This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: HkP6dt3OtxqV0d9S4PdjgXCxib/d09cymS4M6xXeFSk= Subject key identifier: E7:96:92:05:D9:8A:7F:B3:B4:66:0C:F9:FE:F9:E6:8C:49:DB:39:00 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 02AC Signing time: Sun 25 Jan 2026 00:41:21 +0000 Manifest this update: Sun 25 Jan 2026 00:41:20 +0000 Manifest next update: Sun 01 Feb 2026 00:41:20 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: 8aSjKvK5ocxkDVXtcDM7W+sd7HppTQY2c/kV3F1Dlyg=) 2: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: RaDP91UEhN5m0mKcwjFniZyRM8v4oThc8IlQpZodOMI=) 3: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: DvnuXlMxbSeKodLGBkCXBAwAbwtaoOVHkRHtB3pWfw8=) 4: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IctexMIkkmuKRY28It4wmvJrqOn2UvVnqHfHqiMz3qg=) 5: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: LXwsroP8h2ediF7DOfVAsXACwu6J/MbgJS+T4Y1N2iE=) 6: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: bTu32emo4oNYJVA1lCeQHupAf6pJqBWu/TVi/rnIfJU=) 7: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: 5xlmT2kfel1cvCWV/wEirk2FPvjV62JTYKUe5pZJSHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Jan 25 00:41:20 2026 GMT Not After : Feb 1 00:41:20 2026 GMT Subject: CN=697566b1-e1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:a5:9f:4e:49:0a:54:3b:97:f5:03:a3:38: 2c:71:8e:c3:5f:0f:a4:83:4f:04:e6:53:eb:8b:5b: bf:46:cb:ed:2c:72:bd:3f:2b:c8:52:b1:f7:cd:4b: 76:7b:bd:8d:6f:93:0b:6f:c0:5a:19:c9:77:1c:de: e9:a5:6a:02:e2:39:f8:7d:85:6a:e9:62:81:f0:92: 08:20:06:2a:e4:a8:7e:f7:be:94:3d:1a:18:b7:c6: aa:8c:77:fc:fe:67:fd:bf:5f:be:24:8c:88:4b:88: ba:ac:ab:bf:d5:a8:e5:cf:66:ca:45:2f:f4:86:99: 49:fe:00:ff:74:1f:81:8f:a6:e2:ca:9c:61:96:5e: a1:24:2f:1f:d1:c4:bc:e7:0f:51:b6:04:9f:f5:6d: 22:e3:2d:8c:f4:a6:6e:c4:1a:41:95:db:c0:9f:15: fc:76:9f:1e:5c:ca:6b:97:30:55:1e:3c:c9:79:5a: c0:ee:2b:43:49:4d:54:d4:8e:4d:23:ff:f4:8e:8b: f8:ca:ef:2b:79:49:6e:6d:e1:cb:9d:4e:44:a5:c6: f6:8e:fe:46:90:88:14:d2:c4:9d:39:69:d1:91:01: 38:6e:9e:6a:12:74:cc:d6:f7:9b:5c:e5:5c:b5:56: 2d:82:1c:67:ac:20:bc:f9:c0:87:b2:2c:2c:51:a5: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:96:92:05:D9:8A:7F:B3:B4:66:0C:F9:FE:F9:E6:8C:49:DB:39:00 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:11:ae:9d:ab:25:7b:d5:78:67:75:cf:fa:2f:e4:b5:e0: 3c:64:6f:b7:4b:74:88:e8:86:f5:1b:6e:a7:49:d8:bc:af:61: 3b:90:47:aa:ca:b9:a5:d6:38:d2:ff:25:13:af:fe:32:46:11: e8:c9:2b:4b:6a:50:d1:1d:89:e3:d8:cf:a5:62:49:62:ef:3e: 4c:35:56:7c:a2:dc:d8:ff:91:ee:66:04:5d:b4:fa:c8:1f:42: 68:ab:70:0e:96:98:21:e8:fb:02:d6:a7:38:46:9f:cd:d9:15: 0d:5c:29:49:c1:45:48:d3:cb:e4:9c:10:be:b8:1c:de:55:8c: 3b:0f:99:09:a5:21:8e:ea:df:66:e6:ba:ef:9a:29:5c:df:27: 38:53:d8:5d:17:ea:80:2c:bf:17:68:3f:24:1c:3c:27:2e:14: 13:b4:f9:61:b9:0a:a5:11:8f:81:49:31:74:60:36:b9:33:ba: 46:fe:92:a0:7b:d8:46:53:4e:35:93:0d:38:01:51:d6:1e:7e: 6e:ad:2f:63:09:4f:5c:09:63:3c:09:5e:34:2a:b7:49:c5:22: c8:22:ae:23:e9:e6:b3:db:9b:a3:68:bd:08:9f:02:a8:e9:7d: a9:92:38:8f:3f:27:a2:74:3f:9d:13:19:58:b6:f8:c5:a0:1a: 43:36:ea:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwMTI1MDA0MTIwWhcNMjYwMjAxMDA0MTIwWjAYMRYwFAYD VQQDDA02OTc1NjZiMS1lMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxOln05JClQ7l/UDozgscY7DXw+kg08E5lPri1u/RsvtLHK9PyvIUrH3zUt2 e72Nb5MLb8BaGcl3HN7ppWoC4jn4fYVq6WKB8JIIIAYq5Kh+976UPRoYt8aqjHf8 /mf9v1++JIyIS4i6rKu/1ajlz2bKRS/0hplJ/gD/dB+Bj6biypxhll6hJC8f0cS8 5w9RtgSf9W0i4y2M9KZuxBpBldvAnxX8dp8eXMprlzBVHjzJeVrA7itDSU1U1I5N I//0jov4yu8reUlubeHLnU5Epcb2jv5GkIgU0sSdOWnRkQE4bp5qEnTM1vebXOVc tVYtghxnrCC8+cCHsiwsUaXAfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeWkgXZ in+ztGYM+f755oxJ2zkAMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtCxGunasle9V4Z3XP+i/kteA8ZG+3S3SI6Ib1G26nSdi8r2E7kEeq yrml1jjS/yUTr/4yRhHoyStLalDRHYnj2M+lYkli7z5MNVZ8otzY/5HuZgRdtPrI H0Joq3AOlpgh6PsC1qc4Rp/N2RUNXClJwUVI08vknBC+uBzeVYw7D5kJpSGO6t9m 5rrvmilc3yc4U9hdF+qALL8XaD8kHDwnLhQTtPlhuQqlEY+BSTF0YDa5M7pG/pKg e9hGU041kw04AVHWHn5urS9jCU9cCWM8CV40KrdJxSLIIq4j6eaz25ujaL0InwKo 6X2pkjiPPyeidD+dExlYtvjFoBpDNuoj -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:01 2026 by rpki-client