This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: WTEUTZ30AoKnpO+zkomEX8NVGhQtqlxv35z/Snd5wF0= Subject key identifier: 7D:49:AA:DB:49:90:69:0B:D0:F6:0B:1D:73:8F:A0:D4:C7:38:E1:12 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 0820 Signing time: Sat 24 Jan 2026 20:21:18 +0000 Manifest this update: Sat 24 Jan 2026 20:21:17 +0000 Manifest next update: Sat 31 Jan 2026 20:21:17 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: y7hJu1GYBs+3CjsxoJhRDI2RoPoOCB85sCwfYCjmBRs=) 2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: eZNeXm4nQEQxR4xjyKWddfWZzO4YMno8B7hOjNNuzA4=) 3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: 4m4gcDBDEGLhIqThmo+gOWnFoA1rBH2fxZa2WsNnbcQ=) 4: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: O2jis8H/LjOcx4S7CbvRkc2kU/tbO3dAf3gniLEQHkI=) 5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: M6qmfQhNqaFBZk6GUbAn8MkOvEVJ93hzUV5R5uLKCj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Jan 24 20:21:17 2026 GMT Not After : Jan 31 20:21:17 2026 GMT Subject: CN=697529be-165d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:9e:29:02:ec:ad:58:f4:ac:c0:7a:3b:e1: ef:f6:06:0f:44:78:09:60:fb:f1:b3:cc:4a:24:b4: 87:79:93:96:3b:bf:1c:19:3f:ef:e3:f0:e7:d4:3e: a7:cd:88:8c:b4:8a:e5:b3:5b:fb:f3:c5:2b:c8:d9: 83:00:39:3e:41:d1:7d:28:b5:e9:79:83:72:e8:3c: 80:f3:02:3f:fc:cd:0f:72:49:2b:18:d0:8a:84:5b: c8:03:a1:6a:13:36:ec:96:ce:a0:59:92:e6:35:e0: 06:d3:05:ad:b0:0c:31:3e:b1:be:3a:a0:d0:88:a2: c3:e1:3f:1b:44:d6:ed:27:48:6b:31:d3:0e:40:4e: 26:7e:f3:d4:8c:34:5c:98:02:60:8a:8b:d0:9c:27: d0:30:0f:f8:5b:76:b8:5e:b8:d6:14:21:a5:bf:ab: 6b:4d:ca:20:e2:da:e8:a8:c0:64:3a:c0:f8:de:b0: 35:02:f9:2a:74:9a:9c:95:b8:4d:05:6c:35:78:b7: fb:85:5a:e5:f6:4e:7e:ba:ce:2a:c9:ab:a0:91:af: 22:27:0b:76:26:6c:f9:ef:d8:bd:f0:e5:8e:27:a4: 9a:10:d5:7a:aa:20:2f:3b:74:91:64:c0:2c:36:38: 73:25:38:f6:92:49:41:a1:cc:aa:3f:0f:15:9a:31: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:49:AA:DB:49:90:69:0B:D0:F6:0B:1D:73:8F:A0:D4:C7:38:E1:12 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:46:fe:6c:91:41:b5:0c:13:a4:45:dd:8e:1d:c8:91:6b:c8: 86:0d:2e:8d:5e:86:7b:e7:0f:c5:a9:b0:a7:3d:06:ad:1d:c8: 03:64:65:d1:fe:fc:54:65:9d:04:06:ae:46:8c:88:9f:a9:8d: df:7a:7f:d9:19:8e:60:0b:de:f4:91:d0:07:91:57:e0:03:4e: 4f:0e:c7:dd:9a:ea:67:8c:b6:80:50:b5:7e:0e:90:33:4c:c5: 70:7b:35:1a:5e:80:6a:52:15:a7:b2:e9:ab:4a:02:38:4a:8e: 4c:d6:b8:01:99:b0:52:7a:85:9b:5f:6d:b7:1f:d8:a6:e5:07: 09:63:6b:e6:03:03:49:73:fb:d5:cc:6c:42:b4:a9:9b:55:e2: e3:5f:b3:b5:41:28:6a:21:ae:bc:d4:fe:03:9d:b7:d4:a5:bc: c4:08:fa:40:3e:8d:d5:38:b3:1e:c8:b3:7f:1e:fc:67:12:31: 22:cd:0e:3e:62:e4:29:d3:42:59:bd:91:a3:7c:04:33:e2:3a: 46:34:a8:85:d9:f3:c9:98:28:4d:a7:0c:b1:ba:69:4d:df:72: e0:bf:be:0a:ab:7f:8d:29:91:ef:c9:ce:17:65:20:bc:bd:2b: 07:bb:a2:f8:3e:df:e8:23:08:c2:ab:52:f4:cc:91:de:79:a8: df:20:a6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjYwMTI0MjAyMTE3WhcNMjYwMTMxMjAyMTE3WjAYMRYwFAYD VQQDDA02OTc1MjliZS0xNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGieKQLsrVj0rMB6O+Hv9gYPRHgJYPvxs8xKJLSHeZOWO78cGT/v4/Dn1D6n zYiMtIrls1v788UryNmDADk+QdF9KLXpeYNy6DyA8wI//M0PckkrGNCKhFvIA6Fq Ezbsls6gWZLmNeAG0wWtsAwxPrG+OqDQiKLD4T8bRNbtJ0hrMdMOQE4mfvPUjDRc mAJgiovQnCfQMA/4W3a4XrjWFCGlv6trTcog4troqMBkOsD43rA1AvkqdJqclbhN BWw1eLf7hVrl9k5+us4qyaugka8iJwt2Jmz579i98OWOJ6SaENV6qiAvO3SRZMAs NjhzJTj2kklBocyqPw8VmjEPLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1JqttJ kGkL0PYLHXOPoNTHOOESMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzRv5skUG1DBOkRd2OHciRa8iGDS6NXoZ75w/FqbCnPQatHcgDZGXR /vxUZZ0EBq5GjIifqY3fen/ZGY5gC970kdAHkVfgA05PDsfdmupnjLaAULV+DpAz TMVwezUaXoBqUhWnsumrSgI4So5M1rgBmbBSeoWbX223H9im5QcJY2vmAwNJc/vV zGxCtKmbVeLjX7O1QShqIa681P4DnbfUpbzECPpAPo3VOLMeyLN/HvxnEjEizQ4+ YuQp00JZvZGjfAQz4jpGNKiF2fPJmChNpwyxumlN33Lgv74Kq3+NKZHvyc4XZSC8 vSsHu6L4Pt/oIwjCq1L0zJHeeajfIKaq -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:53 2026 by rpki-client