This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: fUQAyFbaqD3aj4qNxMmcv+VTPGNK6BJ8AAgS4x3MuPg=
Subject key identifier: 97:F2:19:CC:58:DA:C9:E6:53:1E:D0:B7:1A:24:37:69:E6:6C:0B:19
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1040
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 1030
Signing time: Thu 05 Feb 2026 03:35:06 +0000
Manifest this update: Thu 05 Feb 2026 03:35:05 +0000
Manifest next update: Thu 12 Feb 2026 03:35:05 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: MaBBzckkJ0zY6eHgONlqoxOM3HGNH2BXeWkDLT34sn4=)
2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: luc4+0BZTvO2yKZi0hsHSg65VjoagywQzhEkdHNbejY=)
3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 03:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4160 (0x1040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Feb 5 03:35:05 2026 GMT
Not After : Feb 12 03:35:05 2026 GMT
Subject: CN=69840fea-173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:6e:ca:b0:a4:4d:bc:68:f9:75:c3:a1:67:
2f:34:ea:97:cc:37:84:a4:2d:72:53:67:59:d4:3d:
c3:12:ce:d1:3f:ab:22:5e:38:5e:3c:04:59:a4:fc:
64:96:b2:58:91:55:62:06:da:b4:5d:fa:7c:6e:24:
09:3a:c8:10:b5:5c:cb:5a:ea:4c:8c:04:2c:9d:a3:
af:aa:08:f7:fa:0b:29:6e:c0:65:5e:ad:11:81:83:
17:76:10:f0:8b:fb:65:b2:28:f6:49:8b:ae:19:ed:
0a:a9:c0:b6:78:94:83:a1:a1:02:6a:42:1e:36:ae:
b1:c1:ac:54:27:e5:18:79:00:11:9a:36:8a:ee:32:
73:c2:af:94:28:2f:24:6a:0c:a1:79:0d:b2:32:61:
7d:b8:29:9d:81:1e:07:55:fe:e8:6a:1f:d1:85:93:
d6:3d:bb:14:fa:8f:5f:f8:d6:8f:cf:77:ed:16:4d:
a9:bc:22:28:03:43:15:34:72:5c:27:be:7c:93:e4:
1b:d0:ad:4e:44:b0:41:97:75:02:e2:b7:29:cd:2c:
53:24:98:26:64:88:c0:12:57:4f:06:e4:e6:5b:0d:
c2:e3:63:8b:b4:61:06:a5:c3:f9:25:60:25:73:06:
92:d9:f9:96:09:f0:f0:dc:75:a0:5d:f7:d5:96:b0:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:19:CC:58:DA:C9:E6:53:1E:D0:B7:1A:24:37:69:E6:6C:0B:19
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:38:8d:13:31:93:e7:4a:86:b0:ed:fb:a4:47:a8:fb:57:
79:b1:5e:14:ab:ee:aa:fc:3a:13:6f:2d:fd:23:62:3c:08:e8:
9b:06:8b:db:57:75:b2:03:07:b7:1c:29:ab:54:a6:cd:f0:d0:
f7:3a:94:ca:2e:ef:8e:b9:00:ec:90:55:56:73:87:ad:7e:39:
48:f9:c6:f7:61:1a:c8:25:01:0b:cc:7f:d9:dc:83:ed:7c:3d:
0e:65:8d:6a:87:37:d0:18:2a:a1:29:a8:73:50:bd:2d:7f:ec:
67:78:e7:0e:68:95:f0:28:3f:b0:8b:83:c5:ba:a8:01:27:8b:
4b:b5:17:ea:b0:0a:08:62:5d:aa:f3:dd:ea:20:82:4a:2f:bc:
a3:65:c0:4b:1b:b9:48:48:16:de:6a:7b:0d:20:22:60:f3:95:
1f:d2:7f:ce:ae:97:f9:4e:ba:2c:50:8e:bc:f3:f4:ad:0d:23:
33:b3:61:55:27:67:2c:35:13:fa:a8:bc:23:e2:09:0e:2e:eb:
41:86:96:60:57:3d:01:28:75:ec:1e:23:59:c0:b3:ba:4d:9d:
32:5a:34:ca:29:46:1f:ee:97:9d:58:7e:ff:7a:12:38:ce:f4:
b7:56:37:90:c0:2c:21:06:e3:00:2e:50:e7:46:1f:e1:4a:fb:
6f:66:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 00:33:28 2026 by rpki-client