This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier: GFUkiB/J3q/7X8/decZjhtoHt0t37t7KbnJr2p7cj2g=
Subject key identifier: 56:FD:55:27:6F:EC:42:3A:02:15:63:22:4F:9E:09:DC:5F:DD:FC:3A
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number: 24
Signing time: Sun 25 Jan 2026 06:50:04 +0000
Manifest this update: Sun 25 Jan 2026 06:50:04 +0000
Manifest next update: Sun 01 Feb 2026 06:50:04 +0000
Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: LEjjuCtXk5MRG0y5mOK2gWyqzjHCLxszzC9wZMNwOko=)
2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: Xxcnzz4UUYNFed71QsmRkeBUQBijpW8VtIcJqXdOAKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Validity
Not Before: Jan 25 06:50:04 2026 GMT
Not After : Feb 1 06:50:04 2026 GMT
Subject: CN=6975bd1c-5f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:c8:24:ef:61:0e:c1:b4:5a:11:f7:02:f7:
b2:5c:04:d0:b4:ed:c8:b9:bf:99:80:49:b7:34:5c:
42:9c:db:3c:a1:45:10:57:fb:6f:aa:5b:39:b1:5e:
ed:12:20:b5:5a:f9:94:e9:79:03:fb:1b:7f:10:20:
91:bf:4b:75:d5:de:7f:ea:aa:e1:84:cb:04:f5:1f:
2e:74:f6:b1:53:e9:ab:6d:f5:17:71:32:c0:31:38:
4a:f7:8d:58:07:e6:ed:20:bd:2d:46:69:40:b5:05:
a9:62:b3:ea:0c:fe:b9:b7:82:82:96:01:a0:15:d8:
87:80:b9:cd:44:47:bf:b5:2e:d5:e2:4d:20:fc:e8:
8d:21:77:da:9a:1a:0b:32:41:b7:8b:43:e7:8b:49:
12:ed:9f:4a:4a:13:43:99:8d:d7:1f:00:e0:98:4f:
80:21:1d:7d:c3:a9:92:3f:8b:0a:a0:d9:67:3b:b9:
86:78:42:73:b1:04:6c:f4:11:8a:4e:96:dd:ba:8f:
18:28:97:97:64:fb:c9:72:f7:f8:51:c3:69:8f:0c:
d3:80:45:0d:88:2f:62:30:79:fe:a7:f7:87:f7:d0:
b5:58:46:bb:3f:03:cd:14:57:21:f5:73:8a:4b:8f:
3d:49:ee:ec:25:21:97:36:2a:be:cb:44:3c:af:e8:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:55:27:6F:EC:42:3A:02:15:63:22:4F:9E:09:DC:5F:DD:FC:3A
X509v3 Authority Key Identifier:
keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c0:fe:c7:24:87:25:da:24:8e:f2:34:e1:9f:cd:43:d8:be:
c4:a9:0c:ba:93:ef:dc:cd:a1:03:33:2f:10:60:1e:77:1f:0c:
05:11:e9:23:82:33:15:57:fb:72:ea:d1:0f:3b:a7:1b:7b:0c:
06:74:69:b8:ff:0d:71:8e:45:06:0a:e5:2f:d6:cc:63:35:0c:
ec:d0:fb:e8:d8:e7:f7:d4:44:34:ba:30:b0:a8:0d:46:bc:32:
69:62:4b:df:e6:75:8c:5b:0c:69:2b:ce:56:e2:cd:7f:3c:92:
e5:85:db:05:0a:ba:4e:48:0c:22:3a:d0:84:77:53:b5:c1:c3:
c4:3f:56:c0:2f:0e:ca:02:48:71:cd:fc:99:b2:71:91:95:58:
d3:8c:60:2e:03:c6:43:bc:1a:a9:cd:88:ea:80:c2:8a:ff:09:
b1:ec:6c:1c:0b:61:87:a2:3c:49:67:e8:66:05:0f:83:09:02:
bf:28:a2:cd:5e:5c:dd:a7:59:41:ec:f0:3c:56:11:86:ed:83:
91:2a:7d:f2:bd:e5:db:df:16:2e:5e:09:3b:5f:ab:12:a7:b2:
60:e2:10:f5:4f:0a:8b:ff:ba:c8:d9:75:7d:eb:93:3e:99:5c:
79:3e:0a:4a:67:9a:0a:49:ed:22:33:6d:03:bb:96:50:7c:17:
b7:e8:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:47 2026 by rpki-client