This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: mW92evKYJ9u4koaNlS8Ll1HkKtg35gqsta0NGmi36b8= Subject key identifier: E6:F2:B3:39:9A:C7:C8:7D:37:47:F3:0C:47:E2:C4:6A:A8:DB:2C:6D Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0CB2 Signing time: Sat 10 Jan 2026 18:04:14 +0000 Manifest this update: Sat 10 Jan 2026 18:04:13 +0000 Manifest next update: Sat 17 Jan 2026 18:04:13 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: hrxsGV2Thr2kTQYjSYsQ5VdYXlBiEIvN2Nnk3Z2X3Io=) 2: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: 3NTPFeEY66/DTbvOuzCF2G8vutj3ESNM2ADes/bFsS4=) 3: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: WJkxwP4ag7yvrhduZoEuahlF8E4MGy6zYRuWwLMuPQo=) 4: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yZZ5GIqY5jMSOPfiLjMhte7hmwyaU/fBGZmXUhYiAw8=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: X7HKLCMYv+5yO0PXDMAF77ngtZuIkMviUoMFPRXsQKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Jan 10 18:04:13 2026 GMT Not After : Jan 17 18:04:13 2026 GMT Subject: CN=6962949e-865a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:ce:e3:75:7f:22:07:4e:65:15:86:a1:63: fe:e9:76:8e:c9:3d:22:2f:e4:f4:8f:02:d1:1b:c6: da:48:fd:a4:fa:cd:3b:09:00:19:98:b9:09:39:d9: 6c:97:4e:9a:ce:44:75:b4:fb:c1:ed:c8:56:dc:d4: 09:05:47:5b:e1:b8:50:8d:4d:f9:c3:59:1e:d0:97: 2a:89:8a:8e:2e:91:77:87:54:c6:e8:13:d8:3d:5a: 15:89:88:b0:1e:3b:f1:33:e0:60:22:a4:e8:0a:1c: 7e:52:2e:95:2e:73:be:e3:74:85:26:e7:65:9a:16: bc:88:18:5a:fe:fc:a3:98:1d:72:de:fd:60:f9:2b: 80:8d:36:5b:3d:8a:4d:6e:43:eb:ff:24:b7:f7:7f: 29:1a:9f:31:7e:5d:02:69:7b:5e:cb:d7:8a:65:8c: ee:ea:f8:89:5f:d9:56:75:eb:a8:d0:e8:c0:bb:a6: 77:06:bf:2e:a5:08:62:8f:77:f9:98:93:49:a9:a2: 59:70:ab:18:1a:58:e3:fb:20:8e:d1:2c:06:17:6b: eb:51:a3:a9:6b:24:5a:9f:0f:b4:46:9c:5f:7d:0c: 3f:2c:be:5b:33:c8:c8:fb:95:32:f4:3a:7c:3e:58: a3:a7:32:7f:ac:78:b3:be:76:85:99:b7:e4:57:e2: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:B3:39:9A:C7:C8:7D:37:47:F3:0C:47:E2:C4:6A:A8:DB:2C:6D X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:75:50:47:1c:4f:c2:5d:12:25:e5:3b:0c:19:8f:23:cb:e5: f2:f6:5a:0a:58:95:ee:99:e3:02:74:f7:b4:8d:7b:64:d1:76: d3:af:a0:ec:76:4e:f7:8b:42:95:17:20:ed:2e:cd:93:67:d0: 99:0e:6a:8b:eb:eb:4d:16:d6:ce:ec:2d:10:77:03:26:c3:76: 99:0b:04:4e:c9:56:64:4e:df:65:b5:27:56:66:13:7e:bb:2f: 8c:6a:ee:71:68:d1:b9:17:3f:c2:ce:0d:9c:34:00:a1:bd:15: 73:73:26:14:60:6a:56:2e:26:eb:59:c8:9e:b3:43:55:ab:59: b6:a9:0e:18:e4:c8:75:b3:32:d4:4f:29:a3:d6:89:e5:0e:86: 04:e6:2e:ae:11:6f:7b:a7:74:50:f0:de:8e:50:9e:ea:b1:88: 0d:17:2e:48:9f:e9:6e:d1:33:c5:7e:2c:c2:ac:04:11:0f:b8: b8:99:37:8d:44:8d:40:25:04:22:b7:6a:c7:6f:df:76:ca:60: f9:f9:48:53:bf:bf:af:76:4c:2e:3a:c1:f2:9a:b6:b9:3a:21: 02:2c:64:c6:2d:c1:02:03:ce:a3:5e:22:83:60:4f:d7:f5:73: 1b:d8:c4:33:d1:bc:6f:48:54:28:4c:95:48:70:ff:19:9a:7f: 1c:f2:0b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjYwMTEwMTgwNDEzWhcNMjYwMTE3MTgwNDEzWjAYMRYwFAYD VQQDDA02OTYyOTQ5ZS04NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6rO43V/IgdOZRWGoWP+6XaOyT0iL+T0jwLRG8baSP2k+s07CQAZmLkJOdls l06azkR1tPvB7chW3NQJBUdb4bhQjU35w1ke0JcqiYqOLpF3h1TG6BPYPVoViYiw HjvxM+BgIqToChx+Ui6VLnO+43SFJudlmha8iBha/vyjmB1y3v1g+SuAjTZbPYpN bkPr/yS3938pGp8xfl0CaXtey9eKZYzu6viJX9lWdeuo0OjAu6Z3Br8upQhij3f5 mJNJqaJZcKsYGljj+yCO0SwGF2vrUaOpayRanw+0RpxffQw/LL5bM8jI+5Uy9Dp8 PlijpzJ/rHizvnaFmbfkV+K/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObyszma x8h9N0fzDEfixGqo2yxtMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIdVBHHE/CXRIl5TsMGY8jy+Xy9loKWJXumeMCdPe0jXtk0XbTr6Ds dk73i0KVFyDtLs2TZ9CZDmqL6+tNFtbO7C0QdwMmw3aZCwROyVZkTt9ltSdWZhN+ uy+Mau5xaNG5Fz/Czg2cNAChvRVzcyYUYGpWLibrWcies0NVq1m2qQ4Y5Mh1szLU Tymj1onlDoYE5i6uEW97p3RQ8N6OUJ7qsYgNFy5In+lu0TPFfizCrAQRD7i4mTeN RI1AJQQit2rHb992ymD5+UhTv7+vdkwuOsHymra5OiECLGTGLcECA86jXiKDYE/X 9XMb2MQz0bxvSFQoTJVIcP8Zmn8c8gvL -----END CERTIFICATE-----Generated at Mon Jan 12 01:49:48 2026 by rpki-client