This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json) Hash identifier: ZwmkRnEEbq7fU+UbBT/16NQtK1ivEdYZ1BhhGagyOtc= Subject key identifier: C4:4F:E1:03:AD:E3:E5:F4:F0:30:B8:99:6F:1A:5A:91:D0:C2:BA:F1 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft Manifest number: 0551 Signing time: Thu 04 Dec 2025 22:02:25 +0000 Manifest this update: Thu 04 Dec 2025 22:02:24 +0000 Manifest next update: Thu 11 Dec 2025 22:02:24 +0000 Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: uTYK15IIH2cBLhx3A0F2OaRbmes/CrGsRrqPVZOkmn4=) 2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: c5J0KdHOLoi3ObVHZJngE8j6ijFOnrM4KMu8sfCJ1Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Dec 4 22:02:24 2025 GMT Not After : Dec 11 22:02:24 2025 GMT Subject: CN=693204f1-ffd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:ba:b1:8d:b2:f7:b6:ab:40:23:c3:a3:71: 64:f3:b5:07:dd:b5:e9:b4:d2:19:b5:23:52:b4:15: 4f:ed:93:90:8b:37:00:90:53:2c:da:8b:8c:f9:d4: 7b:e0:fb:dd:58:a5:5c:3e:73:ce:51:99:c7:8e:10: 56:64:36:34:c4:b4:56:8b:c3:5c:6e:1b:63:ed:fc: 98:59:1b:72:e8:9a:24:b9:ac:6e:14:16:b1:be:98: 0a:30:1a:77:e7:c2:f7:66:6d:86:05:28:54:60:f8: 1c:20:8b:1f:a1:d7:39:80:a3:51:8d:82:7b:bf:f8: 22:90:60:1c:c0:2f:0f:72:f1:c9:95:89:f0:48:fe: ab:b0:14:45:2b:34:82:39:bd:c6:82:de:90:05:b3: 7d:bd:43:bd:03:29:a3:db:48:89:d8:b9:20:51:5d: ca:d5:dd:4b:73:8b:33:96:64:4d:fc:8c:f3:32:d9: 14:42:aa:bf:14:e6:5d:4a:b2:1c:60:56:64:a9:10: b2:fd:c3:0b:f0:55:7a:69:e0:aa:9e:55:41:6e:82: 87:3f:7c:03:38:e7:9a:ff:91:c7:f5:63:b6:b1:c7: b8:f5:c6:63:9e:6f:dd:c1:14:83:38:7a:85:db:45: ac:df:2b:ee:04:00:a1:3e:76:ed:e0:ba:f3:5c:59: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4F:E1:03:AD:E3:E5:F4:F0:30:B8:99:6F:1A:5A:91:D0:C2:BA:F1 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:d4:e5:21:dd:02:93:3d:ca:18:f5:97:49:73:9e:0e:ab: 2c:16:c0:fa:6e:a6:69:e1:8f:38:20:5f:a7:06:ab:3a:df:26: 6a:e4:3f:81:3e:e3:45:3d:92:96:f3:22:f8:1a:ba:d4:fa:97: 44:7f:45:4d:40:53:a6:65:2f:14:6c:b5:ac:73:f3:49:8a:44: 2c:4f:9e:89:ac:ce:d0:fb:06:df:e7:64:cb:5f:c2:d4:93:7e: 5d:5d:0a:d1:61:fc:a8:8e:04:08:b5:39:ff:25:09:fa:32:13: 53:98:3c:53:28:40:a9:81:76:26:66:d3:64:cb:59:9a:ba:14: 03:af:56:eb:cc:c1:df:58:95:15:f6:99:54:ad:87:5b:91:37: 17:4f:89:5d:7d:2b:24:6c:dd:8b:df:e5:2d:ee:2c:99:00:f1: 6b:bf:3a:fa:cf:d2:2e:d2:ec:cd:2b:4c:cb:05:98:e8:c7:db: 84:31:06:0c:50:dd:b9:fd:56:a1:ad:b5:b0:ef:1f:71:2a:42: 05:d7:38:b1:51:c9:ee:dc:77:c7:82:88:5a:5f:7c:5b:bf:71: 5d:90:7f:d8:89:52:cc:4f:57:33:9e:f9:d6:dd:1a:b1:d8:92: da:a4:39:8b:41:dd:c6:d1:df:04:8b:06:37:fd:2c:85:17:8e: 1e:f5:e0:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUxMjA0MjIwMjI0WhcNMjUxMjExMjIwMjI0WjAYMRYwFAYD VQQDEw02OTMyMDRmMS1mZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07C6sY2y97arQCPDo3Fk87UH3bXptNIZtSNStBVP7ZOQizcAkFMs2ouM+dR7 4PvdWKVcPnPOUZnHjhBWZDY0xLRWi8Ncbhtj7fyYWRty6JokuaxuFBaxvpgKMBp3 58L3Zm2GBShUYPgcIIsfodc5gKNRjYJ7v/gikGAcwC8PcvHJlYnwSP6rsBRFKzSC Ob3Ggt6QBbN9vUO9Aymj20iJ2LkgUV3K1d1Lc4szlmRN/IzzMtkUQqq/FOZdSrIc YFZkqRCy/cML8FV6aeCqnlVBboKHP3wDOOea/5HH9WO2sce49cZjnm/dwRSDOHqF 20Ws3yvuBAChPnbt4LrzXFnklwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRP4QOt 4+X08DC4mW8aWpHQwrrxMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDQy9GODlDM0VCNjE1MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2Ew dGZoaE55ZE5RbEVfTjFPa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjpdTlId0Ckz3KGPWXSXOeDqssFsD6bqZp4Y84IF+nBqs63yZq5D+B PuNFPZKW8yL4GrrU+pdEf0VNQFOmZS8UbLWsc/NJikQsT56JrM7Q+wbf52TLX8LU k35dXQrRYfyojgQItTn/JQn6MhNTmDxTKECpgXYmZtNky1mauhQDr1brzMHfWJUV 9plUrYdbkTcXT4ldfSskbN2L3+Ut7iyZAPFrvzr6z9Iu0uzNK0zLBZjox9uEMQYM UN25/VahrbWw7x9xKkIF1zixUcnu3HfHgohaX3xbv3FdkH/YiVLMT1cznvnW3Rqx 2JLapDmLQd3G0d8EiwY3/SyFF44e9eDI -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:33 2025 by rpki-client