This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: 0clX8CB0gC07GVOy8V01GIlKwSkBE+ICoPz0DPaARyY= Subject key identifier: B2:31:9E:F6:A3:08:CF:52:24:92:E0:E5:8A:E2:8F:F9:5A:FC:79:D9 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 0146 Signing time: Sun 25 Jan 2026 03:34:36 +0000 Manifest this update: Sun 25 Jan 2026 03:34:36 +0000 Manifest next update: Sun 01 Feb 2026 03:34:36 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: i1nDGIu3kFJKk16Oyg5mBMPQO8M6aNuqVR7c9PXxi/A=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: oPEA+euS8au7/G3eWPC6qnxCCEjdK5yKYosNW4PVWb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Jan 25 03:34:36 2026 GMT Not After : Feb 1 03:34:36 2026 GMT Subject: CN=69758f4c-0fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:16:d2:b9:04:ce:09:5a:bb:c7:ab:1e:84: 54:fd:7e:28:80:0d:2e:e1:5f:d8:c7:24:82:2c:2e: 68:df:09:68:9a:53:54:c8:4d:82:33:2a:ee:32:3e: 2c:0c:95:b3:9a:ce:dc:cd:d3:4c:4a:7e:9d:9e:4d: 66:5d:a9:f2:81:d0:5e:81:9d:64:98:2c:a3:70:ff: a2:4f:62:71:fb:af:10:56:7a:03:e9:5a:3b:68:b3: e9:6b:96:49:3d:3f:f3:bb:f4:8c:5d:61:15:6e:fc: a1:73:f0:3a:c0:04:34:f0:2d:6a:4e:39:8f:af:fa: b4:25:16:ac:7f:34:b0:16:02:cc:2f:2a:fb:48:b8: fe:f9:e9:ba:ec:be:c9:d8:2e:e8:95:10:d8:e6:ab: 37:30:aa:4f:9a:f2:e0:61:49:9e:f4:7f:84:12:f1: b5:35:df:61:31:9f:79:4c:39:29:58:42:da:cc:ad: a2:6e:33:be:dd:4f:84:0e:b7:b4:d3:a6:e2:34:54: 63:bb:9b:67:e9:c5:33:b4:2d:e9:74:0c:46:01:b0: 5d:4b:22:19:b0:58:99:fb:0a:de:bb:10:40:bd:b9: cd:41:67:3d:f5:ac:de:bf:24:6f:36:94:9a:43:bf: 98:a4:3a:59:29:84:89:f3:c9:42:72:9a:f9:d8:8c: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:31:9E:F6:A3:08:CF:52:24:92:E0:E5:8A:E2:8F:F9:5A:FC:79:D9 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:f0:36:d1:46:3e:e8:ea:3f:3d:97:3f:2a:dc:e1:26:4d: 68:29:81:b6:2b:8f:5c:8c:6e:f4:17:c6:bd:ce:a1:4c:b8:ea: 04:a7:94:e3:c5:d6:50:50:9e:1d:12:aa:ef:45:7b:e5:1f:94: ee:11:2e:94:96:37:8b:8e:28:c3:0e:26:68:c0:b4:48:4d:87: 44:ba:83:1d:a3:93:74:b5:04:b8:12:01:04:a3:7b:5e:d0:e9: c2:b9:74:02:31:03:e0:22:33:b9:d6:ba:92:f5:4b:05:1a:47: 67:c7:ca:b4:44:d6:2f:3c:b1:f3:1a:61:b4:8c:69:02:40:dd: 7d:ab:d7:62:d5:ca:4e:92:3a:35:5e:be:7f:88:42:e0:a8:64: 56:79:82:fd:ae:bc:16:38:e9:36:1e:9e:e9:f8:4f:8e:c8:13: 96:9f:70:5a:09:34:3f:b1:64:8c:9d:55:ac:97:85:3d:dd:2f: 89:b8:89:6f:29:f1:3e:79:33:6c:2c:45:6d:05:36:6b:4f:b6: 5c:ba:0b:6d:57:a7:19:c8:a3:5b:bd:e3:36:2e:ce:49:b7:59: 29:4f:df:23:72:2b:f4:83:3e:86:9c:36:ad:02:d2:9e:a1:11: 89:c0:ad:f9:aa:8c:1c:15:29:f6:ab:ec:61:28:e1:78:dd:3b: f0:66:c1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjYwMTI1MDMzNDM2WhcNMjYwMjAxMDMzNDM2WjAYMRYwFAYD VQQDDA02OTc1OGY0Yy0wZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAll4W0rkEzglau8erHoRU/X4ogA0u4V/YxySCLC5o3wlomlNUyE2CMyruMj4s DJWzms7czdNMSn6dnk1mXanygdBegZ1kmCyjcP+iT2Jx+68QVnoD6Vo7aLPpa5ZJ PT/zu/SMXWEVbvyhc/A6wAQ08C1qTjmPr/q0JRasfzSwFgLMLyr7SLj++em67L7J 2C7olRDY5qs3MKpPmvLgYUme9H+EEvG1Nd9hMZ95TDkpWELazK2ibjO+3U+EDre0 06biNFRju5tn6cUztC3pdAxGAbBdSyIZsFiZ+wreuxBAvbnNQWc99azevyRvNpSa Q7+YpDpZKYSJ88lCcpr52IxTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIxnvaj CM9SJJLg5Yrij/la/HnZMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUofA20UY+6Oo/PZc/KtzhJk1oKYG2K49cjG70F8a9zqFMuOoEp5Tj xdZQUJ4dEqrvRXvlH5TuES6UljeLjijDDiZowLRITYdEuoMdo5N0tQS4EgEEo3te 0OnCuXQCMQPgIjO51rqS9UsFGkdnx8q0RNYvPLHzGmG0jGkCQN19q9di1cpOkjo1 Xr5/iELgqGRWeYL9rrwWOOk2Hp7p+E+OyBOWn3BaCTQ/sWSMnVWsl4U93S+JuIlv KfE+eTNsLEVtBTZrT7ZcugttV6cZyKNbveM2Ls5Jt1kpT98jciv0gz6GnDatAtKe oRGJwK35qowcFSn2q+xhKOF43TvwZsHr -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:23 2026 by rpki-client