This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json) Hash identifier: q+qBpX4qXadPg3ohB3ak+ybkiKRbi9aHE+TbZYmY/V8= Subject key identifier: 71:2D:8F:9A:16:8A:7B:0C:A5:A1:B1:9D:3E:A1:CA:48:DD:CC:5C:FC Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Certificate serial: 2488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft Manifest number: 2472 Signing time: Thu 18 Dec 2025 15:43:15 +0000 Manifest this update: Thu 18 Dec 2025 15:43:14 +0000 Manifest next update: Thu 25 Dec 2025 15:43:14 +0000 Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: xEwURZGjJRJO5uNgBjrltFAR/1gUlEjEDzLTXvyx+3w=) 2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=) 3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=) 4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9352 (0x2488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028 Validity Not Before: Dec 18 15:43:14 2025 GMT Not After : Dec 25 15:43:14 2025 GMT Subject: CN=69442113-7b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:f5:2f:8c:1c:96:4d:6e:a9:e8:8d:d1:90: 10:d3:69:ae:a9:b6:b7:ee:00:a1:66:b8:65:17:08: 4f:98:84:3c:41:d6:7c:fb:25:e4:d8:77:2e:42:84: 94:49:1b:bb:8d:49:4e:cf:b0:29:bc:33:61:57:38: af:d4:73:59:b4:32:a5:5a:c5:99:00:73:24:86:d1: 02:75:c3:3e:3f:5c:db:33:c1:20:76:af:35:dc:92: 79:6c:0f:0c:9f:cb:42:54:07:41:73:96:b4:0d:99: 74:d6:bf:4e:74:f7:aa:63:6b:58:95:86:53:5b:a2: 20:5d:ee:49:48:e8:4d:e0:13:09:75:18:5b:ee:7e: 7a:e4:a2:e3:15:59:32:8b:e5:c3:cf:f4:4c:1e:86: ac:f5:70:7d:dd:fc:0e:ae:42:96:be:7c:7c:0b:9b: 22:3f:a9:49:41:fd:6d:b6:cb:3e:20:ad:ac:1d:ac: c8:00:25:bb:3a:1d:ad:7f:2f:4e:96:2c:0e:96:5a: 19:9e:da:28:74:d0:b3:ea:6a:f0:9f:10:bb:92:79: 7e:d0:f9:58:f3:26:a1:43:40:5c:62:37:6d:38:85: f8:e9:bd:59:d5:1e:ec:1d:f0:4d:3a:86:00:a2:c6: 89:42:76:32:f4:b0:5f:b4:e4:6f:46:20:0e:b9:01: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:8F:9A:16:8A:7B:0C:A5:A1:B1:9D:3E:A1:CA:48:DD:CC:5C:FC X509v3 Authority Key Identifier: keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:d3:73:b5:0e:77:64:13:f1:43:0e:2c:08:ce:d2:a5:c0: ec:44:9f:ea:65:0a:0f:83:e8:f3:88:5e:66:0b:42:f3:60:c2: 12:7a:9b:71:b9:e1:10:81:20:cb:ad:a2:6d:2a:80:3d:1b:6d: 2f:05:ea:79:8b:20:1b:03:40:8b:71:ea:38:fc:b7:75:2e:1f: 5b:17:f1:6b:1e:17:33:e2:fe:1c:b3:8b:d7:00:c5:59:19:a1: 19:6e:b4:3f:15:15:48:09:51:8e:ea:13:a2:93:b7:fb:77:d3: 04:58:9e:f8:09:a9:73:c9:ec:b7:fa:c7:9c:69:af:50:4e:6f: c2:e7:7e:a2:08:4d:6b:de:78:5e:6b:06:b3:fe:7e:d1:47:4c: 2a:02:5f:3e:bd:62:5b:21:15:d9:19:f0:e7:43:f7:8c:09:10: 39:7f:ae:8f:8a:9d:1e:51:ae:e1:5c:e3:ae:d6:24:29:44:f0: 5f:ac:7c:a3:d5:a2:cc:70:af:a5:6c:f4:8b:95:da:a0:31:54: 1c:2f:c9:62:1f:65:f5:2c:6c:11:fe:25:19:7e:f0:b5:c6:6f: a7:d8:d5:07:60:a2:23:84:33:e2:6d:88:f5:d1:52:37:7d:6d: 29:7f:2e:79:7c:6a:06:25:dd:1c:c5:90:fc:b1:27:36:0f:a2: f5:b6:b4:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyQjMxMTAvBgNVBAUTKDNBNUMwODEzQzBGRUQwQTgzQjNERDAxQjdBNUFFMUEx MzA4MjcwMjgwHhcNMjUxMjE4MTU0MzE0WhcNMjUxMjI1MTU0MzE0WjAYMRYwFAYD VQQDDA02OTQ0MjExMy03YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nL1L4wclk1uqeiN0ZAQ02muqba37gChZrhlFwhPmIQ8QdZ8+yXk2HcuQoSU SRu7jUlOz7ApvDNhVziv1HNZtDKlWsWZAHMkhtECdcM+P1zbM8Egdq813JJ5bA8M n8tCVAdBc5a0DZl01r9OdPeqY2tYlYZTW6IgXe5JSOhN4BMJdRhb7n565KLjFVky i+XDz/RMHoas9XB93fwOrkKWvnx8C5siP6lJQf1ttss+IK2sHazIACW7Oh2tfy9O liwOlloZntoodNCz6mrwnxC7knl+0PlY8yahQ0BcYjdtOIX46b1Z1R7sHfBNOoYA osaJQnYy9LBftORvRiAOuQFNiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEtj5oW insMpaGxnT6hykjdzFz8MB8GA1UdIwQYMBaAFDpcCBPA/tCoOz3QG3pa4aEwgnAo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTJCMy84OTE3RkIyQTVE MEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBLZzdQZEFiZWxyaG9UQ0Nj Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09sd0lFOEQtMEtnN1BkQWJlbHJob1RDQ2NDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTJCMy84OTE3RkIyQTVEMEUxMUU1QjNCRUFENTdDNEY5QUUwMi9PbHdJRThELTBL ZzdQZEFiZWxyaG9UQ0NjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlStNztQ53ZBPxQw4sCM7SpcDsRJ/qZQoPg+jziF5mC0LzYMISeptx ueEQgSDLraJtKoA9G20vBep5iyAbA0CLceo4/Ld1Lh9bF/FrHhcz4v4cs4vXAMVZ GaEZbrQ/FRVICVGO6hOik7f7d9MEWJ74Calzyey3+secaa9QTm/C536iCE1r3nhe awaz/n7RR0wqAl8+vWJbIRXZGfDnQ/eMCRA5f66Pip0eUa7hXOOu1iQpRPBfrHyj 1aLMcK+lbPSLldqgMVQcL8liH2X1LGwR/iUZfvC1xm+n2NUHYKIjhDPibYj10VI3 fW0pfy55fGoGJd0cxZD8sSc2D6L1trRc -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:21 2025 by rpki-client