This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: SnH72YiAGdNs815tSTRn1oiyoB+MzmdCuFgLUc3TKDo= Subject key identifier: E8:15:61:7E:8D:14:B9:3D:E2:CA:30:D4:21:6A:9A:98:AD:FF:5E:09 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C27 Signing time: Sat 10 Jan 2026 18:21:32 +0000 Manifest this update: Sat 10 Jan 2026 18:21:32 +0000 Manifest next update: Sat 17 Jan 2026 18:21:32 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: IH7Js3ljP/5HdAAsc++dWw+NzuRqxMUWY0gaWWXqYd8=) 2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: DWCg5lL0mEzrArVCwICSW9aYx94oeCmf91vXy2qE580=) 3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: OwW86qMJFwbNjXHq+OTRD7Vzx3peXb6YxQieVHGeMos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Jan 10 18:21:32 2026 GMT Not After : Jan 17 18:21:32 2026 GMT Subject: CN=696298ac-012f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:ea:97:6a:0a:64:9b:5f:20:0d:30:7c:de: 0e:75:92:66:57:f8:37:23:ab:b0:29:74:fc:a1:96: 1c:51:0e:c6:54:cf:37:61:e6:1b:b4:1f:61:1c:a8: 14:13:a5:7e:d4:1d:aa:c1:eb:7c:66:f6:67:2d:96: 60:2f:47:b4:ba:1c:69:f0:01:cb:c9:c2:be:42:33: 79:fc:c2:2f:bc:3e:55:6a:52:3e:86:52:b5:1a:aa: 48:c1:67:b9:e2:73:45:b3:f3:81:18:35:5c:0f:42: 38:29:cf:a2:64:bb:e9:b8:0a:be:bb:64:3a:4f:e0: 4b:e8:2b:0e:9a:d5:4f:62:ee:e7:31:55:6b:07:01: f0:c6:5c:80:11:87:22:9b:82:15:c8:5f:25:57:7e: b8:65:5d:7b:e0:25:2f:c9:a6:61:19:c8:8d:41:96: b5:ce:13:1c:50:17:c0:1a:62:cc:b3:d1:02:e7:bf: 28:c5:ba:21:f1:45:93:99:35:28:1b:7d:da:69:9f: a1:0a:1c:a5:d2:48:78:eb:0f:4d:39:2d:ba:f2:c7: 52:89:c5:23:93:e8:ef:10:b8:7b:d1:87:88:d5:d8: 7c:f6:b1:b5:b3:e0:c1:93:b9:9a:18:4a:31:86:84: 03:4a:d9:01:3f:26:17:55:da:f5:64:e0:24:b9:7a: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:15:61:7E:8D:14:B9:3D:E2:CA:30:D4:21:6A:9A:98:AD:FF:5E:09 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0b:29:29:79:e5:fc:1a:69:8e:1c:26:9d:2a:b6:30:97:de: 6f:d0:78:5a:68:19:c1:c1:a8:69:3c:a7:44:77:19:c1:60:d1: ec:06:1c:5f:c9:03:5b:f4:3c:28:1c:cb:45:e2:f3:01:5b:f3: 19:ce:3d:12:89:2a:5c:80:c5:bc:d3:cb:96:d7:d0:91:eb:95: cd:0a:80:c0:8a:df:1d:76:ff:b6:cc:2d:a0:4e:5e:c7:0a:1a: 8a:b3:97:e0:e9:df:0e:45:22:2a:81:bf:68:f5:47:1a:39:fa: 54:75:ea:ef:76:53:c8:d6:99:b8:8c:22:0b:ee:ff:a2:bd:b4: 1c:cc:fb:5e:9a:b4:c5:c5:35:eb:15:7a:13:ef:b6:44:3d:5d: 39:a0:d4:18:91:d8:b4:22:33:ee:a8:bc:a9:22:c5:73:32:20: 4a:7a:3c:31:8d:c4:e7:02:d8:20:91:c6:c1:10:6a:c9:ea:b9: 70:06:64:56:92:9e:56:a9:ec:f1:6a:4f:39:cd:43:df:f0:b3: ff:c1:c0:03:6a:f9:26:c0:6d:0c:c1:25:d0:16:b4:20:6b:9e: ba:5b:ba:1a:ee:d5:01:eb:57:65:79:de:26:c4:8d:86:b4:70: 5a:e9:9d:4c:7b:e8:60:ab:2e:66:01:e3:0b:e1:fd:a0:2d:0d: dd:d7:7b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjYwMTEwMTgyMTMyWhcNMjYwMTE3MTgyMTMyWjAYMRYwFAYD VQQDDA02OTYyOThhYy0wMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUrql2oKZJtfIA0wfN4OdZJmV/g3I6uwKXT8oZYcUQ7GVM83YeYbtB9hHKgU E6V+1B2qwet8ZvZnLZZgL0e0uhxp8AHLycK+QjN5/MIvvD5ValI+hlK1GqpIwWe5 4nNFs/OBGDVcD0I4Kc+iZLvpuAq+u2Q6T+BL6CsOmtVPYu7nMVVrBwHwxlyAEYci m4IVyF8lV364ZV174CUvyaZhGciNQZa1zhMcUBfAGmLMs9EC578oxboh8UWTmTUo G33aaZ+hChyl0kh46w9NOS268sdSicUjk+jvELh70YeI1dh89rG1s+DBk7maGEox hoQDStkBPyYXVdr1ZOAkuXoNKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgVYX6N FLk94sow1CFqmpit/14JMB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCCykpeeX8GmmOHCadKrYwl95v0HhaaBnBwahpPKdEdxnBYNHsBhxf yQNb9DwoHMtF4vMBW/MZzj0SiSpcgMW808uW19CR65XNCoDAit8ddv+2zC2gTl7H ChqKs5fg6d8ORSIqgb9o9UcaOfpUdervdlPI1pm4jCIL7v+ivbQczPtemrTFxTXr FXoT77ZEPV05oNQYkdi0IjPuqLypIsVzMiBKejwxjcTnAtggkcbBEGrJ6rlwBmRW kp5Wqezxak85zUPf8LP/wcADavkmwG0MwSXQFrQga566W7oa7tUB61dled4mxI2G tHBa6Z1Me+hgqy5mAeML4f2gLQ3d13uj -----END CERTIFICATE-----Generated at Sun Jan 11 14:41:02 2026 by rpki-client