This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: OlzCwXRvaKqEseOOWzP893lmQdW/akoaOIYhFwD0b3Y= Subject key identifier: 89:D7:ED:4B:65:F1:86:2A:38:46:DB:B1:B8:67:F4:B6:40:B9:7A:7C Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 0961 Signing time: Sat 24 Jan 2026 19:33:43 +0000 Manifest this update: Sat 24 Jan 2026 19:33:43 +0000 Manifest next update: Sat 31 Jan 2026 19:33:43 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: pr2xFqHQFJE7N54+lccG/uf8oyzY4t/O5yGBg3jMpHA=) 2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: /W7jNuOZe0YfOd8yIagbqgnCN+PhgeGc0tSQIMsMPPI=) 3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: jBS/1Hlfhun69e6e4ZHEVPi7ipp4H+jsjI8X7M9ZNQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Jan 24 19:33:43 2026 GMT Not After : Jan 31 19:33:43 2026 GMT Subject: CN=69751e97-d17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:fe:fc:7f:63:36:29:0e:b3:4b:01:6e:03: f7:94:dd:2a:4e:64:d0:6a:6d:62:69:5a:b2:b8:5b: e4:ed:f5:e4:e6:83:46:24:a9:8c:98:e8:15:b4:b3: cc:a5:c6:61:d5:31:9d:4b:46:33:9f:38:27:96:ed: 6b:c7:af:90:ab:05:d0:7e:2b:1c:b3:65:17:f8:b5: 46:17:40:4a:74:61:65:32:d1:1f:2f:4a:b0:2e:ad: cb:26:2e:a7:f9:f0:49:50:66:fb:68:d0:99:a1:dc: e6:e8:6e:a4:cc:c8:15:3f:76:82:c5:36:10:86:2b: 54:c8:5b:6e:48:60:14:ea:cd:b7:9b:c9:7e:95:49: 68:24:b0:28:a5:54:5b:f1:59:ad:ec:c3:2b:f6:2d: 2c:55:97:6e:a5:5f:c2:1a:68:84:34:2d:2e:10:69: a1:33:bc:e5:cd:1b:bb:d0:d6:14:f7:36:02:3d:2b: 0e:8b:f4:67:d0:28:87:b6:81:23:bb:3a:ea:6d:1b: da:f0:16:83:e0:37:17:7a:6e:75:20:fb:90:c6:fb: 12:02:85:07:83:3a:c2:6e:4a:bd:0a:46:c7:78:4c: f6:8c:5b:71:e7:89:eb:47:88:3e:53:ba:c7:12:f6: 92:91:94:3a:c9:4c:fa:ab:39:e6:15:74:e0:e4:c0: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:ED:4B:65:F1:86:2A:38:46:DB:B1:B8:67:F4:B6:40:B9:7A:7C X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e8:7c:76:cb:3b:87:fd:6a:f7:34:40:d7:94:ed:a5:4f:46: f8:21:c2:a6:64:65:96:f5:3e:5e:aa:d0:c7:63:dc:b3:a0:ad: 14:c3:04:cb:ca:7c:14:4a:3a:bb:02:1a:7c:f6:f5:58:e1:c1: fd:36:99:0c:7e:56:9a:03:85:33:4f:14:40:c1:8e:3f:dc:4a: 71:80:9a:f5:2c:4d:2f:c5:e5:ff:85:4e:92:4b:51:48:43:c7: 10:2e:cc:d1:5c:51:2c:a4:93:3b:9b:b0:0a:c4:af:05:d3:34: 6d:30:13:7d:50:c1:75:99:c8:85:1d:f5:87:bc:59:f4:cf:d6: a6:92:fd:8a:76:04:30:8d:57:06:cc:41:85:28:46:05:e5:0d: 60:b0:20:60:a4:38:87:54:f8:58:27:51:1d:4c:79:a7:b1:fc: c8:7f:1b:24:b4:d9:fd:d6:9a:3a:77:80:67:5b:6d:83:a4:aa: 34:ab:af:1d:22:e0:8b:66:52:5c:50:49:49:d6:76:b3:58:2f: 90:5a:19:a2:3c:bc:7f:49:ba:e7:ca:59:0e:e4:ad:53:e8:99: 11:d1:ee:4d:89:07:4a:2a:5e:ad:53:b0:48:7d:3b:d2:51:f0: 57:3e:53:e9:97:58:b2:9a:49:79:f4:92:a5:c6:67:d0:8d:22: a3:2f:e0:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjYwMTI0MTkzMzQzWhcNMjYwMTMxMTkzMzQzWjAYMRYwFAYD VQQDDA02OTc1MWU5Ny1kMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbz+/H9jNikOs0sBbgP3lN0qTmTQam1iaVqyuFvk7fXk5oNGJKmMmOgVtLPM pcZh1TGdS0Yznzgnlu1rx6+QqwXQfiscs2UX+LVGF0BKdGFlMtEfL0qwLq3LJi6n +fBJUGb7aNCZodzm6G6kzMgVP3aCxTYQhitUyFtuSGAU6s23m8l+lUloJLAopVRb 8Vmt7MMr9i0sVZdupV/CGmiENC0uEGmhM7zlzRu70NYU9zYCPSsOi/Rn0CiHtoEj uzrqbRva8BaD4DcXem51IPuQxvsSAoUHgzrCbkq9CkbHeEz2jFtx54nrR4g+U7rH EvaSkZQ6yUz6qznmFXTg5MBU8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInX7Utl 8YYqOEbbsbhn9LZAuXp8MB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+6Hx2yzuH/Wr3NEDXlO2lT0b4IcKmZGWW9T5eqtDHY9yzoK0UwwTL ynwUSjq7Ahp89vVY4cH9NpkMflaaA4UzTxRAwY4/3EpxgJr1LE0vxeX/hU6SS1FI Q8cQLszRXFEspJM7m7AKxK8F0zRtMBN9UMF1mciFHfWHvFn0z9amkv2KdgQwjVcG zEGFKEYF5Q1gsCBgpDiHVPhYJ1EdTHmnsfzIfxsktNn91po6d4BnW22DpKo0q68d IuCLZlJcUElJ1nazWC+QWhmiPLx/SbrnylkO5K1T6JkR0e5NiQdKKl6tU7BIfTvS UfBXPlPpl1iymkl59JKlxmfQjSKjL+Ct -----END CERTIFICATE-----Generated at Sun Jan 25 04:35:15 2026 by rpki-client