This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json)
Hash identifier: jFyMj6oCrqxjvxzaqrw+Ur4WdQ2ZXdX7XEd/9fuahEs=
Subject key identifier: ED:94:80:5D:44:66:CE:FA:02:1C:93:39:7C:C6:C7:31:E1:93:9C:3B
Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
Manifest number: 1D
Signing time: Sun 25 Jan 2026 06:54:49 +0000
Manifest this update: Sun 25 Jan 2026 06:54:48 +0000
Manifest next update: Sun 01 Feb 2026 06:54:48 +0000
Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: AjgFRnmIqZvQDeOX9B2N0Hcn35SVMLClLxtSlJM7rlE=)
2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: Ohq89QpQ4h6890Ezis7aDeUdxD3YflZSmZSGNInyLts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Validity
Not Before: Jan 25 06:54:48 2026 GMT
Not After : Feb 1 06:54:48 2026 GMT
Subject: CN=6975be39-3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:ed:08:be:06:55:9c:c7:ad:db:57:a5:cc:
59:a1:b1:7e:a6:c7:26:47:0d:a7:cd:f6:ff:2d:d5:
32:1b:9b:61:78:28:31:d7:fa:6a:3e:ee:80:9e:39:
6f:88:db:5a:b5:fb:2b:0b:61:28:2a:96:e6:63:66:
73:9d:00:42:50:1c:58:bb:cd:33:ef:5e:02:d6:01:
88:32:08:ae:c8:d1:77:f0:1e:9e:e0:e0:0e:05:00:
e6:4d:53:6f:29:be:1e:b8:2e:40:59:df:8c:2b:cb:
a4:d0:8c:45:4b:80:56:d2:20:dc:22:68:7a:6c:fe:
a9:5d:46:4f:4f:b7:78:ba:27:2c:42:b4:bd:b1:16:
0a:7a:62:37:8d:aa:e9:ec:b0:d4:5d:44:5a:b4:1f:
e6:31:81:8f:7d:7a:80:17:6e:58:62:b9:df:91:d1:
52:fb:9e:28:48:9a:77:83:21:98:17:50:26:db:2d:
0c:45:08:a1:4b:b2:ac:57:ef:12:bd:ee:e2:fa:ee:
ca:49:1a:c8:60:88:73:66:48:eb:d9:5d:27:2c:cb:
48:b2:09:ad:12:61:10:18:41:5c:b8:c6:ab:fc:f0:
cb:37:ad:cf:2e:c7:de:1e:bf:6f:09:a6:d2:38:41:
a3:7e:f8:e2:1e:ea:01:62:31:66:38:fc:c7:0e:82:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:80:5D:44:66:CE:FA:02:1C:93:39:7C:C6:C7:31:E1:93:9C:3B
X509v3 Authority Key Identifier:
keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cd:ee:85:09:b2:ff:41:98:71:13:96:d9:cb:96:3e:93:bf:
c5:f2:70:96:a8:e0:a4:80:fa:ba:3e:8b:c6:22:3c:3f:8f:ec:
6e:d3:b4:71:5e:98:e3:3a:18:24:98:f0:f9:d3:64:ff:70:bf:
56:52:1b:f6:9f:23:51:7c:ef:39:a4:d9:50:5b:33:63:12:dc:
be:3c:5f:79:42:59:62:eb:a1:33:1d:94:1d:ec:50:49:33:63:
05:12:82:af:a8:b4:fb:24:e7:1c:ba:e6:8c:1b:08:16:22:c3:
dc:58:77:39:29:23:79:01:4e:50:e0:d0:1e:f6:75:b9:46:c6:
2f:15:58:20:06:d7:2f:1a:9d:ec:bb:b5:93:e7:b8:49:0a:8c:
0d:5c:93:5f:2f:fe:dc:04:69:c3:88:bd:ff:72:75:d6:54:ac:
e1:7c:90:74:99:95:95:fd:0f:ba:77:21:a8:38:2e:7c:4c:09:
cb:2a:9a:3d:f4:cb:44:6a:f2:8b:1f:28:5b:00:ff:cd:c1:9a:
48:af:5f:7b:24:0e:98:60:95:7c:f0:d2:db:55:79:b1:57:53:
3d:cb:c9:52:40:34:1e:05:89:25:2d:87:06:88:ef:08:25:76:
d4:64:07:2e:32:e6:e2:0f:d5:d9:8b:b3:ff:ce:65:77:47:7b:
13:2b:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:46 2026 by rpki-client