This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: HE8xtzuA3vcX8wO+8LlwvXQrtgHgvBlFPVstCt0+uuE= Subject key identifier: 8B:29:72:18:5A:6F:01:15:0E:96:20:57:31:BA:94:10:41:94:0C:5C Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1DAE Signing time: Sat 24 Jan 2026 15:55:14 +0000 Manifest this update: Sat 24 Jan 2026 15:55:14 +0000 Manifest next update: Sat 31 Jan 2026 15:55:14 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: VIhWqaudQVV4OKDE2c9W19vqdY7oJXASYFWrTVdiGr0=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: GTYplA3+/oqNyhCsSIMGIT62xAe/H3EJbhvf29oZLZM=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: KcmqJfHxUpDuc0ECvYHJhDG4s7ZruYPj6RgZ3nxOtpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7613 (0x1dbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jan 24 15:55:14 2026 GMT Not After : Jan 31 15:55:14 2026 GMT Subject: CN=6974eb62-ac9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:00:d7:ff:04:bf:dc:2a:3a:72:6a:48:be: 5c:e9:58:29:c9:bd:2d:df:58:c7:fe:2b:bc:9e:89: 92:e5:bc:ec:fc:12:6a:2b:56:99:b5:61:06:26:41: da:bd:01:93:92:9e:03:ac:31:b6:06:cd:74:77:7a: 16:01:8c:2f:95:03:97:ef:bb:75:54:cb:dc:a4:8b: 87:3d:1f:21:63:e0:9b:37:8f:22:05:6c:f3:c2:2d: 44:88:6e:f5:db:4d:d1:02:ff:92:71:24:ca:6b:9d: 1c:48:50:10:fa:b7:78:af:2c:9d:6f:b6:00:74:19: d9:27:33:e1:47:b7:ec:12:c5:94:f7:1e:01:e1:ee: 4b:a6:e3:77:0f:8a:0c:ad:d5:8d:9d:9f:f3:45:dc: e2:ac:47:83:db:a6:c7:6d:67:ed:a0:05:6e:5e:d6: c5:01:67:8e:58:48:30:5c:68:9b:3b:e0:ab:84:fd: 64:c4:91:5d:bc:53:2d:b6:01:a6:a9:33:6d:de:89: b5:fb:41:b3:d8:da:4f:f6:29:d5:db:ba:d1:d2:9b: 99:97:cd:12:76:3e:a3:00:ac:20:e8:0e:ec:f5:23: 43:99:c6:d4:96:31:04:22:dc:31:93:9c:68:08:de: bd:48:a7:2e:03:d2:42:3a:2a:30:d6:8b:46:bc:e4: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:29:72:18:5A:6F:01:15:0E:96:20:57:31:BA:94:10:41:94:0C:5C X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:48:c8:de:2c:b3:0c:73:ac:d7:f2:85:e3:27:80:0a:dc:c6: ce:3c:d4:b3:ec:19:75:86:44:a3:9b:71:3a:08:69:0d:d5:1f: c4:c6:fd:84:0a:66:c9:17:c7:9d:0b:c2:31:e7:c6:e5:e5:48: 8f:b3:74:5d:a2:13:dc:51:47:dc:ba:ad:5d:68:28:f7:35:c4: 44:ff:ba:03:be:73:84:1b:7c:25:37:78:4f:db:a9:ca:35:6a: 0f:6b:28:63:6b:eb:0d:7a:e3:f5:0e:60:96:7b:40:a5:28:2c: e3:11:bf:0a:27:00:5c:f7:91:86:cb:7e:47:0b:26:89:b6:a2: 22:76:c2:51:2a:ac:6c:d0:5b:45:26:a3:6f:62:0b:29:2b:55: d8:40:cf:f5:e5:9a:89:52:00:1f:62:05:1b:69:b2:19:02:38: 50:3b:29:00:66:05:65:7d:07:f3:4b:4c:c4:8a:84:8a:f8:d1: 22:56:4d:57:1e:59:4a:13:a3:ea:d6:1c:c7:b8:7b:de:b4:94: d7:88:c7:b0:7b:7e:c3:b3:cb:a4:3b:35:76:a5:ce:98:8d:2d: bc:29:d7:c6:24:f4:5a:4f:51:79:32:56:1a:15:8e:08:8a:37: 04:e0:0e:00:be:74:8d:22:d0:34:43:3e:48:98:c4:47:a4:5f: 87:4a:64:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwMTI0MTU1NTE0WhcNMjYwMTMxMTU1NTE0WjAYMRYwFAYD VQQDDA02OTc0ZWI2Mi1hYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGoA1/8Ev9wqOnJqSL5c6Vgpyb0t31jH/iu8nomS5bzs/BJqK1aZtWEGJkHa vQGTkp4DrDG2Bs10d3oWAYwvlQOX77t1VMvcpIuHPR8hY+CbN48iBWzzwi1EiG71 203RAv+ScSTKa50cSFAQ+rd4ryydb7YAdBnZJzPhR7fsEsWU9x4B4e5LpuN3D4oM rdWNnZ/zRdzirEeD26bHbWftoAVuXtbFAWeOWEgwXGibO+CrhP1kxJFdvFMttgGm qTNt3om1+0Gz2NpP9inV27rR0puZl80Sdj6jAKwg6A7s9SNDmcbUljEEItwxk5xo CN69SKcuA9JCOiow1otGvOSDkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIspchha bwEVDpYgVzG6lBBBlAxcMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNSMjeLLMMc6zX8oXjJ4AK3MbOPNSz7Bl1hkSjm3E6CGkN1R/Exv2E CmbJF8edC8Ix58bl5UiPs3RdohPcUUfcuq1daCj3NcRE/7oDvnOEG3wlN3hP26nK NWoPayhja+sNeuP1DmCWe0ClKCzjEb8KJwBc95GGy35HCyaJtqIidsJRKqxs0FtF JqNvYgspK1XYQM/15ZqJUgAfYgUbabIZAjhQOykAZgVlfQfzS0zEioSK+NEiVk1X HllKE6Pq1hzHuHvetJTXiMewe37Ds8ukOzV2pc6YjS28KdfGJPRaT1F5MlYaFY4I ijcE4A4AvnSNItA0Qz5ImMRHpF+HSmR5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:32 2026 by rpki-client