This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File:                     olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier:          GFUkiB/J3q/7X8/decZjhtoHt0t37t7KbnJr2p7cj2g=
Subject key identifier:   56:FD:55:27:6F:EC:42:3A:02:15:63:22:4F:9E:09:DC:5F:DD:FC:3A
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number:          24
Signing time:             Sun 25 Jan 2026 06:50:04 +0000
Manifest this update:     Sun 25 Jan 2026 06:50:04 +0000
Manifest next update:     Sun 01 Feb 2026 06:50:04 +0000
Files and hashes:         1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: LEjjuCtXk5MRG0y5mOK2gWyqzjHCLxszzC9wZMNwOko=)
                          2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: Xxcnzz4UUYNFed71QsmRkeBUQBijpW8VtIcJqXdOAKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Jan 25 06:50:04 2026 GMT
            Not After : Feb  1 06:50:04 2026 GMT
        Subject: CN=6975bd1c-5f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:c8:24:ef:61:0e:c1:b4:5a:11:f7:02:f7:
                    b2:5c:04:d0:b4:ed:c8:b9:bf:99:80:49:b7:34:5c:
                    42:9c:db:3c:a1:45:10:57:fb:6f:aa:5b:39:b1:5e:
                    ed:12:20:b5:5a:f9:94:e9:79:03:fb:1b:7f:10:20:
                    91:bf:4b:75:d5:de:7f:ea:aa:e1:84:cb:04:f5:1f:
                    2e:74:f6:b1:53:e9:ab:6d:f5:17:71:32:c0:31:38:
                    4a:f7:8d:58:07:e6:ed:20:bd:2d:46:69:40:b5:05:
                    a9:62:b3:ea:0c:fe:b9:b7:82:82:96:01:a0:15:d8:
                    87:80:b9:cd:44:47:bf:b5:2e:d5:e2:4d:20:fc:e8:
                    8d:21:77:da:9a:1a:0b:32:41:b7:8b:43:e7:8b:49:
                    12:ed:9f:4a:4a:13:43:99:8d:d7:1f:00:e0:98:4f:
                    80:21:1d:7d:c3:a9:92:3f:8b:0a:a0:d9:67:3b:b9:
                    86:78:42:73:b1:04:6c:f4:11:8a:4e:96:dd:ba:8f:
                    18:28:97:97:64:fb:c9:72:f7:f8:51:c3:69:8f:0c:
                    d3:80:45:0d:88:2f:62:30:79:fe:a7:f7:87:f7:d0:
                    b5:58:46:bb:3f:03:cd:14:57:21:f5:73:8a:4b:8f:
                    3d:49:ee:ec:25:21:97:36:2a:be:cb:44:3c:af:e8:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:55:27:6F:EC:42:3A:02:15:63:22:4F:9E:09:DC:5F:DD:FC:3A
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:fe:c7:24:87:25:da:24:8e:f2:34:e1:9f:cd:43:d8:be:
         c4:a9:0c:ba:93:ef:dc:cd:a1:03:33:2f:10:60:1e:77:1f:0c:
         05:11:e9:23:82:33:15:57:fb:72:ea:d1:0f:3b:a7:1b:7b:0c:
         06:74:69:b8:ff:0d:71:8e:45:06:0a:e5:2f:d6:cc:63:35:0c:
         ec:d0:fb:e8:d8:e7:f7:d4:44:34:ba:30:b0:a8:0d:46:bc:32:
         69:62:4b:df:e6:75:8c:5b:0c:69:2b:ce:56:e2:cd:7f:3c:92:
         e5:85:db:05:0a:ba:4e:48:0c:22:3a:d0:84:77:53:b5:c1:c3:
         c4:3f:56:c0:2f:0e:ca:02:48:71:cd:fc:99:b2:71:91:95:58:
         d3:8c:60:2e:03:c6:43:bc:1a:a9:cd:88:ea:80:c2:8a:ff:09:
         b1:ec:6c:1c:0b:61:87:a2:3c:49:67:e8:66:05:0f:83:09:02:
         bf:28:a2:cd:5e:5c:dd:a7:59:41:ec:f0:3c:56:11:86:ed:83:
         91:2a:7d:f2:bd:e5:db:df:16:2e:5e:09:3b:5f:ab:12:a7:b2:
         60:e2:10:f5:4f:0a:8b:ff:ba:c8:d9:75:7d:eb:93:3e:99:5c:
         79:3e:0a:4a:67:9a:0a:49:ed:22:33:6d:03:bb:96:50:7c:17:
         b7:e8:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:47 2026 by rpki-client