This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: Ku+f76ITE2IFisUcSO1RUnLVvQIAXOEkMxbFKE8ihCo= Subject key identifier: 2E:DE:B0:B8:83:5C:E2:64:23:D0:49:FE:94:A3:0D:F6:7A:29:1E:19 Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: 13 Signing time: Sat 17 Jan 2026 02:58:58 +0000 Manifest this update: Sat 17 Jan 2026 02:58:57 +0000 Manifest next update: Sat 24 Jan 2026 02:58:57 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: WRUIVEBhZnvfrGdDnXyOtmqsJRbMxfnPF2l0lF7iIn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 02:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Jan 17 02:58:57 2026 GMT Not After : Jan 24 02:58:57 2026 GMT Subject: CN=696afaf2-0b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:6e:c8:5f:1b:f9:c5:8f:da:be:7c:e3:3a: 59:72:b8:52:3d:6a:f7:6d:34:a2:5c:94:fb:5e:a4: 8a:e9:d4:04:e1:72:af:16:ff:36:0d:49:d6:21:82: 33:ff:f8:a5:9d:71:22:18:db:79:31:31:26:e7:ac: 86:95:fa:69:83:6d:ac:b7:64:66:e5:a6:fd:e8:a1: 48:df:23:81:03:5a:f8:7c:d0:9c:27:64:88:3e:82: 6f:21:b8:be:59:c8:2a:c8:da:15:8f:42:09:fb:8d: 19:df:5b:01:e3:be:a2:bd:f3:86:24:1a:7a:a6:90: c1:9c:c9:dd:d5:5a:79:82:5b:5f:be:37:2c:63:fa: b3:77:43:9d:cf:0a:8c:74:27:d1:f5:5c:44:cf:da: 25:d9:9b:43:79:73:58:6b:27:21:bd:22:b7:99:28: d3:5f:04:66:74:15:e0:8e:2a:2a:d6:de:3f:5a:a1: dc:71:95:af:68:a0:89:6c:4f:6e:85:e9:1e:af:8d: 00:4e:2e:f1:95:57:b4:69:16:3b:09:74:4d:ed:c5: 41:10:47:ae:c8:2d:8c:c6:14:d6:49:7d:ca:87:6e: d7:41:59:47:8f:d8:9b:e4:a3:c7:22:b4:2d:83:68: f1:2e:b7:0c:e2:31:87:6e:dc:93:3d:84:be:6e:b1: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DE:B0:B8:83:5C:E2:64:23:D0:49:FE:94:A3:0D:F6:7A:29:1E:19 X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:2d:c7:24:bd:f0:a7:13:a5:46:ad:e9:e4:e2:15:5c:4a: bb:5d:97:87:b3:37:e8:74:0e:c8:ba:0e:78:a2:7c:f9:8b:37: e0:3e:bc:e7:cd:3c:3e:4f:4a:ad:a4:4b:56:b1:ca:9a:d4:bd: c1:60:dd:40:b4:de:84:22:7c:f0:30:96:b2:89:73:c4:79:04: 2a:a9:91:0c:1c:60:18:74:8d:45:de:bf:90:d6:a5:55:e6:ca: 6b:65:23:98:b4:8f:59:af:b1:b9:2c:d9:2b:3c:19:64:f3:0d: f9:19:04:37:43:bf:14:cb:92:0d:ce:36:82:70:0b:95:8f:59: 07:a3:c6:5d:96:37:26:6f:6e:a6:6f:1c:25:fd:7e:8c:e7:d5: 19:74:09:2e:32:97:71:4a:cf:51:d8:30:a0:36:23:23:90:36: be:08:5a:69:29:60:d0:34:0c:01:0d:9d:db:9f:3d:52:82:79: 68:4f:63:11:5c:9b:41:21:41:17:f8:b8:b3:3a:83:70:6d:56: 54:8f:59:21:f5:f6:d5:73:77:01:38:bb:f7:a9:a2:fa:36:39: 49:96:56:b5:e3:bb:e2:36:32:2b:4f:ea:bf:9c:6b:9a:be:1d: 20:4d:37:96:08:a1:65:c1:4e:f0:b4:3d:e9:ea:25:d5:b1:12: 0c:9f:1a:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND MkNFMkVEOTAeFw0yNjAxMTcwMjU4NTdaFw0yNjAxMjQwMjU4NTdaMBgxFjAUBgNV BAMMDTY5NmFmYWYyLTBiMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKSG7IXxv5xY/avnzjOllyuFI9avdtNKJclPtepIrp1AThcq8W/zYNSdYhgjP/ +KWdcSIY23kxMSbnrIaV+mmDbay3ZGblpv3ooUjfI4EDWvh80JwnZIg+gm8huL5Z yCrI2hWPQgn7jRnfWwHjvqK984YkGnqmkMGcyd3VWnmCW1++Nyxj+rN3Q53PCox0 J9H1XETP2iXZm0N5c1hrJyG9IreZKNNfBGZ0FeCOKirW3j9aodxxla9ooIlsT26F 6R6vjQBOLvGVV7RpFjsJdE3txUEQR67ILYzGFNZJfcqHbtdBWUeP2Jvko8citC2D aPEutwziMYdu3JM9hL5usUvTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULt6wuINc 4mQj0En+lKMN9nopHhkwHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5 NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu b3ZNb2ZYaFNXck1MT0x0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtfLcckvfCnE6VGrenk4hVcSrtdl4ezN+h0Dsi6DniifPmLN+A+vOfN PD5PSq2kS1axyprUvcFg3UC03oQifPAwlrKJc8R5BCqpkQwcYBh0jUXev5DWpVXm ymtlI5i0j1mvsbks2Ss8GWTzDfkZBDdDvxTLkg3ONoJwC5WPWQejxl2WNyZvbqZv HCX9fozn1Rl0CS4yl3FKz1HYMKA2IyOQNr4IWmkpYNA0DAENndufPVKCeWhPYxFc m0EhQRf4uLM6g3BtVlSPWSH19tVzdwE4u/epovo2OUmWVrXju+I2MitP6r+ca5q+ HSBNN5YIoWXBTvC0PenqJdWxEgyfGqA= -----END CERTIFICATE-----Generated at Sun Jan 18 03:12:02 2026 by rpki-client