5:82:91:fb:56:74:bf:7b:11:
58:9e:5c:55:4b:11:73:43:04:19:f4:2d:65:70:ff:
40:c3:88:f9:03:2e:71:01:2a:80:27:58:88:f2:22:
6e:c8:93:f4:e8:95:75:3e:be:04:59:2c:41:a1:72:
1d:99:71:86:c1:33:24:c9:63:e1:67:2f:3e:3a:cb:
a7:29:bc:d5:4e:f1:e5:38:20:6b:f2:5a:d3:1d:89:
35:65:e7:bd:ff:38:34:2a:ab:3d:b8:34:5d:cd:d3:
d6:c0:e7:b2:07:34:cd:16:9d:11:b8:c2:21:03:c1:
b4:ed:d5:2a:d5:17:69:6d:53:f6:2c:38:92:68:30:
f6:75:e1:dd:88:00:f8:70:eb:29:3d:9a:b8:ea:ed:
9a:b0:65:9c:fd:25:83:27:d2:f1:9f:b0:3c:47:9c:
58:35:23:1b:d8:f4:63:18:4b:eb:e6:2d:8c:09:ef:
42:9b:3b:7c:75:89:69:0d:bf:b4:b1:96:89:87:4b:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:9D:46:0F:30:DC:39:AB:47:90:5E:4A:98:DA:6F:A7:C2:40:49
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:98:9e:3b:fa:44:d6:f0:38:90:7b:33:70:85:07:52:80:
4e:cd:d4:f0:57:19:df:31:ed:80:fa:b4:b6:1e:6a:e8:3f:d2:
c3:81:4d:75:e7:db:9d:22:23:39:10:9a:30:59:65:4a:49:49:
66:83:ef:6f:ef:7d:f4:35:02:33:b9:27:7d:ce:af:28:26:c7:
88:25:fb:d7:9d:fa:8e:23:88:4b:eb:af:4a:6b:e1:75:f1:02:
94:2f:89:cd:5f:1e:7f:ca:09:d2:a4:50:72:55:1c:94:b9:bb:
5a:b4:5d:e5:16:ab:f6:ea:80:db:42:79:dc:cb:69:2c:6b:09:
7f:69:1b:78:6e:4b:be:c7:42:73:82:c5:27:3b:d9:6c:f3:f8:
22:7a:96:ad:62:21:9c:b2:8e:20:68:b3:39:d6:05:b6:aa:01:
d5:69:73:08:12:a2:37:8a:b5:40:39:a2:63:44:84:03:ea:19:
d6:14:a6:31:c3:45:ee:04:d1:d1:46:46:7d:69:d5:91:38:e0:
49:6b:f6:e7:3d:b2:0f:f6:70:59:8f:c0:40:60:f1:7c:c0:02:
08:40:46:ee:69:08:15:d3:db:0d:85:bc:c3:87:a5:28:13:eb:
9b:5e:25:8a:a5:ae:bc:10:de:70:ab:60:00:fe:47:54:3f:87:
8d:2e:06:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjYwMTIxMDIwOTIwWhcNMjYwMTI4MDIwOTIwWjAYMRYwFAYD
VQQDDA02OTcwMzU1MC1hODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcyQ/hzQ7r6gl9K6LO5Uw6oKsSK1xt2Lk85U07t941PsGPQK7FafRpYxVUS/
xCP5W/m3BA+Afw617cueLL8Mmgq1gpH7VnS/exFYnlxVSxFzQwQZ9C1lcP9Aw4j5
Ay5xASqAJ1iI8iJuyJP06JV1Pr4EWSxBoXIdmXGGwTMkyWPhZy8+OsunKbzVTvHl
OCBr8lrTHYk1Zee9/zg0Kqs9uDRdzdPWwOeyBzTNFp0RuMIhA8G07dUq1RdpbVP2
LDiSaDD2deHdiAD4cOspPZq46u2asGWc/SWDJ9Lxn7A8R5xYNSMb2PRjGEvr5i2M
Ce9Cmzt8dYlpDb+0sZaJh0vCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/anUYP
MNw5q0eQXkqY2m+nwkBJMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm
TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtUZieO/pE1vA4kHszcIUHUoBOzdTwVxnfMe2A+rS2HmroP9LDgU11
59udIiM5EJowWWVKSUlmg+9v7330NQIzuSd9zq8oJseIJfvXnfqOI4hL669Ka+F1
8QKUL4nNXx5/ygnSpFByVRyUubtatF3lFqv26oDbQnncy2ksawl/aRt4bku+x0Jz
gsUnO9ls8/giepatYiGcso4gaLM51gW2qgHVaXMIEqI3irVAOaJjRIQD6hnWFKYx
w0XuBNHRRkZ9adWROOBJa/bnPbIP9nBZj8BAYPF8wAIIQEbuaQgV09sNhbzDh6Uo
E+ubXiWKpa68EN5wq2AA/kdUP4eNLgbu
-----END CERTIFICATE-----
Generated at Thu Jan 22 06:23:39 2026 by rpki-client