This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: ZRFQyT380ud6NQQ0hezpgAJ/LHzd6QJctC020TKkT3k= Subject key identifier: D8:15:F8:41:89:83:28:9C:A2:42:25:80:C4:15:76:00:AB:AC:AF:D9 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0A73 Signing time: Sat 24 Jan 2026 19:05:27 +0000 Manifest this update: Sat 24 Jan 2026 19:05:26 +0000 Manifest next update: Sat 31 Jan 2026 19:05:26 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: xtwCglW/U7wuePuTr8o9RcXD0RZSTsTVTveqQaBpiNU=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: vryPQgJZ9HPQvb4c/vnzkdnAafqVRFouOd+j23S6sMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Jan 24 19:05:26 2026 GMT Not After : Jan 31 19:05:26 2026 GMT Subject: CN=697517f7-e286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:18:cd:e6:20:fc:b6:64:2c:cf:60:e3:11: fc:53:4e:54:e3:dc:2b:95:6d:2b:ef:6a:a2:fc:73: ed:7d:29:c7:c0:ac:c8:f1:fe:c1:09:d0:32:c0:67: bf:fc:63:2f:05:c1:5c:88:6a:1d:2c:87:d8:63:5d: 0a:fc:8a:9f:f0:4c:a8:bb:98:9a:b9:4f:25:b4:9c: 32:08:da:cb:fe:3c:53:cc:21:6a:ec:31:59:8b:eb: 02:0b:4d:bb:a1:34:40:dc:ce:95:ba:5e:cd:a9:e4: 17:3e:60:c6:a3:70:7b:03:c9:92:53:9b:a7:0d:0e: ee:ea:14:44:02:e4:98:ac:e7:08:e2:ba:e9:08:18: a3:cc:b8:ae:9e:1b:aa:1c:b1:da:9a:03:0c:98:8f: 5c:ba:05:44:94:4b:96:24:8b:05:0a:38:a0:97:86: 19:41:28:33:5e:a3:4a:de:dc:21:20:75:e0:fc:2e: 73:83:c6:17:ce:3d:18:f4:73:c8:94:0b:11:7a:9b: f0:29:31:9f:bd:d2:4d:be:45:e6:68:38:fc:a7:17: c2:54:03:80:88:53:4f:a7:f0:77:1d:e0:00:a4:76: 91:81:8e:44:85:ca:62:bf:7e:0c:01:a7:6a:5a:cd: 30:3b:00:7b:3d:6f:69:c3:6d:b3:2d:8a:06:cf:78: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:F8:41:89:83:28:9C:A2:42:25:80:C4:15:76:00:AB:AC:AF:D9 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2f:1b:86:47:cd:55:9d:aa:8e:4f:65:21:b9:e7:c5:ab:06: 59:d2:de:67:45:da:b3:92:d7:7f:fe:10:ce:da:90:01:0c:28: 76:f5:17:a0:53:b9:35:ef:e1:8f:cd:45:35:95:27:e3:c4:cd: ae:e3:36:42:ea:4b:8c:71:44:61:b2:01:50:ed:ec:c7:4d:7b: f8:12:ba:c3:74:93:be:76:ff:98:95:50:2b:fd:ce:d0:b2:43: c0:c1:08:10:58:80:48:b5:42:b7:d8:d9:cc:51:a6:be:7d:f5: bb:7d:ae:2f:69:c1:04:49:69:9d:74:35:04:81:30:fe:06:7d: 6d:7d:61:67:27:43:f4:9f:31:92:f1:25:7d:fa:10:24:bb:f0: 57:74:63:d9:5c:f8:4a:76:a9:01:0c:60:0b:53:0a:66:2f:e0: 03:b4:49:15:47:33:26:3a:73:62:ef:4e:76:b1:af:f8:f5:24: 85:ce:67:8b:16:f0:d1:1f:0f:b3:fe:9d:df:2e:3b:cf:10:9c: 90:15:d7:b0:c2:43:03:4a:f0:ee:7c:e1:11:7b:4f:eb:84:e4: a4:fc:6b:a5:ae:36:d1:b7:70:f5:f7:43:73:bb:1e:5e:98:6d: c0:d3:8a:80:0f:75:a2:90:f8:26:11:5b:62:18:ac:d7:65:ce: 11:19:68:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYwMTI0MTkwNTI2WhcNMjYwMTMxMTkwNTI2WjAYMRYwFAYD VQQDDA02OTc1MTdmNy1lMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wAYzeYg/LZkLM9g4xH8U05U49wrlW0r72qi/HPtfSnHwKzI8f7BCdAywGe/ /GMvBcFciGodLIfYY10K/Iqf8Eyou5iauU8ltJwyCNrL/jxTzCFq7DFZi+sCC027 oTRA3M6Vul7NqeQXPmDGo3B7A8mSU5unDQ7u6hREAuSYrOcI4rrpCBijzLiunhuq HLHamgMMmI9cugVElEuWJIsFCjigl4YZQSgzXqNK3twhIHXg/C5zg8YXzj0Y9HPI lAsRepvwKTGfvdJNvkXmaDj8pxfCVAOAiFNPp/B3HeAApHaRgY5Ehcpiv34MAadq Ws0wOwB7PW9pw22zLYoGz3inawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgV+EGJ gyicokIlgMQVdgCrrK/ZMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArLxuGR81VnaqOT2UhuefFqwZZ0t5nRdqzktd//hDO2pABDCh29Reg U7k17+GPzUU1lSfjxM2u4zZC6kuMcURhsgFQ7ezHTXv4ErrDdJO+dv+YlVAr/c7Q skPAwQgQWIBItUK32NnMUaa+ffW7fa4vacEESWmddDUEgTD+Bn1tfWFnJ0P0nzGS 8SV9+hAku/BXdGPZXPhKdqkBDGALUwpmL+ADtEkVRzMmOnNi7052sa/49SSFzmeL FvDRHw+z/p3fLjvPEJyQFdewwkMDSvDufOERe0/rhOSk/GulrjbRt3D190Nzux5e mG3A04qAD3WikPgmEVtiGKzXZc4RGWiY -----END CERTIFICATE-----Generated at Mon Jan 26 02:16:59 2026 by rpki-client