This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft File: olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json) Hash identifier: kbk5OXZYrczoDJ8TLJ8hCOAU7yQeGc4KKNbnLsIxiaE= Subject key identifier: 7A:4F:C8:F2:2C:31:7E:A1:31:EE:86:C9:6C:A1:85:E8:0D:73:CE:B0 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft Manifest number: 0A Signing time: Fri 05 Dec 2025 05:52:50 +0000 Manifest this update: Fri 05 Dec 2025 05:52:49 +0000 Manifest next update: Fri 12 Dec 2025 05:52:49 +0000 Files and hashes: 1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: x2Y1FiqjDLp443Bjc9BK4j2qnGxKUe0Y7Qb3mDsW+Dw=) 2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: Xxcnzz4UUYNFed71QsmRkeBUQBijpW8VtIcJqXdOAKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Dec 5 05:52:49 2025 GMT Not After : Dec 12 05:52:49 2025 GMT Subject: CN=69327332-284d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:d8:7a:44:cd:59:d7:2c:44:d3:3e:cf:8a: 77:86:a7:73:be:10:c5:f8:6a:34:cb:2d:4f:92:99: e4:0e:41:fe:9b:37:51:e1:c9:36:48:27:58:7b:01: 4a:cd:8e:f0:88:84:c7:05:0e:1f:77:a2:d8:db:7d: a5:8c:a0:e4:17:fd:d4:e0:84:22:50:6e:45:d7:46: 81:3a:73:98:30:9e:ff:f1:c2:bc:8d:af:97:14:08: e9:26:4c:96:01:ec:fe:0c:26:c7:a2:37:52:de:77: eb:cc:88:c8:93:e3:25:e0:d6:95:7f:60:c1:4e:5b: 3e:c7:ba:31:ba:44:b6:ae:8f:e3:5f:2d:df:32:6a: bc:af:35:e5:d9:ea:fc:64:c9:9b:97:74:48:eb:19: 59:91:86:73:77:f9:96:03:bd:15:e4:bf:6e:d6:df: ba:89:27:34:26:80:43:5b:9d:c4:9a:2d:a8:71:e9: d2:72:de:cb:10:c4:93:45:76:81:f4:6d:60:6f:b3: 1d:85:fe:d8:bf:a0:1e:0b:ba:e3:f2:4d:ef:1e:f9: 07:a3:b5:87:75:45:07:21:c9:38:22:e8:6f:27:6e: ad:a6:a4:cb:19:76:5d:03:50:c3:64:59:47:c7:b2: 0c:75:cd:ab:fa:55:a0:69:c3:4b:d1:be:df:17:f0: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4F:C8:F2:2C:31:7E:A1:31:EE:86:C9:6C:A1:85:E8:0D:73:CE:B0 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:72:bb:12:b8:2c:bd:26:1f:a8:72:9e:72:9e:15:18:41:40: 66:61:32:9a:51:8d:a3:a9:46:01:05:79:ea:93:b8:ac:63:48: c3:d3:57:59:ac:91:89:54:ef:32:12:d3:b2:f4:c4:1a:1d:07: 8b:ba:7d:44:7b:b6:76:27:de:ba:92:27:0c:db:30:2b:63:73: d9:a8:7a:ab:71:52:0e:ae:2e:ab:db:5b:1a:c2:36:8a:68:60: 05:ef:ee:0a:20:84:d3:33:da:3c:b9:48:94:d1:b1:4f:20:a5: c3:d7:6d:d8:fc:d1:3e:23:4f:4a:2b:9d:aa:04:67:ca:28:ff: 04:a1:fc:39:41:6b:ed:a3:d1:45:9e:3a:32:7c:d4:a0:a8:40: 0c:3d:a2:7b:c1:47:90:b7:4e:23:57:b4:71:58:d3:0f:e1:c7: 61:47:6b:3f:4f:5e:37:3c:0b:0d:1b:da:fe:9d:e5:91:f5:eb: 35:72:0d:73:db:0a:22:44:77:af:eb:d4:b4:ce:ac:d9:d0:a1: c6:e7:36:22:8f:5a:90:0d:ed:96:cf:29:29:6e:d0:05:2c:fe: 40:8d:ed:6f:5a:64:04:14:84:d4:41:be:dd:3d:f2:fb:54:c7: 96:be:25:02:06:f2:0e:a0:fa:da:76:3d:98:50:6e:c2:1f:69: 91:4a:46:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNTEyMDUwNTUyNDlaFw0yNTEyMTIwNTUyNDlaMBgxFjAUBgNV BAMTDTY5MzI3MzMyLTI4NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsudh6RM1Z1yxE0z7PineGp3O+EMX4ajTLLU+SmeQOQf6bN1HhyTZIJ1h7AUrN jvCIhMcFDh93otjbfaWMoOQX/dTghCJQbkXXRoE6c5gwnv/xwryNr5cUCOkmTJYB 7P4MJseiN1Led+vMiMiT4yXg1pV/YMFOWz7HujG6RLauj+NfLd8yaryvNeXZ6vxk yZuXdEjrGVmRhnN3+ZYDvRXkv27W37qJJzQmgENbncSaLahx6dJy3ssQxJNFdoH0 bWBvsx2F/ti/oB4LuuPyTe8e+QejtYd1RQchyTgi6G8nbq2mpMsZdl0DUMNkWUfH sgx1zav6VaBpw0vRvt8X8N4vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUek/I8iwx fqEx7obJbKGF6A1zzrAwHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OThEL0UzOUQ4RTBDQzhFQzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNm T1N0WWF6QW1oQy0wOGx4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlyuxK4LL0mH6hynnKeFRhBQGZhMppRjaOpRgEFeeqTuKxjSMPTV1ms kYlU7zIS07L0xBodB4u6fUR7tnYn3rqSJwzbMCtjc9moeqtxUg6uLqvbWxrCNopo YAXv7goghNMz2jy5SJTRsU8gpcPXbdj80T4jT0ornaoEZ8oo/wSh/DlBa+2j0UWe OjJ81KCoQAw9onvBR5C3TiNXtHFY0w/hx2FHaz9PXjc8Cw0b2v6d5ZH16zVyDXPb CiJEd6/r1LTOrNnQocbnNiKPWpAN7ZbPKSlu0AUs/kCN7W9aZAQUhNRBvt098vtU x5a+JQIG8g6g+tp2PZhQbsIfaZFKRtg= -----END CERTIFICATE-----Generated at Sat Dec 6 21:12:16 2025 by rpki-client