This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier: 4DNiONCXLDt5hwiq9Hw9Qy1sdNHlY2CtzduwO+ds8Ns=
Subject key identifier: 2F:D4:52:DA:97:A1:F8:61:07:69:65:11:0A:F4:A1:33:F9:64:28:EE
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number: 0829
Signing time: Sun 08 Feb 2026 20:38:29 +0000
Manifest this update: Sun 08 Feb 2026 20:38:28 +0000
Manifest next update: Sun 15 Feb 2026 20:38:28 +0000
Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: szzVI1kiKbtMbT6cppO03ls4IyZc1n9Xb+Sbg5uRFVY=)
2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=)
3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=)
4: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=)
5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 20:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Validity
Not Before: Feb 8 20:38:28 2026 GMT
Not After : Feb 15 20:38:28 2026 GMT
Subject: CN=6988f444-3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:3e:5c:41:68:e2:ca:49:91:6b:a7:d0:df:
ac:e3:1e:ca:86:a5:96:aa:09:a6:9b:02:cf:33:12:
af:b2:e2:2a:1e:1c:96:64:d5:db:a8:b6:1f:f4:81:
e8:a8:7a:ea:4c:c5:36:cd:fb:49:03:b5:8b:33:51:
ea:c1:d3:18:ff:08:22:2f:c7:0e:cf:cc:5c:9c:d5:
74:02:24:5c:9a:1b:d5:b8:cc:5e:8a:f4:bd:70:86:
e9:dd:1e:19:13:b6:e9:bd:42:69:ca:b9:68:92:ff:
2f:04:d6:c7:20:9f:64:c4:2e:76:3b:6f:a7:8d:6a:
c9:a9:6f:61:b6:5d:90:0d:e0:b0:be:93:23:82:2b:
f6:ae:67:95:78:1c:f6:1e:ed:65:22:1a:fc:cc:66:
2d:b3:bd:4a:53:d8:dc:29:82:5d:4e:ca:4e:56:65:
cc:09:84:b0:44:d1:31:77:14:79:54:18:7d:43:c3:
d0:91:fd:33:d9:60:09:e3:23:84:e7:22:80:12:ce:
50:5d:45:00:c0:c6:e4:ae:c5:37:64:73:e1:61:0d:
18:25:c8:71:a1:72:4a:1e:4e:a9:4e:ad:ce:ab:49:
b5:ed:3b:ca:24:5a:55:6f:61:f3:60:43:c0:de:e4:
6b:51:ea:a0:71:06:97:89:9a:fb:82:c1:07:64:b1:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:52:DA:97:A1:F8:61:07:69:65:11:0A:F4:A1:33:F9:64:28:EE
X509v3 Authority Key Identifier:
keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5a:c4:17:93:f7:14:18:14:12:c8:02:30:2c:4a:bf:c9:e8:
e3:f2:9f:e1:4f:a1:1c:51:f4:77:4d:e2:d6:fe:d2:e9:b5:b5:
d6:a1:6a:23:6a:04:39:e3:b4:ac:81:d0:64:50:25:55:7a:f4:
96:f7:cd:5b:91:27:7d:14:d3:90:6e:8c:c3:a2:a6:2c:78:1c:
81:6e:6d:73:6a:f4:57:d7:a9:46:b8:55:bb:26:44:a0:36:17:
2f:ad:b4:26:b6:77:44:e5:32:19:42:0e:6f:53:5b:f4:f7:1b:
46:46:d1:7a:5e:b1:68:25:94:aa:1c:fd:5b:6c:9f:f5:0b:e1:
df:91:fc:0a:bb:ce:3f:9b:c7:1e:bd:18:08:76:77:a2:25:b6:
05:9e:d0:5a:8b:ab:3c:09:5e:9c:f8:37:5b:4c:bb:21:23:67:
ef:6a:60:78:00:ff:bb:21:33:b5:41:3c:7d:31:30:2f:63:8c:
e1:bf:86:ae:ef:ae:52:80:3e:e8:c1:16:78:71:40:2e:bd:a7:
e5:dc:1f:a0:84:ad:6e:a3:e3:3a:83:f2:5e:d7:bd:b4:24:e2:
54:69:63:c0:b4:b3:61:85:7a:72:43:af:59:31:37:7e:05:4b:
b9:d0:d9:4d:1a:57:77:0e:63:fe:f3:8c:68:2c:18:26:9e:4a:
15:13:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:30 2026 by rpki-client