This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: wmpx5VwTec1iWuVV5MRaDX84+YcJQI15PjJ1Tj4fGxE=
Subject key identifier: C3:D3:55:16:7F:B3:82:E5:46:5F:26:87:A3:FA:28:1A:2E:7D:C5:94
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0A32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 47EF
Signing time: Sat 24 Jan 2026 15:37:32 +0000
Manifest this update: Sat 24 Jan 2026 15:37:32 +0000
Manifest next update: Sat 31 Jan 2026 15:37:32 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: mWosd1vnSK2WUKjsgxOZTKAk8apyp2+aXLy//CFiu9w=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: 1Xe1cmvJhp+1uOgf9drz3lA2Kuch55N2lYYnYgzX/Sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Validity
Not Before: Jan 24 15:37:32 2026 GMT
Not After : Jan 31 15:37:32 2026 GMT
Subject: CN=6974e73c-6062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:e4:83:5c:3b:2d:7b:97:72:34:93:5d:34:
e0:9f:fa:b1:9e:f3:d2:3d:49:01:df:ad:92:68:49:
bd:c1:9a:e3:b6:12:61:c3:21:7f:0c:7c:a6:81:95:
d5:12:2c:e2:ab:6c:2c:ef:3f:80:4b:0b:c2:4b:fe:
51:a2:54:5f:e6:ac:22:5d:18:cf:6c:a0:14:ec:d1:
d2:05:f3:81:75:4f:b1:86:be:04:d3:75:49:e9:2a:
91:30:bc:c2:ff:24:5f:78:37:ee:98:99:2c:46:6a:
40:e7:9f:7c:19:99:d9:70:08:df:ab:9e:50:dd:2b:
3d:08:23:c1:c2:3f:59:5f:c8:f2:c8:14:be:70:a9:
ff:19:4c:f6:e6:26:96:d1:a1:3f:0e:fe:76:93:91:
ea:ce:30:ba:6b:f7:e2:4d:58:45:c7:ac:07:f8:e4:
82:39:e0:40:a6:f4:e8:f2:7e:62:de:9a:58:b1:e8:
d3:f2:9c:c8:eb:b6:b9:f5:6d:63:ce:33:dc:a9:93:
e1:0e:0b:38:90:06:ba:7b:84:62:e5:33:27:95:e6:
16:a3:48:41:9e:35:50:67:10:b4:4f:b4:e9:03:ba:
15:0c:c9:b9:e5:06:52:20:84:dd:09:dd:67:c8:3d:
c5:0e:a8:17:e5:6d:d8:92:4a:4f:71:61:70:d1:71:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:55:16:7F:B3:82:E5:46:5F:26:87:A3:FA:28:1A:2E:7D:C5:94
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f8:7e:a1:9f:37:d9:fc:be:bb:73:af:26:d9:a7:3a:24:5d:
1f:9f:79:4d:b5:b2:4e:07:43:7c:dd:d6:a0:86:b8:8e:1a:76:
1c:11:83:c6:e3:f7:c8:76:f8:3e:f8:0d:b0:ae:55:36:8e:4c:
11:da:1e:a9:aa:14:3f:3a:86:67:cd:a9:96:fb:37:33:9e:e2:
09:31:17:df:3a:c8:0a:3e:d6:9b:be:61:47:1c:0e:ea:b5:7e:
7a:e9:da:e0:dd:9a:5f:66:fa:f5:1c:8c:ca:33:d3:1a:89:dc:
0f:c8:e0:f0:00:eb:f3:b9:36:0b:9e:f8:0c:3b:00:80:78:4f:
52:e7:58:68:dd:fd:95:f2:83:cf:5a:bb:90:b2:3b:fb:45:69:
9e:f1:69:57:0f:83:d2:95:02:66:70:b4:5d:6c:03:fa:21:26:
44:32:3a:c5:e3:e5:04:c8:3c:17:44:25:8c:2b:b2:1a:8b:5e:
b4:49:4f:67:e9:59:00:2a:e2:68:a1:71:eb:8b:64:a8:3e:cc:
04:63:2d:7b:8b:13:bb:1a:29:4f:8a:91:4b:61:0e:80:d3:60:
16:7c:41:f5:c2:92:c3:d2:d3:36:d9:2c:40:bf:d4:74:e9:c9:
42:f3:c5:c7:5c:79:97:f2:ce:b3:f8:41:41:cc:dc:9f:b8:5f:
c1:78:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:33 2026 by rpki-client