This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json) Hash identifier: Z5NfCBJ+u2Gw8/XkGLvO7dlZ9XeF7yougTUWLUFHkUQ= Subject key identifier: C1:03:25:45:DA:A8:14:E2:43:18:B3:1C:45:88:7D:CA:A0:9B:AA:DB Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft Manifest number: 0A76 Signing time: Sat 20 Dec 2025 19:08:17 +0000 Manifest this update: Sat 20 Dec 2025 19:08:16 +0000 Manifest next update: Sat 27 Dec 2025 19:08:16 +0000 Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: 3uGe5wVCBAXd8xjjsj1jA5bPozRFfUxnO8ITHIizdpU=) 2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: +OxVgsTFeHXtInD93OSVx4VoDwnGKpFnWPCaCB5ImQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Dec 20 19:08:16 2025 GMT Not After : Dec 27 19:08:16 2025 GMT Subject: CN=6946f421-7f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:e0:99:b7:94:59:a8:2b:9a:7f:4f:8a:c4: 6b:f1:06:ea:84:ae:04:e9:61:50:14:24:82:46:c2: 14:12:fc:e9:ec:c5:f2:d3:36:6c:7a:18:4a:3c:15: 6b:3c:c5:0d:3c:b8:af:25:2d:b9:c3:0a:f0:ff:90: 93:c3:d2:65:64:2a:46:55:a5:d8:40:bf:8c:0f:02: 3e:59:3a:01:57:5c:e9:a2:34:ad:67:cf:91:05:bb: da:3b:70:9f:33:36:8d:71:db:13:29:1d:16:19:5e: 7c:06:bb:7e:49:66:37:be:3e:be:71:cc:70:c8:c8: ed:9c:d5:91:ea:a9:bb:80:fe:23:8b:4a:e6:22:0a: 6d:bf:c1:d6:11:81:66:a0:6b:cd:82:ed:a5:29:01: de:bc:f1:04:04:d1:a4:cf:a2:08:49:d5:67:79:b9: 5c:f2:6d:43:e5:da:6b:8e:89:97:98:bf:df:b4:16: b8:d1:ff:e2:8e:01:7d:bf:4e:d9:32:24:5f:5d:41: 13:2b:0a:c4:60:e3:7e:a2:00:36:a9:76:9e:b0:d0: 09:39:93:1e:5b:af:86:bf:9d:63:ca:d9:f7:de:cf: 4f:65:29:f9:6e:ef:e5:22:3f:25:e2:4b:2a:7a:fa: fc:40:0f:6f:30:88:c8:65:d6:9c:5a:e3:be:6f:d9: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:25:45:DA:A8:14:E2:43:18:B3:1C:45:88:7D:CA:A0:9B:AA:DB X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:b9:84:6a:3f:1a:1e:5e:0f:9b:ff:d7:a0:6c:88:86:1e: 3f:fe:97:a6:e5:67:ee:d2:d7:d6:27:1d:b0:67:8b:e3:c6:de: c3:ed:b2:d0:de:4a:01:85:9b:2c:dc:2b:e2:26:0c:9b:e8:8c: 65:84:0d:3d:de:a1:df:c0:2d:38:44:02:81:c8:a8:95:34:94: d6:c1:ef:0a:da:f3:1e:b7:39:d5:11:41:a3:91:d4:33:a4:6f: 5e:b6:8d:e9:b5:52:d5:38:28:77:47:e9:86:32:68:02:55:51: bb:d2:f7:36:6a:a2:8d:73:2a:12:6e:d2:0a:ad:54:1d:cb:79: 3d:51:97:05:08:4f:83:52:99:cb:d7:e0:7f:72:58:5b:37:0c: 51:55:cb:08:3d:d6:d0:44:6f:44:5b:27:f0:7c:3b:8d:d5:70: 3a:6c:9f:e7:fd:1f:34:b8:90:59:42:24:75:ff:a3:d8:2e:70: b6:e4:93:4b:6f:f4:49:2d:24:24:a6:51:6f:b7:48:8f:3d:bc: 88:3f:71:44:57:fe:d1:fd:d0:fa:61:77:9b:64:a9:8f:52:81: 90:04:61:c6:05:6c:f2:a9:de:71:19:9e:c8:a8:62:02:f5:87: f5:fe:1d:d4:24:ee:4d:6d:58:77:7e:e1:c7:41:b7:ca:4b:2f: 66:2a:58:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjUxMjIwMTkwODE2WhcNMjUxMjI3MTkwODE2WjAYMRYwFAYD VQQDDA02OTQ2ZjQyMS03Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQLgmbeUWagrmn9PisRr8QbqhK4E6WFQFCSCRsIUEvzp7MXy0zZsehhKPBVr PMUNPLivJS25wwrw/5CTw9JlZCpGVaXYQL+MDwI+WToBV1zpojStZ8+RBbvaO3Cf MzaNcdsTKR0WGV58Brt+SWY3vj6+ccxwyMjtnNWR6qm7gP4ji0rmIgptv8HWEYFm oGvNgu2lKQHevPEEBNGkz6IISdVneblc8m1D5dprjomXmL/ftBa40f/ijgF9v07Z MiRfXUETKwrEYON+ogA2qXaesNAJOZMeW6+Gv51jytn33s9PZSn5bu/lIj8l4ksq evr8QA9vMIjIZdacWuO+b9kXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEDJUXa qBTiQxizHEWIfcqgm6rbMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzAzOS9DMjVEMDJGRTc4OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdO SlloZmkwZFlVQzRqMm9PTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBpLmEaj8aHl4Pm//XoGyIhh4//pem5Wfu0tfWJx2wZ4vjxt7D7bLQ 3koBhZss3CviJgyb6IxlhA093qHfwC04RAKByKiVNJTWwe8K2vMetznVEUGjkdQz pG9eto3ptVLVOCh3R+mGMmgCVVG70vc2aqKNcyoSbtIKrVQdy3k9UZcFCE+DUpnL 1+B/clhbNwxRVcsIPdbQRG9EWyfwfDuN1XA6bJ/n/R80uJBZQiR1/6PYLnC25JNL b/RJLSQkplFvt0iPPbyIP3FEV/7R/dD6YXebZKmPUoGQBGHGBWzyqd5xGZ7IqGIC 9Yf1/h3UJO5NbVh3fuHHQbfKSy9mKlhm -----END CERTIFICATE-----Generated at Sun Dec 21 00:15:06 2025 by rpki-client