This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json) Hash identifier: YZEIPajqc2oMB7rtU1If0Ekp8jKnEUe2k7LyH7giG+w= Subject key identifier: C8:02:7B:54:1A:AC:9C:45:14:AA:9F:7F:FF:88:CE:BE:4F:67:96:AF Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft Manifest number: 19 Signing time: Sat 17 Jan 2026 06:53:52 +0000 Manifest this update: Sat 17 Jan 2026 06:53:51 +0000 Manifest next update: Sat 24 Jan 2026 06:53:51 +0000 Files and hashes: 1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: oH5Huv3JKwTCSBuHlJAeU7rXeNmQH6nu7bpmv2/gipw=) 2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: Ohq89QpQ4h6890Ezis7aDeUdxD3YflZSmZSGNInyLts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Jan 17 06:53:51 2026 GMT Not After : Jan 24 06:53:51 2026 GMT Subject: CN=696b3200-a8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:68:15:e8:44:d9:03:4c:65:12:ab:1e:5f: 7f:9f:3a:93:8a:89:70:71:9a:fd:f1:85:8c:6f:7c: 3c:8b:b0:44:bd:e0:50:7c:a0:35:f6:b8:21:b6:dd: dd:50:e4:c3:ea:ac:74:9d:23:40:57:7f:63:d8:2d: 49:d5:86:b6:d7:e0:48:5c:d0:91:f6:d7:50:07:65: 18:73:26:91:a5:5a:53:49:16:c6:6c:6d:96:27:68: 95:10:bc:98:ea:4e:5d:4e:b6:cf:38:e1:78:55:f6: 1b:b7:4d:6c:fd:cd:1e:5f:9f:d5:a7:3d:a5:90:1c: 4e:a8:fb:2f:d0:47:9c:bf:c3:2c:90:fb:f1:0e:25: c0:12:96:a5:36:62:02:53:d2:51:42:3a:59:90:70: 04:07:60:1f:28:86:95:98:13:95:44:16:ad:62:d9: d0:3a:ef:51:37:dc:21:97:dc:9a:95:bc:26:8b:96: 7c:8c:8b:28:cd:ec:b5:43:78:98:83:c3:52:0d:89: 1d:f6:92:63:0e:9a:90:70:b8:3f:b6:a3:ae:b9:71: fe:82:24:8e:7a:16:ab:31:ed:e0:07:07:55:72:a0: 83:2e:c6:d8:51:57:81:fa:59:b3:53:ad:67:cf:c9: 9c:30:61:ce:6a:cd:e9:4c:91:57:97:3f:85:90:c2: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:7B:54:1A:AC:9C:45:14:AA:9F:7F:FF:88:CE:BE:4F:67:96:AF X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:81:06:e2:7c:08:eb:c1:27:16:f3:71:0b:e8:38:0a:e2:83: 8a:6e:c2:ba:ea:99:db:0c:47:d7:9b:c7:d7:ba:1b:42:00:86: 4f:bc:3b:05:22:31:b4:b0:0b:28:42:96:05:d4:e5:82:e2:ab: 6b:60:a0:01:9a:9e:9f:40:d7:24:dd:9c:53:57:7c:8e:39:85: 37:be:f2:97:63:35:05:33:ff:d8:1a:d1:fe:da:af:69:68:31: e2:8a:80:f3:4c:f7:37:19:33:64:9d:3c:c5:55:55:d0:02:28: 98:7d:f2:6f:6b:ee:47:b0:4d:49:56:e4:bd:b4:30:ec:e3:77: 0d:8c:f3:bd:ca:df:72:f1:11:f3:fb:e3:eb:d9:51:b5:97:3b: 45:2c:af:c4:e8:2e:db:dc:1c:50:99:db:e2:08:c7:3b:07:69: 7d:f6:2e:40:c3:8a:b3:bd:d4:5b:36:78:d2:1f:bf:d8:c2:eb: da:f2:12:7e:b3:3c:a5:21:eb:c0:10:46:7a:70:99:dd:b5:72: 94:fa:f2:b9:9a:12:68:7d:59:d6:54:3f:47:76:bf:50:de:de: fd:4c:0d:b0:aa:ba:ed:b7:3b:20:f7:1d:20:34:b5:71:3d:8d: 1d:39:2a:1d:65:93:0d:e4:da:17:67:14:3c:f6:5b:20:47:c9: 14:ee:66:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNjAxMTcwNjUzNTFaFw0yNjAxMjQwNjUzNTFaMBgxFjAUBgNV BAMMDTY5NmIzMjAwLWE4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZc2gV6ETZA0xlEqseX3+fOpOKiXBxmv3xhYxvfDyLsES94FB8oDX2uCG23d1Q 5MPqrHSdI0BXf2PYLUnVhrbX4Ehc0JH211AHZRhzJpGlWlNJFsZsbZYnaJUQvJjq Tl1Ots844XhV9hu3TWz9zR5fn9WnPaWQHE6o+y/QR5y/wyyQ+/EOJcASlqU2YgJT 0lFCOlmQcAQHYB8ohpWYE5VEFq1i2dA671E33CGX3JqVvCaLlnyMiyjN7LVDeJiD w1INiR32kmMOmpBwuD+2o665cf6CJI56Fqsx7eAHB1VyoIMuxthRV4H6WbNTrWfP yZwwYc5qzelMkVeXP4WQwt65AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyAJ7VBqs nEUUqp9//4jOvk9nlq8wHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RD YmFJZmI3WUJMR0F3NkZ2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMiBBuJ8COvBJxbzcQvoOArig4puwrrqmdsMR9ebx9e6G0IAhk+8OwUi MbSwCyhClgXU5YLiq2tgoAGanp9A1yTdnFNXfI45hTe+8pdjNQUz/9ga0f7ar2lo MeKKgPNM9zcZM2SdPMVVVdACKJh98m9r7kewTUlW5L20MOzjdw2M873K33LxEfP7 4+vZUbWXO0Usr8ToLtvcHFCZ2+IIxzsHaX32LkDDirO91Fs2eNIfv9jC69ryEn6z PKUh68AQRnpwmd21cpT68rmaEmh9WdZUP0d2v1De3v1MDbCquu23OyD3HSA0tXE9 jR05Kh1lkw3k2hdnFDz2WyBHyRTuZsg= -----END CERTIFICATE-----Generated at Sun Jan 18 03:00:45 2026 by rpki-client