This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: qpBEeVSWm6E/AFa5LpkWj8FLYhgUqCtPUkrx83z5DM8= Subject key identifier: D2:10:E4:20:38:E3:05:C2:F8:FB:A0:6A:1F:37:FE:F7:AA:39:C6:F4 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 5D Signing time: Sat 17 Jan 2026 06:12:29 +0000 Manifest this update: Sat 17 Jan 2026 06:12:28 +0000 Manifest next update: Sat 24 Jan 2026 06:12:28 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: yPj/VKP3Sul1mkyGV3Uc4ATVULnBaCB7vU3n5AWoxFg=) 2: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: Jiabvy3OMisNM5GgqkjfS6kn/xGNTzgJB34Y1DjTY/g=) 3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w=) 4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: J6NfxVye//wKbH6luOaipzXoE8gflP1Zb4ROZKBwOvw=) 5: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: KEMH/vKSPcAkV3P1pUdnSj1om5WSjvDW91I/czL5aFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jan 17 06:12:28 2026 GMT Not After : Jan 24 06:12:28 2026 GMT Subject: CN=696b284d-cb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:1a:1a:1c:96:31:b6:61:00:1d:bf:72:93: d7:25:82:76:f2:f9:1a:ed:03:6c:e6:a2:e0:82:7f: ff:15:fe:51:8e:56:b1:d0:54:2c:12:1d:06:1b:66: 40:c9:15:bd:a8:82:f7:4c:e2:e2:d8:1f:de:f4:2a: 57:51:c6:46:35:1e:24:1b:31:c3:5f:ec:ee:ed:80: 5f:d4:b6:33:51:18:56:56:7c:2f:c9:7d:b4:25:ab: 48:21:35:ed:32:b9:e4:f3:0f:15:c6:1e:30:3a:2e: 5c:51:61:4c:c7:73:87:aa:47:24:ec:a1:7f:c1:f9: f7:be:1a:16:03:01:c6:f5:41:b5:5d:95:4e:b5:27: 53:60:20:8b:a4:75:f3:dd:a9:a5:b9:4a:3a:d1:ee: 8f:4e:08:88:a3:11:41:dd:0e:06:b5:2d:d1:3a:1e: 84:44:4c:e8:33:79:6e:8e:2d:1f:8c:ed:2d:43:aa: 27:95:3e:76:16:fe:53:b4:af:99:a8:6a:f4:85:5c: 32:fc:3c:d2:e3:84:a3:89:ff:75:0f:7a:04:90:7a: c1:a5:f5:0b:1d:03:28:0f:90:79:4e:d9:91:25:d9: 84:2f:df:87:0b:ec:97:91:f1:85:f6:39:2d:39:71: 32:54:cd:97:ea:5a:49:6c:43:1a:8e:48:68:7f:ef: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:10:E4:20:38:E3:05:C2:F8:FB:A0:6A:1F:37:FE:F7:AA:39:C6:F4 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ae:8a:5e:6b:06:97:6a:95:e1:78:b9:f8:40:c0:9a:20:15: c7:35:fc:e3:01:bd:7f:41:b9:03:36:f3:53:bd:17:11:f0:2f: 91:5b:33:0d:30:40:f0:86:58:be:44:c5:30:0a:bf:17:41:e9: 6f:64:d2:5e:f6:9f:28:3e:17:73:78:12:c0:ef:56:1d:31:f8: 5a:40:53:7d:de:3a:93:c6:11:ee:6e:7d:da:03:27:0c:7e:00: 89:3b:80:d1:ab:35:4c:3c:a6:fd:ce:89:da:ba:38:63:97:d0: 9c:44:5c:54:ac:53:e6:6c:6f:a6:85:41:17:9f:a4:81:6f:35: 35:36:bf:f0:f6:9b:2c:bc:c2:0f:d3:b7:70:ac:a2:c9:82:e9: 65:b4:d6:ad:7b:71:17:e8:7e:73:1f:91:d7:3c:c8:45:71:52: c9:80:45:a2:d0:74:10:b1:84:f6:65:68:8a:8e:97:6f:40:af: 93:1c:71:fc:cd:7b:af:85:ee:6e:d4:c7:89:d8:5a:d1:2a:b2: db:47:90:e7:01:01:63:7d:81:89:46:6f:9d:5c:a5:c7:00:72: ff:49:44:f1:bd:dd:ec:eb:09:db:fd:5c:9e:94:b6:4d:35:b0: 18:7c:ed:19:41:ed:a7:28:07:22:80:c6:f5:89:fc:46:68:4f: 4b:c2:0f:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNjAxMTcwNjEyMjhaFw0yNjAxMjQwNjEyMjhaMBgxFjAUBgNV BAMMDTY5NmIyODRkLWNiM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChmBoaHJYxtmEAHb9yk9clgnby+RrtA2zmouCCf/8V/lGOVrHQVCwSHQYbZkDJ Fb2ogvdM4uLYH970KldRxkY1HiQbMcNf7O7tgF/UtjNRGFZWfC/JfbQlq0ghNe0y ueTzDxXGHjA6LlxRYUzHc4eqRyTsoX/B+fe+GhYDAcb1QbVdlU61J1NgIIukdfPd qaW5SjrR7o9OCIijEUHdDga1LdE6HoRETOgzeW6OLR+M7S1DqieVPnYW/lO0r5mo avSFXDL8PNLjhKOJ/3UPegSQesGl9QsdAygPkHlO2ZEl2YQv34cL7JeR8YX2OS05 cTJUzZfqWklsQxqOSGh/7+qHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0hDkIDjj BcL4+6BqHzf+96o5xvQwHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QTY5L0NCMUNGRTg0NkM0QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dn WFpzMnNPX2ZkMERhNy1RRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuuil5rBpdqleF4ufhAwJogFcc1/OMBvX9BuQM281O9FxHwL5FbMw0w QPCGWL5ExTAKvxdB6W9k0l72nyg+F3N4EsDvVh0x+FpAU33eOpPGEe5ufdoDJwx+ AIk7gNGrNUw8pv3Oidq6OGOX0JxEXFSsU+Zsb6aFQRefpIFvNTU2v/D2myy8wg/T t3CsosmC6WW01q17cRfofnMfkdc8yEVxUsmARaLQdBCxhPZlaIqOl29Ar5MccfzN e6+F7m7Ux4nYWtEqsttHkOcBAWN9gYlGb51cpccAcv9JRPG93ezrCdv9XJ6Utk01 sBh87RlB7acoByKAxvWJ/EZoT0vCD0I= -----END CERTIFICATE-----Generated at Sun Jan 18 10:10:19 2026 by rpki-client