This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: 3IhtNd6Aql21W5QFNPZrlgs9eITi43NG0sEp2XVFFCw= Subject key identifier: B7:E7:23:3B:17:9C:C6:61:F9:EB:43:15:40:53:18:48:70:BF:34:3C Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0AAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0A94 Signing time: Sat 24 Jan 2026 19:02:54 +0000 Manifest this update: Sat 24 Jan 2026 19:02:54 +0000 Manifest next update: Sat 31 Jan 2026 19:02:54 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: 9gauEOnA/8Ty83Pyjzull+GDHvrjLU2+ezogyyOLQHI=) 2: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: wxcY42YjsuRVvMQ/m7CB1YYbOqzcrhZ00l1RvoVq8ek=) 3: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: NLByGRv6anI6tIVcb5p+1Xch3v2zcxtkN/xSf48UIQU=) 4: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: YgLuhvSqEin+i5SUp1az8jMscHcAbxhVSlyBc8B1vlM=) 5: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DPmiaEz6M1OneZ4z1YKj44DcnnHVGKuSYV+vSNBuquw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Jan 24 19:02:54 2026 GMT Not After : Jan 31 19:02:54 2026 GMT Subject: CN=6975175e-8dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:70:8e:03:ca:d7:c0:e1:51:f7:5e:bc:33: cf:bf:4a:50:90:b5:01:d1:0d:c5:a0:89:04:0c:0d: f0:f5:c8:70:55:8e:51:bf:01:fb:74:9d:7e:87:ae: 7d:b1:00:ff:95:29:75:fd:10:c1:dd:85:d9:df:ed: 10:58:4b:be:15:f7:f8:d0:c7:49:4a:b5:cc:d0:75: eb:a4:8c:f0:32:f8:c5:c1:dc:b8:a1:75:3c:ed:ed: fb:a5:79:40:a1:52:d4:64:a9:29:03:eb:55:ff:de: be:ab:42:3c:80:8a:02:ca:62:58:ee:73:2b:8a:82: 61:71:d3:c8:5e:c7:29:38:44:79:87:10:15:4f:fb: 05:6c:c8:e2:cb:66:66:e1:ff:41:3d:38:1d:fe:1a: af:dc:2c:5c:81:eb:bd:e6:c0:6c:be:b7:ce:78:fd: fd:98:49:06:ef:6a:9a:d8:33:19:14:28:84:08:9f: e5:72:5d:33:56:65:b1:ab:7e:8e:5d:21:24:36:09: df:c1:b1:bb:c5:41:05:fd:2b:ff:59:2c:e4:51:c3: c7:b0:3e:ea:f8:f8:b3:82:06:db:e4:4b:ee:56:e1: a9:8b:d8:c6:a8:48:8c:0b:72:5d:07:d8:10:62:56: 6b:c1:de:f5:d0:dc:0b:02:60:28:09:26:c8:1f:e9: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E7:23:3B:17:9C:C6:61:F9:EB:43:15:40:53:18:48:70:BF:34:3C X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9e:14:84:e9:3d:3b:bd:2e:bd:a0:10:f2:97:ea:30:fb:e8: 13:41:54:6f:e7:5a:1a:25:c7:46:20:43:df:32:83:f3:ba:79: 1a:7d:51:f5:7f:44:3b:4e:81:a6:71:e9:57:8b:b0:74:18:d0: 73:1f:f7:72:b5:9e:54:1b:92:cb:1a:ab:54:6d:ba:cb:ed:5a: 62:55:49:93:bc:fc:45:bb:8b:33:4f:c3:dc:47:ee:10:d4:74: fa:0d:c6:2f:a3:cb:26:87:97:42:ef:5a:0c:cd:15:c4:ba:70: 06:f1:94:7e:50:02:0f:32:3e:a3:b1:08:4f:bc:cc:1e:60:ec: ba:bc:f2:22:29:61:49:8c:8c:48:06:59:b4:a2:73:8b:43:d5: 4e:f2:5d:54:04:8b:8a:7a:44:f2:27:5b:d0:92:1e:67:0e:98: 4b:93:94:8d:4d:1a:df:41:0d:99:6e:62:37:90:51:54:50:6d: a8:32:db:b7:85:18:b6:10:da:57:bb:58:61:f9:8e:8b:64:3b: 70:ca:8d:2a:46:87:7c:18:84:d4:d8:d4:5d:9f:41:0e:05:63: 8f:ef:a0:dd:bc:8f:75:8e:a4:0e:d3:4f:e9:89:85:6e:f2:f9: a2:aa:7b:95:87:28:44:90:7e:45:69:ee:12:45:ed:2d:4c:32: d9:c8:6a:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjYwMTI0MTkwMjU0WhcNMjYwMTMxMTkwMjU0WjAYMRYwFAYD VQQDDA02OTc1MTc1ZS04ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCxwjgPK18DhUfdevDPPv0pQkLUB0Q3FoIkEDA3w9chwVY5RvwH7dJ1+h659 sQD/lSl1/RDB3YXZ3+0QWEu+Fff40MdJSrXM0HXrpIzwMvjFwdy4oXU87e37pXlA oVLUZKkpA+tV/96+q0I8gIoCymJY7nMrioJhcdPIXscpOER5hxAVT/sFbMjiy2Zm 4f9BPTgd/hqv3Cxcgeu95sBsvrfOeP39mEkG72qa2DMZFCiECJ/lcl0zVmWxq36O XSEkNgnfwbG7xUEF/Sv/WSzkUcPHsD7q+Pizggbb5EvuVuGpi9jGqEiMC3JdB9gQ YlZrwd710NwLAmAoCSbIH+lrVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfnIzsX nMZh+etDFUBTGEhwvzQ8MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASnhSE6T07vS69oBDyl+ow++gTQVRv51oaJcdGIEPfMoPzunkafVH1 f0Q7ToGmcelXi7B0GNBzH/dytZ5UG5LLGqtUbbrL7VpiVUmTvPxFu4szT8PcR+4Q 1HT6DcYvo8smh5dC71oMzRXEunAG8ZR+UAIPMj6jsQhPvMweYOy6vPIiKWFJjIxI Blm0onOLQ9VO8l1UBIuKekTyJ1vQkh5nDphLk5SNTRrfQQ2ZbmI3kFFUUG2oMtu3 hRi2ENpXu1hh+Y6LZDtwyo0qRod8GITU2NRdn0EOBWOP76DdvI91jqQO00/piYVu 8vmiqnuVhyhEkH5Fae4SRe0tTDLZyGqG -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:43 2026 by rpki-client