This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: eomHqj5/H+M6r8x5UFBDcqFHqBXOP4AqCuba/W6FcGE= Subject key identifier: 13:8E:C3:62:A4:C1:B2:C4:87:E9:BE:88:4C:94:E7:BA:60:9B:8F:65 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0240 Signing time: Fri 05 Dec 2025 00:16:48 +0000 Manifest this update: Fri 05 Dec 2025 00:16:47 +0000 Manifest next update: Fri 12 Dec 2025 00:16:47 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: d8CjpNGon2uJfTF63LcIt1ZoFDrEKQVOg3/2XMZ5Kyo=) 2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: g/nswxyJsa+B6IHJZV4vfYf8nast/FctdpxoppJYiCU=) 3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Dec 5 00:16:47 2025 GMT Not After : Dec 12 00:16:47 2025 GMT Subject: CN=69322470-d463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:5f:b4:cf:bd:80:b7:38:d3:5e:16:27:35: cd:0a:65:00:38:e7:bc:54:7d:eb:7d:78:39:03:e0: 37:3b:97:1f:d4:97:7a:cf:0c:06:ff:52:6c:65:2f: 8e:97:f7:f4:4d:05:a3:4e:6c:5b:39:90:e1:41:f4: d6:9a:23:c9:8e:dd:9c:d2:c9:69:db:17:8d:77:c6: 73:f2:9a:0e:19:69:b5:94:0e:38:e7:b9:71:f6:40: 83:c2:e2:68:59:0c:2d:30:dc:ba:82:f7:ee:c6:a8: 74:d4:e4:ad:b9:50:f0:bb:69:70:df:43:67:a7:ba: 1a:c6:bd:cb:e9:4b:fa:7a:f0:8d:b2:e6:7d:0f:ca: 3a:5b:b7:7f:c6:02:a9:7c:b1:17:fb:77:99:4d:27: 98:45:10:c2:51:d3:b3:91:4b:78:4f:ed:28:9d:15: 79:de:7c:9d:7e:b9:6a:45:26:a3:d4:ae:a6:56:82: d9:d8:35:9a:7f:12:3a:5c:4b:1d:f7:7d:32:6d:a3: 04:23:29:2d:f6:fb:84:cd:a9:43:60:72:ad:4e:e8: 52:af:d3:de:35:d5:17:96:f4:17:b6:c2:0b:f9:ed: f8:4a:09:d3:1e:46:55:5d:64:9b:d0:93:76:81:c3: a9:7f:02:0e:a2:1a:35:ff:45:92:da:a6:de:a2:e7: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8E:C3:62:A4:C1:B2:C4:87:E9:BE:88:4C:94:E7:BA:60:9B:8F:65 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1b:43:2f:e7:dc:8f:92:54:e8:90:6f:ef:c9:de:27:a1:f1: f5:de:72:36:d2:5b:57:59:48:85:16:86:0b:89:07:b4:b7:7f: 27:a8:48:18:15:83:8a:e7:91:a6:7b:ab:ab:2d:11:c3:73:b6: 51:7f:c5:01:13:98:b2:64:48:e7:d7:ad:4a:a6:36:ff:74:55: 49:03:8b:41:71:78:7b:57:aa:45:97:9e:8b:26:53:f7:9d:10: dd:b0:a7:da:67:f3:0f:20:14:47:0e:e9:77:2b:4e:6b:95:88: 3d:b1:f9:64:c6:7d:25:e7:09:4d:29:4a:46:de:44:ef:ce:ca: 80:15:64:22:72:b4:30:2a:7e:83:d1:88:d6:c0:3a:55:ab:22: 86:e0:4d:67:fc:ff:a0:e5:77:67:05:e0:54:9b:88:95:c7:f3: c6:aa:6f:41:cd:ce:4d:a3:57:31:89:b4:31:82:f6:15:90:05: 1b:4c:00:73:6b:3b:ba:96:3c:4c:4f:89:b1:24:bf:1d:0e:14: 6c:2d:2d:8f:46:d4:26:ea:f4:17:60:0c:4d:0e:af:8b:4b:5b: 14:a7:a8:12:f7:1c:7d:31:97:e3:f4:82:e9:13:2e:38:1a:01: 73:8c:84:0a:e1:ce:d5:b7:94:83:64:1e:e9:9e:d1:b8:e6:85: 3e:e6:17:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUxMjA1MDAxNjQ3WhcNMjUxMjEyMDAxNjQ3WjAYMRYwFAYD VQQDEw02OTMyMjQ3MC1kNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+JftM+9gLc4014WJzXNCmUAOOe8VH3rfXg5A+A3O5cf1Jd6zwwG/1JsZS+O l/f0TQWjTmxbOZDhQfTWmiPJjt2c0slp2xeNd8Zz8poOGWm1lA4457lx9kCDwuJo WQwtMNy6gvfuxqh01OStuVDwu2lw30Nnp7oaxr3L6Uv6evCNsuZ9D8o6W7d/xgKp fLEX+3eZTSeYRRDCUdOzkUt4T+0onRV53nydfrlqRSaj1K6mVoLZ2DWafxI6XEsd 930ybaMEIykt9vuEzalDYHKtTuhSr9PeNdUXlvQXtsIL+e34SgnTHkZVXWSb0JN2 gcOpfwIOoho1/0WS2qbeouciewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOOw2Kk wbLEh+m+iEyU57pgm49lMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSG0Mv59yPklTokG/vyd4nofH13nI20ltXWUiFFoYLiQe0t38nqEgY FYOK55Gme6urLRHDc7ZRf8UBE5iyZEjn161Kpjb/dFVJA4tBcXh7V6pFl56LJlP3 nRDdsKfaZ/MPIBRHDul3K05rlYg9sflkxn0l5wlNKUpG3kTvzsqAFWQicrQwKn6D 0YjWwDpVqyKG4E1n/P+g5XdnBeBUm4iVx/PGqm9Bzc5No1cxibQxgvYVkAUbTABz azu6ljxMT4mxJL8dDhRsLS2PRtQm6vQXYAxNDq+LS1sUp6gS9xx9MZfj9ILpEy44 GgFzjIQK4c7Vt5SDZB7pntG45oU+5hd/ -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:13 2025 by rpki-client