This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft File: Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json) Hash identifier: Dr4a0H4z6Pqi8lTekiCvHfiKd1YluiKwP+/c7SUhp6A= Subject key identifier: 87:52:E7:91:AA:27:01:85:44:C6:06:65:6D:59:7E:35:F4:AF:18:8B Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E Certificate issuer: /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft Manifest number: 19 Signing time: Sun 25 Jan 2026 06:57:27 +0000 Manifest this update: Sun 25 Jan 2026 06:57:26 +0000 Manifest next update: Sun 01 Feb 2026 06:57:26 +0000 Files and hashes: 1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: oewSjYNGOYiP0oHcTVE2sStNPR/wwgf1qkMtA+uOi7Q=) 2: 83739562D66111F0B67B852D0CB43E13.roa (hash: MZXbiv4dwvYFL1iWN0aaMlfz8+9JPN0M6rbYfr0By/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Validity Not Before: Jan 25 06:57:26 2026 GMT Not After : Feb 1 06:57:26 2026 GMT Subject: CN=6975bed6-8bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:5b:66:0e:45:30:03:53:cc:5c:70:c4:43: 17:99:11:cd:09:fd:b3:55:04:ad:31:bd:c8:f5:53: 43:2f:9c:b9:2a:7e:71:77:93:79:e7:34:18:cc:14: cd:89:b8:72:0f:6d:dc:85:bf:5b:ae:e3:2b:e2:54: 7b:81:8b:20:0f:27:65:09:6b:d2:4d:58:be:b2:07: 05:8e:21:10:54:2d:c9:1b:6f:82:39:44:73:a6:7a: 15:23:9f:1d:44:6a:0e:f5:1f:fb:dd:94:bb:f7:a1: e2:6f:57:15:d5:01:8a:c6:1b:bf:e7:04:b0:8f:0d: 1d:6f:23:a1:19:b9:49:c8:db:41:50:e1:5f:83:65: 6a:8e:b0:07:07:38:76:72:12:92:00:18:8d:7c:39: b3:53:ac:19:6b:96:04:bf:e7:13:40:b6:94:9b:3f: 0d:ad:10:c1:a6:77:95:6c:e8:89:e2:01:fc:1f:58: 5c:d8:44:7a:35:b0:c1:64:3b:90:c8:36:7e:04:53: a7:6d:3e:d0:74:de:e5:50:62:d4:b9:c0:f6:5d:28: 4a:5a:fe:8a:c7:31:55:3e:3f:85:77:a0:fd:4f:c2: c3:9b:88:6c:4e:33:27:88:b8:91:da:4c:a1:bb:b5: 59:1f:94:f1:e9:7d:35:e1:cf:e6:8e:ff:df:96:2e: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:E7:91:AA:27:01:85:44:C6:06:65:6D:59:7E:35:F4:AF:18:8B X509v3 Authority Key Identifier: keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ff:67:a7:2b:5c:e8:f1:59:fb:40:41:9c:4f:7e:7b:f8:8d: 2a:9d:04:e9:34:b5:89:30:10:6c:5a:02:04:00:a9:f2:e2:f5: 27:a0:a0:b9:93:56:7f:5b:84:f2:fa:73:c5:21:f2:a7:73:ef: 2e:68:b7:0b:60:35:79:47:14:30:64:2a:88:7f:7e:60:b6:ec: 87:e3:4a:08:d1:a9:74:26:3c:e3:51:ed:64:26:92:0e:1e:05: 31:52:1b:8b:9b:c4:ce:b0:5d:d2:48:9d:9d:fe:3b:0e:91:8d: ba:7a:28:33:d8:10:d2:48:aa:48:12:82:1e:d9:c0:fa:71:48: ae:6e:e5:2c:fe:ff:2f:53:a1:05:b2:4b:ca:a6:f8:17:50:82: ef:33:6a:51:4d:30:4b:33:aa:c8:49:57:58:ca:77:91:7b:ca: 74:a7:30:c2:f9:36:8f:67:f7:b5:e9:14:9f:00:98:00:75:ec: fa:71:7e:90:3d:55:a3:70:ee:8f:45:21:fa:aa:11:f8:49:52: fa:9d:25:ff:a3:cd:25:8e:ea:ef:58:f9:db:79:0b:13:ec:f5: 43:26:2a:30:47:b8:4b:5e:2d:b6:b5:36:97:e9:34:ea:71:51: f6:61:c3:c9:64:17:fe:7d:85:59:86:1f:96:fa:cc:77:e6:af: 9c:78:c6:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkJGMzExMC8GA1UEBRMoM0E1RkI1RTE3MzhFRTA5NEM1QjkwOEIzNzkxQzY5QzA3 NzdEQUUxRTAeFw0yNjAxMjUwNjU3MjZaFw0yNjAyMDEwNjU3MjZaMBgxFjAUBgNV BAMMDTY5NzViZWQ2LThiZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgtVtmDkUwA1PMXHDEQxeZEc0J/bNVBK0xvcj1U0MvnLkqfnF3k3nnNBjMFM2J uHIPbdyFv1uu4yviVHuBiyAPJ2UJa9JNWL6yBwWOIRBULckbb4I5RHOmehUjnx1E ag71H/vdlLv3oeJvVxXVAYrGG7/nBLCPDR1vI6EZuUnI20FQ4V+DZWqOsAcHOHZy EpIAGI18ObNTrBlrlgS/5xNAtpSbPw2tEMGmd5Vs6IniAfwfWFzYRHo1sMFkO5DI Nn4EU6dtPtB03uVQYtS5wPZdKEpa/orHMVU+P4V3oP1PwsObiGxOMyeIuJHaTKG7 tVkflPHpfTXhz+aO/9+WLg+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh1Lnkaon AYVExgZlbVl+NfSvGIswHwYDVR0jBBgwFoAUOl+14XOO4JTFuQizeRxpwHd9rh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0U1MEM5OUI0RDY2 MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpURnVRaXplUnhwd0hkOXJo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT2wtMTRYT080SlRGdVFpemVSeHB3SGQ5cmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG QkYzL0U1MEM5OUI0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9PNEpU RnVRaXplUnhwd0hkOXJoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7/Z6crXOjxWftAQZxPfnv4jSqdBOk0tYkwEGxaAgQAqfLi9SegoLmT Vn9bhPL6c8Uh8qdz7y5otwtgNXlHFDBkKoh/fmC27IfjSgjRqXQmPONR7WQmkg4e BTFSG4ubxM6wXdJInZ3+Ow6Rjbp6KDPYENJIqkgSgh7ZwPpxSK5u5Sz+/y9ToQWy S8qm+BdQgu8zalFNMEszqshJV1jKd5F7ynSnMML5No9n97XpFJ8AmAB17PpxfpA9 VaNw7o9FIfqqEfhJUvqdJf+jzSWO6u9Y+dt5CxPs9UMmKjBHuEteLba1NpfpNOpx UfZhw8lkF/59hVmGH5b6zHfmr5x4xsM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:40 2026 by rpki-client