This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: gugJtEP4gsjhMSKdLcr0zFQL0gOsAg8BCSTIwV1hlj4= Subject key identifier: AA:42:DE:E2:E8:49:09:7B:9E:E6:53:8C:0E:58:77:A2:97:7D:50:E8 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 01D0 Signing time: Fri 05 Dec 2025 01:06:26 +0000 Manifest this update: Fri 05 Dec 2025 01:06:25 +0000 Manifest next update: Fri 12 Dec 2025 01:06:25 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: dNDKqI7t9G4xCdPQHLZlCriNzdjEKh51MH31sh3sQfA=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Dec 5 01:06:25 2025 GMT Not After : Dec 12 01:06:25 2025 GMT Subject: CN=69323012-81fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:7a:b6:cb:a7:21:86:cd:b2:86:b9:9c:8d: 63:45:8c:11:51:4d:c6:81:48:fd:51:be:6b:12:fc: da:47:b4:dd:16:e0:e9:bc:6f:12:fa:56:ed:18:89: c0:ac:d6:9d:bf:26:c3:97:d0:0f:b8:90:6c:3e:da: 1d:b5:7b:d9:fa:81:c5:7f:01:c4:22:09:10:ba:94: 96:93:0b:61:26:69:9d:6b:21:f8:dc:c7:9c:cf:d4: 10:7c:c4:bd:62:38:93:7d:8a:1b:39:84:de:8e:09: b0:0b:91:23:cf:ed:b7:a7:e5:70:66:e9:1c:a4:17: 04:bc:c0:b1:2a:fa:66:3e:78:38:5d:09:19:03:a1: 93:02:9f:18:22:84:91:65:6c:5f:a3:49:de:9b:f9: f3:74:d6:03:73:09:92:ef:a2:f6:a3:35:9a:2d:3f: d2:88:2c:43:cf:b4:19:b2:83:d8:29:d0:94:81:8e: 96:3e:71:4e:0d:e0:84:fb:eb:54:a3:17:51:57:43: a7:6b:ad:51:a9:33:04:63:f1:0b:7a:0b:04:d1:3a: 6a:9b:93:b1:da:85:c5:74:69:7a:9a:44:7f:e1:7f: 50:99:5a:a6:5a:93:d6:6a:18:fb:bb:01:b5:c5:b6: 42:c2:b7:2a:bf:a6:24:e2:c4:35:12:56:b1:46:1b: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:DE:E2:E8:49:09:7B:9E:E6:53:8C:0E:58:77:A2:97:7D:50:E8 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a2:af:cc:2d:0d:d0:f1:1b:b4:af:ca:ba:68:5f:ba:c3:bc: fc:56:21:ff:73:d5:a3:c3:c3:f6:89:c6:b5:cb:50:68:c0:d7: dd:02:30:d5:4e:19:84:f4:33:18:e7:89:44:ae:bb:2b:5e:c8: 11:3d:b1:a5:59:e4:04:d7:b9:f5:66:a8:5b:5c:99:d2:ef:6e: 0c:60:6a:15:ba:b0:4d:81:b1:97:ab:fe:1b:51:e0:02:3d:28: 36:d8:aa:2f:a4:af:96:54:ec:79:45:a9:ef:94:ea:3f:fd:eb: cf:3f:e7:31:75:2d:11:38:39:e0:65:05:8e:9a:63:b9:15:48: 95:4f:95:6f:de:1b:bb:ca:89:fc:7d:95:3d:b7:b9:b8:40:ba: 71:a0:d5:95:c7:dd:fd:20:9a:a9:0a:71:1f:7a:cd:13:60:4b: e9:65:7a:a1:97:3a:e3:cc:e9:cf:8b:3c:73:0e:ea:22:0a:fa: 20:4f:92:d5:a8:37:b0:35:63:97:2c:1e:8a:40:5c:48:0a:7e: 22:ce:ab:b1:12:c1:ea:52:27:6f:5b:44:7d:83:eb:cd:6a:3c: e9:01:b1:ff:59:13:80:84:ab:87:27:f4:d6:8f:a7:7e:86:67: 85:17:a9:b2:c5:60:8d:0c:27:de:48:17:8f:55:fb:19:71:cb: 9b:d9:6a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUxMjA1MDEwNjI1WhcNMjUxMjEyMDEwNjI1WjAYMRYwFAYD VQQDEw02OTMyMzAxMi04MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMh6tsunIYbNsoa5nI1jRYwRUU3GgUj9Ub5rEvzaR7TdFuDpvG8S+lbtGInA rNadvybDl9APuJBsPtodtXvZ+oHFfwHEIgkQupSWkwthJmmdayH43Mecz9QQfMS9 YjiTfYobOYTejgmwC5Ejz+23p+VwZukcpBcEvMCxKvpmPng4XQkZA6GTAp8YIoSR ZWxfo0nem/nzdNYDcwmS76L2ozWaLT/SiCxDz7QZsoPYKdCUgY6WPnFODeCE++tU oxdRV0Ona61RqTMEY/ELegsE0Tpqm5Ox2oXFdGl6mkR/4X9QmVqmWpPWahj7uwG1 xbZCwrcqv6Yk4sQ1ElaxRhv21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpC3uLo SQl7nuZTjA5Yd6KXfVDoMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUoq/MLQ3Q8Ru0r8q6aF+6w7z8ViH/c9Wjw8P2ica1y1BowNfdAjDV ThmE9DMY54lErrsrXsgRPbGlWeQE17n1ZqhbXJnS724MYGoVurBNgbGXq/4bUeAC PSg22KovpK+WVOx5RanvlOo//evPP+cxdS0RODngZQWOmmO5FUiVT5Vv3hu7yon8 fZU9t7m4QLpxoNWVx939IJqpCnEfes0TYEvpZXqhlzrjzOnPizxzDuoiCvogT5LV qDewNWOXLB6KQFxICn4izquxEsHqUidvW0R9g+vNajzpAbH/WROAhKuHJ/TWj6d+ hmeFF6myxWCNDCfeSBePVfsZccub2WrA -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:40 2025 by rpki-client