This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: 6EDnuCs9SA6vcGT3lchh9+bgIkGNRe3YXwlJXQHA4Uk=
Subject key identifier: 09:29:E7:3B:44:51:FB:53:F5:33:4D:54:A9:18:F9:2D:B3:AE:6D:92
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 1030
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 1027
Signing time: Thu 05 Feb 2026 03:35:08 +0000
Manifest this update: Thu 05 Feb 2026 03:35:08 +0000
Manifest next update: Thu 12 Feb 2026 03:35:08 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: hShMhySX6tE+KeBlVEIN9Bii16ZcCQcb6NnVWaucyp0=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 03:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Validity
Not Before: Feb 5 03:35:08 2026 GMT
Not After : Feb 12 03:35:08 2026 GMT
Subject: CN=69840fec-c613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:88:11:61:7e:17:02:92:38:00:5c:ff:3f:
b4:cd:e6:7f:b9:3e:da:d5:b0:75:36:50:a1:ec:35:
4b:ad:2e:68:88:45:cf:38:6e:fe:c5:dc:80:2c:12:
6b:41:6e:3d:00:47:2f:a6:24:fb:f1:f8:a6:8b:1b:
2c:3f:41:30:77:66:39:c4:0d:9e:18:a4:cf:31:04:
b2:18:15:db:a9:e9:12:3c:9f:1c:b6:5a:4e:3d:78:
b2:62:3b:12:0b:98:1e:d5:69:de:47:65:04:eb:44:
6a:bf:2e:23:c0:06:f4:85:36:0c:4a:3c:81:80:a8:
d3:e5:c2:11:0e:86:77:6d:9e:e3:e6:9c:a2:60:13:
54:f9:e3:a5:ae:12:4d:b9:ca:19:8e:57:1e:87:b8:
07:86:77:fc:b6:99:3e:e9:3e:e9:6e:85:bb:0d:8c:
3d:99:06:60:65:58:08:64:d7:d4:6d:8c:ea:13:6c:
57:aa:f8:08:9b:24:6f:a7:27:36:6f:b1:cd:69:8e:
ce:e1:ce:3f:60:50:52:3d:37:f2:da:9c:f6:95:e8:
26:76:d0:ea:dc:c5:a6:39:1e:6b:81:ec:d2:ed:d7:
b5:e9:fe:5d:14:09:22:ab:d1:21:9b:fb:c4:ea:41:
5c:04:cf:47:5b:64:d1:39:e0:b7:33:a2:61:44:d6:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:E7:3B:44:51:FB:53:F5:33:4D:54:A9:18:F9:2D:B3:AE:6D:92
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:80:7a:1e:9a:c5:44:fe:bb:11:bc:31:2e:92:98:d3:b5:bd:
43:39:93:5d:83:33:50:0f:fb:e7:dd:a4:85:19:5b:7a:3e:5a:
47:ee:d9:0b:23:8c:12:be:4c:f0:a1:3d:59:c0:58:73:3b:1e:
af:68:a0:13:3a:41:e5:e0:c9:a2:c7:94:db:e3:ad:8c:68:e2:
db:30:5c:66:bb:75:8a:ab:0f:1d:0a:0b:3e:cf:f0:30:b9:95:
d3:b3:1a:b9:59:3f:35:da:c4:02:20:4b:18:26:1e:19:04:9c:
f4:fb:16:25:6e:94:fe:10:33:90:ca:8d:7d:18:55:7e:b4:c5:
92:aa:49:50:7f:31:e5:05:43:00:6e:99:91:e5:cf:c3:ab:53:
53:c6:53:3c:32:3a:56:9e:97:d6:d6:ff:2a:b4:61:92:e5:58:
58:bf:52:05:c8:35:ba:8e:e1:7e:e4:25:34:b1:a2:63:c1:b7:
3c:a2:55:44:ee:71:f8:51:8c:a6:a3:1f:09:1d:cf:c0:2f:62:
b4:67:bc:af:12:49:67:83:fd:a4:dc:ea:13:7d:d8:ee:60:8c:
65:18:68:29:c4:e6:83:d2:05:19:b5:5e:ad:b8:c9:7d:fa:d9:
8a:12:7e:7e:15:d0:72:75:09:b2:ca:f9:ed:91:02:64:8b:a7:
66:d8:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 00:33:06 2026 by rpki-client