This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: TGsCpb2om8/KiPAg1ZkupVE32Lrgq1ai0p/Zmzcy+JU= Subject key identifier: 29:49:CD:EC:13:AE:32:1F:A5:07:C1:D9:74:F3:91:B4:7D:E9:3B:2E Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 022F Signing time: Fri 09 Jan 2026 01:20:03 +0000 Manifest this update: Fri 09 Jan 2026 01:20:03 +0000 Manifest next update: Fri 16 Jan 2026 01:20:03 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: 2haUh9TDRKsA7/8zN2Wog+MsEDKlZC1G5g+NGUhSEI4=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: 4yRhL9kVMGnZbWA+LNDehvbTaP/J/shZ+9q9XJ0iuQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 01:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Jan 9 01:20:03 2026 GMT Not After : Jan 16 01:20:03 2026 GMT Subject: CN=696057c3-0f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:b3:90:43:8e:61:5a:d0:01:86:dd:7b:14: 42:00:1f:ba:cd:7e:70:6b:e2:45:0d:e5:96:35:53: 69:ec:94:af:55:ab:64:d9:1c:42:33:4d:9a:ab:44: f8:4d:24:1c:3e:89:aa:13:9e:e9:77:aa:1f:6d:08: ce:32:db:81:04:4f:d6:8e:bb:53:9d:37:3a:41:2c: fc:1e:1c:39:31:19:8b:ac:39:b1:a7:45:87:29:99: 08:96:28:59:7a:39:33:98:e6:c6:44:5d:24:5f:70: 54:c7:e6:a6:ef:05:87:49:b8:05:74:f6:90:6c:bd: ad:69:ee:f8:c3:61:d2:52:a0:9c:15:d5:5a:16:15: ef:b7:f1:81:a9:8f:61:3e:c9:0a:62:70:85:cd:b1: b0:d2:fb:a2:14:72:45:0a:17:67:f2:1d:6b:3f:02: f2:b2:34:eb:77:b0:25:70:0e:04:de:85:05:cf:7e: 47:3f:30:7b:bd:92:b4:7f:da:cd:8b:39:39:6e:82: 66:7d:59:9c:d1:1c:67:0b:b8:d7:31:22:64:46:21: ae:a7:0d:ba:48:48:45:24:f1:ba:74:7b:4e:bd:ee: d9:1d:cb:f6:84:13:b3:09:4f:a3:c4:1e:be:26:ab: 11:76:fe:d7:e8:37:62:ee:4f:6c:28:d9:56:0a:2d: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:CD:EC:13:AE:32:1F:A5:07:C1:D9:74:F3:91:B4:7D:E9:3B:2E X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:9a:c4:5b:b5:70:bf:be:22:35:f2:04:e4:4a:a9:c7:55: 18:06:4e:29:be:5c:a5:c2:d3:91:a8:16:cd:79:0f:52:21:26: 28:0a:40:24:a5:1d:89:d0:94:c7:11:c7:8d:7b:a7:22:64:11: e1:4f:75:b7:b9:c5:84:7a:20:45:24:7a:25:5f:aa:26:36:6b: 93:d4:1b:ec:82:8d:2d:7a:12:84:22:9a:69:30:86:d4:de:99: d1:a1:54:71:f5:a6:e3:65:a7:88:c1:96:81:25:d5:05:b2:49: 87:26:1d:75:be:25:54:8b:9a:3d:47:97:ba:97:82:a6:8f:f2: 7e:68:9b:60:9d:28:a5:be:9e:32:79:96:5c:fa:cd:ef:b2:e3: d7:3c:d7:91:33:6f:09:02:a9:ff:1d:6b:9e:2a:3f:dc:d4:ca: 2e:36:19:5b:15:13:69:4e:b7:ac:ac:75:2a:42:67:99:50:c1: 6e:25:f7:2f:23:39:cd:a3:5b:09:24:fe:fd:5b:b2:36:dd:f9: 40:aa:5b:e7:38:61:a2:5c:53:cc:81:05:b1:f8:58:6a:9b:87: 30:de:60:0b:1a:e1:da:1b:12:33:a9:e5:4e:c4:bf:91:b0:f0: be:a4:83:c5:91:af:2b:d6:87:94:6a:e0:67:b1:16:ef:96:05: 51:cb:37:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwMTA5MDEyMDAzWhcNMjYwMTE2MDEyMDAzWjAYMRYwFAYD VQQDDA02OTYwNTdjMy0wZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN+zkEOOYVrQAYbdexRCAB+6zX5wa+JFDeWWNVNp7JSvVatk2RxCM02aq0T4 TSQcPomqE57pd6ofbQjOMtuBBE/WjrtTnTc6QSz8Hhw5MRmLrDmxp0WHKZkIlihZ ejkzmObGRF0kX3BUx+am7wWHSbgFdPaQbL2tae74w2HSUqCcFdVaFhXvt/GBqY9h PskKYnCFzbGw0vuiFHJFChdn8h1rPwLysjTrd7AlcA4E3oUFz35HPzB7vZK0f9rN izk5boJmfVmc0RxnC7jXMSJkRiGupw26SEhFJPG6dHtOve7ZHcv2hBOzCU+jxB6+ JqsRdv7X6Ddi7k9sKNlWCi3d0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClJzewT rjIfpQfB2XTzkbR96TsuMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqZrEW7Vwv74iNfIE5Eqpx1UYBk4pvlylwtORqBbNeQ9SISYoCkAk pR2J0JTHEceNe6ciZBHhT3W3ucWEeiBFJHolX6omNmuT1Bvsgo0tehKEIpppMIbU 3pnRoVRx9abjZaeIwZaBJdUFskmHJh11viVUi5o9R5e6l4Kmj/J+aJtgnSilvp4y eZZc+s3vsuPXPNeRM28JAqn/HWueKj/c1MouNhlbFRNpTresrHUqQmeZUMFuJfcv IznNo1sJJP79W7I23flAqlvnOGGiXFPMgQWx+Fhqm4cw3mALGuHaGxIzqeVOxL+R sPC+pIPFka8r1oeUauBnsRbvlgVRyzdC -----END CERTIFICATE-----Generated at Fri Jan 9 16:00:33 2026 by rpki-client