This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: mytEeDVNNcwySuqGtvRXh3Z4C0UD2gIuP9gdpwZd2V0= Subject key identifier: F3:AD:3F:9D:70:8B:C7:62:D3:BA:8D:17:A4:78:FF:68:C3:72:60:13 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 10 Signing time: Wed 17 Dec 2025 07:32:59 +0000 Manifest this update: Wed 17 Dec 2025 07:32:59 +0000 Manifest next update: Wed 24 Dec 2025 07:32:59 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: 8na+fUHe9uwbWVHLWtAW1AcGN6P4byVjI9oVoYiSnmg=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: Xxcnzz4UUYNFed71QsmRkeBUQBijpW8VtIcJqXdOAKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Dec 17 07:32:59 2025 GMT Not After : Dec 24 07:32:59 2025 GMT Subject: CN=69425cab-9863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:2c:4d:8a:66:49:2e:82:2a:c6:3f:46:f2: 87:42:09:98:99:a5:cf:ab:a4:d8:9b:67:45:95:a4: df:0e:34:d3:19:0a:fb:0c:9f:2e:4a:f9:a3:a8:7c: b1:1c:48:e6:e5:91:9e:74:5e:50:f1:5d:da:1c:c5: 5a:45:c7:dd:b1:2b:49:01:9b:0d:c6:73:41:c9:70: 8a:63:c8:c3:e9:6f:58:19:a2:25:e5:5f:67:6e:f8: 25:99:59:af:21:67:24:8f:b1:98:74:a9:cf:2a:ad: 52:a4:c3:17:7b:1b:3a:91:48:93:38:df:c7:e2:b7: 6c:99:d9:a0:99:6e:b6:6d:c4:f0:ae:87:a9:74:64: 86:84:f6:8c:0b:32:3f:c7:df:f4:1f:37:58:a2:e3: 76:5e:b0:58:9f:2e:ad:fc:b2:0b:92:12:e7:4c:13: df:17:c0:0b:85:62:21:9f:fd:6f:e1:7a:82:f1:1a: ea:8a:35:b2:01:fa:50:7e:29:e0:49:39:27:9e:e5: 8e:92:5e:d5:92:6c:8b:bb:c6:00:3e:0f:7f:97:c8: 3b:ec:e6:50:5b:f4:85:ab:79:7a:00:16:fe:c6:63: 15:c7:22:08:d7:e7:e6:7d:13:f2:dc:7d:7c:4a:4d: f2:8a:bc:3b:b8:be:38:74:68:92:98:57:90:ac:3c: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:3F:9D:70:8B:C7:62:D3:BA:8D:17:A4:78:FF:68:C3:72:60:13 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:82:56:60:5b:61:d6:6b:4b:a5:d6:c1:ec:14:e3:d4:9b:c0: 46:dd:fc:0d:9c:67:b5:29:0c:22:78:3d:7d:fb:de:22:14:9b: bd:8b:c7:39:23:ce:3a:ce:59:f6:3c:c3:2e:a1:11:e3:58:ed: 8d:dd:21:98:52:ed:38:99:1c:42:ef:e5:e0:ee:b7:4e:86:3e: bc:a2:c1:79:8f:68:42:f1:de:6c:80:11:ed:25:e9:77:47:7c: 99:80:c3:4f:64:0c:78:4a:dc:e5:79:28:a5:2f:61:17:92:dc: 68:ed:d2:a6:2f:29:1e:fd:ac:51:95:c2:a2:4a:ed:62:15:aa: 78:47:1b:c4:0d:48:ea:2c:5e:60:01:bd:59:20:c1:4b:1d:15: 8c:8e:62:44:bf:51:d6:ee:1c:e1:13:d2:cd:a2:9a:ce:3a:d5: cb:b2:35:8c:ab:5e:3e:fa:94:7d:e6:d6:da:24:7e:b2:79:07: d1:bf:50:93:d9:2c:7a:f6:f7:b9:fe:f4:61:98:64:e4:31:74: 61:45:1b:63:08:6d:61:23:db:34:61:f4:13:5d:6a:49:cf:b1: 41:9c:76:d9:32:80:1d:ae:86:02:ff:dc:97:38:96:37:2b:92: d0:7c:77:92:97:1f:7b:d6:3b:c6:1e:4b:1c:15:48:6f:d3:22: 3c:72:3b:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNTEyMTcwNzMyNTlaFw0yNTEyMjQwNzMyNTlaMBgxFjAUBgNV BAMMDTY5NDI1Y2FiLTk4NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvHSxNimZJLoIqxj9G8odCCZiZpc+rpNibZ0WVpN8ONNMZCvsMny5K+aOofLEc SOblkZ50XlDxXdocxVpFx92xK0kBmw3Gc0HJcIpjyMPpb1gZoiXlX2du+CWZWa8h ZySPsZh0qc8qrVKkwxd7GzqRSJM438fit2yZ2aCZbrZtxPCuh6l0ZIaE9owLMj/H 3/QfN1ii43ZesFifLq38sguSEudME98XwAuFYiGf/W/heoLxGuqKNbIB+lB+KeBJ OSee5Y6SXtWSbIu7xgA+D3+XyDvs5lBb9IWreXoAFv7GYxXHIgjX5+Z9E/LcfXxK TfKKvDu4vjh0aJKYV5CsPIYJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU860/nXCL x2LTuo0XpHj/aMNyYBMwHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0UzOUQ4RTBDQzhFQzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNm T1N0WWF6QW1oQy0wOGx4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASCVmBbYdZrS6XWwewU49SbwEbd/A2cZ7UpDCJ4PX373iIUm72Lxzkj zjrOWfY8wy6hEeNY7Y3dIZhS7TiZHELv5eDut06GPryiwXmPaELx3myAEe0l6XdH fJmAw09kDHhK3OV5KKUvYReS3Gjt0qYvKR79rFGVwqJK7WIVqnhHG8QNSOosXmAB vVkgwUsdFYyOYkS/UdbuHOET0s2ims461cuyNYyrXj76lH3m1tokfrJ5B9G/UJPZ LHr297n+9GGYZOQxdGFFG2MIbWEj2zRh9BNdaknPsUGcdtkygB2uhgL/3Jc4ljcr ktB8d5KXH3vWO8YeSxwVSG/TIjxyO3Q= -----END CERTIFICATE-----Generated at Wed Dec 17 12:52:04 2025 by rpki-client