This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: BRWOPMqgBIxLFXBZyhyunEn21/ahjnwUXH0caEeLogc= Subject key identifier: 0D:4C:9C:AD:F6:4C:AD:5A:52:9F:CA:7E:B9:60:B4:5E:97:2A:68:22 Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: A8 Signing time: Sun 25 Jan 2026 05:24:59 +0000 Manifest this update: Sun 25 Jan 2026 05:24:59 +0000 Manifest next update: Sun 01 Feb 2026 05:24:59 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: 8k6iWo+RwD7U40+Fjjdye7E/4y0tptgvwT1e4qHcnFQ=) 2: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: L/7VzM2fbo0IdE808LBeTzf3z0geWQ0SpeUJCZmWPBg=) 3: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (hash: hzaK0MTBJLVrmr0hWnuGmH3SdcFclIxCzlQUZOQabQ8=) 4: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: p8161Irka1RhOlKGL72R+iegNNjEoBL5dnyvjeUTVQY=) 5: 5460E9C8FB2E11EFB488A95EC4F9AE02.roa (hash: bkhjgOMD/IEHS+ly/VrsRugL9cN6Yu5sgUx5f40TuYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Jan 25 05:24:59 2026 GMT Not After : Feb 1 05:24:59 2026 GMT Subject: CN=6975a92b-c258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:b6:f9:83:f3:3c:37:3a:64:59:2b:e7:46: d3:6d:80:56:15:0d:20:8b:d5:17:54:da:63:02:53: 7b:c7:12:d5:b8:c4:2d:82:e4:b7:22:18:29:33:36: c6:da:e9:bf:85:10:e3:a2:64:88:e4:0f:d6:ff:94: 27:88:d8:53:7f:3d:32:a3:a9:4b:63:40:10:01:28: d6:be:8c:9f:8d:8b:57:3c:a3:ba:e8:d8:fe:75:24: 17:0a:31:19:c6:be:b9:e1:c5:bf:31:50:71:77:65: e9:b9:e3:7e:ea:b9:6e:dc:b1:b3:81:22:27:0b:12: 1f:88:ff:a0:b3:d2:ca:e9:6b:e4:21:0d:b6:66:2e: 37:96:4c:0a:73:47:6c:55:9b:50:6d:3c:da:4a:f8: 8c:54:e4:fb:f0:66:50:ad:f2:1f:bd:2c:c5:77:0e: 04:40:c8:20:4b:56:2e:15:21:35:38:40:54:8d:c7: c3:71:d7:6d:f5:9f:d8:7b:e3:48:da:07:14:e5:d1: 57:98:bd:c6:8a:5a:7a:1a:c4:80:ce:5d:e4:33:b6: c1:38:dc:28:b1:19:c5:35:46:38:17:fa:91:b8:0d: 08:12:c8:64:b8:c5:ba:b2:9a:da:7e:61:d0:42:e2: 93:b5:cf:0e:f4:d6:61:e5:e6:9a:e2:55:90:61:79: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:9C:AD:F6:4C:AD:5A:52:9F:CA:7E:B9:60:B4:5E:97:2A:68:22 X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:2c:a2:c8:71:66:6d:ef:5a:43:4f:fe:e1:d9:f7:80:0c: 45:70:45:63:fb:85:c5:61:0c:28:1f:08:04:aa:48:c1:21:5b: 52:da:f8:6e:24:c7:b1:50:af:ae:10:7e:0f:4f:cf:49:6c:23: 32:51:a8:2e:d9:05:ec:de:94:32:2b:cf:79:cc:dd:7b:3f:6a: 5f:17:8f:d3:ed:9e:21:61:49:70:a1:47:29:32:82:c9:0a:bb: 07:c8:c6:f5:c9:96:d2:98:b8:4c:2e:22:ee:fa:9e:d4:08:8c: 0e:27:3c:00:3e:ce:32:e6:93:ca:b8:dd:b5:0a:4d:96:93:75: 36:6e:ed:e5:d7:f5:ed:75:e2:30:a7:c0:ed:fe:f8:2f:3b:96: 6f:d4:54:82:26:14:6d:c3:5c:e3:e7:6a:94:95:c2:dc:dd:ee: 33:94:85:cb:3c:01:15:f7:38:90:74:49:fa:61:42:3d:5f:be: 8f:9a:7d:3e:a9:87:25:50:ba:b6:1f:21:86:52:48:81:d1:0f: d6:0d:20:16:b0:3e:ba:d9:d6:ef:90:69:43:ec:50:16:24:43: d5:aa:b8:2e:1c:de:24:a5:ca:d2:32:77:24:4b:09:47:77:c3: de:03:04:ce:2a:68:0e:23:ef:12:d4:30:5c:3b:ac:fc:00:17: a8:f6:63:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5 MjU0QTY5MUMwHhcNMjYwMTI1MDUyNDU5WhcNMjYwMjAxMDUyNDU5WjAYMRYwFAYD VQQDDA02OTc1YTkyYi1jMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDG2+YPzPDc6ZFkr50bTbYBWFQ0gi9UXVNpjAlN7xxLVuMQtguS3IhgpMzbG 2um/hRDjomSI5A/W/5QniNhTfz0yo6lLY0AQASjWvoyfjYtXPKO66Nj+dSQXCjEZ xr654cW/MVBxd2XpueN+6rlu3LGzgSInCxIfiP+gs9LK6WvkIQ22Zi43lkwKc0ds VZtQbTzaSviMVOT78GZQrfIfvSzFdw4EQMggS1YuFSE1OEBUjcfDcddt9Z/Ye+NI 2gcU5dFXmL3Gilp6GsSAzl3kM7bBONwosRnFNUY4F/qRuA0IEshkuMW6sprafmHQ QuKTtc8O9NZh5eaa4lWQYXnXZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1MnK32 TK1aUp/KfrlgtF6XKmgiMB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVy a0ZSNG96enZKM21TVkthUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4tCyiyHFmbe9aQ0/+4dn3gAxFcEVj+4XFYQwoHwgEqkjBIVtS2vhu JMexUK+uEH4PT89JbCMyUagu2QXs3pQyK895zN17P2pfF4/T7Z4hYUlwoUcpMoLJ CrsHyMb1yZbSmLhMLiLu+p7UCIwOJzwAPs4y5pPKuN21Ck2Wk3U2bu3l1/XtdeIw p8Dt/vgvO5Zv1FSCJhRtw1zj52qUlcLc3e4zlIXLPAEV9ziQdEn6YUI9X76Pmn0+ qYclULq2HyGGUkiB0Q/WDSAWsD662dbvkGlD7FAWJEPVqrguHN4kpcrSMnckSwlH d8PeAwTOKmgOI+8S1DBcO6z8ABeo9mMk -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:07 2026 by rpki-client