This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json) Hash identifier: SXVnrqWg2keG1RZgp02kwPbJ9/i5TJqZZSYVDjLXSjE= Subject key identifier: C0:9F:CF:02:49:E4:65:F4:D3:76:12:FF:02:02:47:00:01:62:55:0D Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft Manifest number: 06 Signing time: Fri 19 Dec 2025 07:00:40 +0000 Manifest this update: Fri 19 Dec 2025 07:00:39 +0000 Manifest next update: Fri 26 Dec 2025 07:00:39 +0000 Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: +7eV1jCAZdTuntDSDzisWQdVMBHgpFs6qlwSrJQW/94=) 2: 83739562D66111F0B67B852D0CB43E13.roa (hash: MZXbiv4dwvYFL1iWN0aaMlfz8+9JPN0M6rbYfr0By/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Validity Not Before: Dec 19 07:00:39 2025 GMT Not After : Dec 26 07:00:39 2025 GMT Subject: CN=6944f817-1a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:d5:e5:aa:a8:b4:0b:30:4c:01:4e:eb:8b: 94:90:9c:56:08:ac:12:51:06:09:c8:76:f8:81:e7: 85:80:f2:b8:4d:ad:7a:9d:cd:9d:94:5f:7b:ac:87: fc:97:d6:42:15:08:1c:2d:df:52:39:c8:21:ba:24: a3:03:18:ff:a9:ec:7b:9e:4f:ac:67:39:d3:b6:82: 3b:7f:10:21:1b:78:66:cd:39:9f:4f:64:6c:35:ff: cc:04:36:53:a2:9e:79:81:d4:ad:43:3d:d3:be:6e: b4:24:28:dd:5c:a9:93:ce:ce:5d:88:b6:3d:9d:a3: d6:e1:b3:6e:7a:34:6a:c0:24:08:82:9b:24:82:c7: 02:ec:41:3d:7f:88:25:48:53:7d:47:5d:ef:93:1a: 77:3f:fa:8b:4e:87:26:b5:d7:9d:8b:a2:16:03:84: 6a:d6:3d:ba:6f:d3:cf:e1:5b:dc:44:00:10:63:02: ee:b5:aa:b0:ed:be:1a:74:7a:05:31:40:eb:2d:e4: a2:83:fd:c8:46:4e:01:e6:87:4f:82:87:61:d5:c4: df:66:c7:c9:2d:f4:66:f0:3d:8d:98:a6:11:b6:c5: 98:6c:48:d1:f6:b5:5e:92:13:d7:04:63:78:f9:43: 85:01:6f:74:8d:0b:eb:24:75:53:b1:49:e7:02:7d: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9F:CF:02:49:E4:65:F4:D3:76:12:FF:02:02:47:00:01:62:55:0D X509v3 Authority Key Identifier: keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:1c:da:ef:5d:56:d1:43:c9:1b:70:02:cd:cc:56:ff:20: 01:9f:b8:14:b4:69:f5:82:c1:a4:51:cd:27:43:25:8d:e8:ee: d7:28:d8:dc:d0:55:e2:9c:47:76:8c:e9:8f:1a:84:9b:ed:b3: 8f:1a:bf:ba:2d:b3:0c:a6:04:f4:36:97:c2:2e:46:e6:2d:69: 79:33:ec:1a:e9:62:74:ed:6b:43:da:da:12:9a:66:63:ac:23: 8c:fa:57:2f:04:26:40:45:a6:61:b4:6b:29:9d:1c:6a:a9:d3: 94:a2:25:ea:ed:c0:fb:b6:c2:5c:f3:a3:d4:7f:67:04:5e:8c: e0:f2:3d:be:9c:2a:b6:07:b1:e5:c9:65:ee:b5:41:1b:18:46: 13:b8:43:ea:36:38:62:04:4a:95:a5:d1:fd:ea:45:20:58:cb: 4b:11:46:96:03:29:99:92:fc:39:b4:c8:0c:c2:24:d4:7e:96: 8f:8d:d2:0b:e9:68:7a:8f:03:eb:43:65:00:7a:6d:42:7a:00: 2c:61:49:10:93:fd:d3:6e:13:6a:dd:b2:02:46:03:8c:b3:65: 4c:f7:a6:ba:8c:3c:94:38:a7:73:66:7b:73:83:ab:40:3e:a4: 96:98:aa:7a:dd:72:45:72:7e:88:ab:7f:5e:58:9c:5f:5a:b9: a2:ee:6b:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkJGMzExMC8GA1UEBRMoM0E1RkI1RTE3MzhFRTA5NEM1QjkwOEIzNzkxQzY5QzA3 NzdEQUUxRTAeFw0yNTEyMTkwNzAwMzlaFw0yNTEyMjYwNzAwMzlaMBgxFjAUBgNV BAMMDTY5NDRmODE3LTFhNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmF9Xlqqi0CzBMAU7ri5SQnFYIrBJRBgnIdviB54WA8rhNrXqdzZ2UX3ush/yX 1kIVCBwt31I5yCG6JKMDGP+p7HueT6xnOdO2gjt/ECEbeGbNOZ9PZGw1/8wENlOi nnmB1K1DPdO+brQkKN1cqZPOzl2Itj2do9bhs256NGrAJAiCmySCxwLsQT1/iCVI U31HXe+TGnc/+otOhya1152LohYDhGrWPbpv08/hW9xEABBjAu61qrDtvhp0egUx QOst5KKD/chGTgHmh0+Ch2HVxN9mx8kt9GbwPY2YphG2xZhsSNH2tV6SE9cEY3j5 Q4UBb3SNC+skdVOxSecCfebxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwJ/PAknk ZfTTdhL/AgJHAAFiVQ0wHwYDVR0jBBgwFoAUOl+14XOO4JTFuQizeRxpwHd9rh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0U1MEM5OUI0RDY2 MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpURnVRaXplUnhwd0hkOXJo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT2wtMTRYT080SlRGdVFpemVSeHB3SGQ5cmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG QkYzL0U1MEM5OUI0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpU RnVRaXplUnhwd0hkOXJoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH++HNrvXVbRQ8kbcALNzFb/IAGfuBS0afWCwaRRzSdDJY3o7tco2NzQ VeKcR3aM6Y8ahJvts48av7otswymBPQ2l8IuRuYtaXkz7BrpYnTta0Pa2hKaZmOs I4z6Vy8EJkBFpmG0aymdHGqp05SiJertwPu2wlzzo9R/ZwRejODyPb6cKrYHseXJ Ze61QRsYRhO4Q+o2OGIESpWl0f3qRSBYy0sRRpYDKZmS/Dm0yAzCJNR+lo+N0gvp aHqPA+tDZQB6bUJ6ACxhSRCT/dNuE2rdsgJGA4yzZUz3prqMPJQ4p3Nme3ODq0A+ pJaYqnrdckVyfoirf15YnF9auaLuay4= -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:39 2025 by rpki-client