This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: eg1X25aJeT0cAp+5nhLMdm96q/4ih3T/7vRrZIC+52k= Subject key identifier: 0D:C7:44:63:45:2C:72:06:B1:DD:CB:04:00:0A:8F:EA:70:3F:0A:57 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C7C Signing time: Sat 06 Dec 2025 17:52:18 +0000 Manifest this update: Sat 06 Dec 2025 17:52:18 +0000 Manifest next update: Sat 13 Dec 2025 17:52:18 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: QSMxLfya20E2glZs0n7y3OEb+4O4G6fVHsuzTjVa6yw=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Dec 6 17:52:18 2025 GMT Not After : Dec 13 17:52:18 2025 GMT Subject: CN=69346d52-58b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:22:b5:29:2d:2b:8b:42:74:5a:70:5c:96: 55:7e:12:39:2a:31:26:37:f2:cc:aa:80:58:15:8d: ce:8d:5c:6a:85:9b:10:24:d8:e7:6f:0b:ee:a1:de: 3a:7f:cf:ea:e7:a5:29:7e:a0:09:9d:86:ee:c1:ba: e7:78:fd:8a:88:9d:b8:d0:5c:f8:9c:90:43:2a:d1: f1:06:cf:aa:73:5a:cb:e5:2f:5a:bb:51:bc:b4:a2: 96:c1:ff:48:97:05:c1:40:91:6b:11:aa:76:32:cd: 6e:4d:07:7e:0a:43:ad:6c:f2:ed:22:80:2b:7d:ef: b6:a8:83:5b:d0:dc:73:fe:ab:32:f0:30:2a:5f:95: 5f:e3:45:92:3e:2f:a1:f4:4d:32:ce:a3:cb:f9:1c: 93:19:39:32:73:78:bf:cc:00:bb:7d:06:a1:d5:1f: 90:3a:b5:32:82:fd:75:e2:92:7d:ce:de:ab:81:35: d6:a7:30:66:2c:4b:ed:55:6d:6b:3f:a9:7c:35:05: 52:20:99:e0:0d:e7:ae:7e:64:2b:61:5c:89:95:d5: e5:d8:e0:c1:69:e0:b1:07:82:9e:7f:22:23:1b:c9: 43:c6:e0:67:48:bc:d8:7d:d1:96:f3:b4:0b:9f:8f: 84:85:02:5b:e7:84:0c:bd:9e:ea:a0:8b:a3:20:e3: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:44:63:45:2C:72:06:B1:DD:CB:04:00:0A:8F:EA:70:3F:0A:57 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:73:f8:42:71:0a:99:3f:66:05:af:18:8d:ad:35:86:83:f1: e1:b6:6c:6c:76:e1:f9:cf:fd:01:db:8d:66:d8:45:fd:cf:c6: fd:ce:58:81:3b:ec:d4:80:31:71:63:21:c5:8d:fd:89:a4:db: 66:ef:36:c2:6d:da:03:9a:85:7e:0e:14:92:bf:83:09:6e:dc: 14:a8:0e:99:7e:f7:68:2a:71:b4:81:2f:0c:48:45:b2:d2:e3: a1:e0:56:9c:ce:19:81:e7:43:c2:92:4b:f7:53:5c:25:84:13: de:79:03:bd:b6:35:cb:42:9d:83:50:a7:9a:cf:13:d4:a3:bc: a5:50:6e:12:08:86:d2:db:cb:ed:1e:be:c1:df:c5:03:08:79: 46:2d:0c:c2:24:93:48:8d:f2:6b:f3:fa:97:1f:10:c4:8c:3c: b9:73:5d:bf:70:cb:3d:40:6d:14:45:86:b1:61:7c:c0:31:b1: 1e:0d:a7:56:da:d0:4d:57:5e:67:09:c3:61:d9:91:1d:7a:45: aa:9c:70:0f:c8:64:b5:68:fb:e2:33:37:ef:a8:68:bc:36:4d: e4:42:25:57:aa:d1:3d:de:51:8c:15:33:c7:d9:1d:97:90:be: 8a:3a:95:67:a4:9a:c6:5f:16:6b:51:89:cc:36:da:51:33:a0: b6:e4:c3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUxMjA2MTc1MjE4WhcNMjUxMjEzMTc1MjE4WjAYMRYwFAYD VQQDEw02OTM0NmQ1Mi01OGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyIitSktK4tCdFpwXJZVfhI5KjEmN/LMqoBYFY3OjVxqhZsQJNjnbwvuod46 f8/q56UpfqAJnYbuwbrneP2KiJ240Fz4nJBDKtHxBs+qc1rL5S9au1G8tKKWwf9I lwXBQJFrEap2Ms1uTQd+CkOtbPLtIoArfe+2qINb0Nxz/qsy8DAqX5Vf40WSPi+h 9E0yzqPL+RyTGTkyc3i/zAC7fQah1R+QOrUygv114pJ9zt6rgTXWpzBmLEvtVW1r P6l8NQVSIJngDeeufmQrYVyJldXl2ODBaeCxB4KefyIjG8lDxuBnSLzYfdGW87QL n4+EhQJb54QMvZ7qoIujIOPhiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3HRGNF LHIGsd3LBAAKj+pwPwpXMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHc/hCcQqZP2YFrxiNrTWGg/HhtmxsduH5z/0B241m2EX9z8b9zliB O+zUgDFxYyHFjf2JpNtm7zbCbdoDmoV+DhSSv4MJbtwUqA6ZfvdoKnG0gS8MSEWy 0uOh4FaczhmB50PCkkv3U1wlhBPeeQO9tjXLQp2DUKeazxPUo7ylUG4SCIbS28vt Hr7B38UDCHlGLQzCJJNIjfJr8/qXHxDEjDy5c12/cMs9QG0URYaxYXzAMbEeDadW 2tBNV15nCcNh2ZEdekWqnHAPyGS1aPviMzfvqGi8Nk3kQiVXqtE93lGMFTPH2R2X kL6KOpVnpJrGXxZrUYnMNtpRM6C25MOR -----END CERTIFICATE-----Generated at Sun Dec 7 06:11:28 2025 by rpki-client