This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: SSpOQof5yoOjstbprwgnFPDhplIdU1J8XdnEnDqXsVU= Subject key identifier: 10:39:AD:FF:F5:4A:3B:76:CA:D6:3F:A9:43:64:C6:63:6F:E4:F7:5C Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 05:37:55 +0000 Manifest this update: Fri 05 Dec 2025 05:37:54 +0000 Manifest next update: Fri 12 Dec 2025 05:37:54 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: VQK2XL+eKEvvLYeX+aTtDM5TgL+c26TFKhseYNMArLU=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: Ws+o5lfxkWBzbjla9ZUB6K0ykZgSsGy7AqspFs8FAvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Dec 5 05:37:54 2025 GMT Not After : Dec 12 05:37:54 2025 GMT Subject: CN=69326fb2-87e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:72:2c:bc:bd:6f:e1:4c:f9:b0:31:bf:6f:e7: 07:d0:c2:3d:4e:3d:fe:81:c0:4c:81:4e:37:72:32: 10:11:f8:72:63:4f:f4:a7:a5:c1:27:d5:d8:cf:55: f4:2c:98:b2:68:52:e5:95:b3:9c:9c:24:36:4c:e0: 98:8e:38:f5:81:e5:d5:a5:8b:dc:aa:23:ff:f7:c4: f6:b3:10:3c:3c:ca:b9:c0:f5:9a:95:3f:9f:fc:5f: c6:ab:84:bc:04:73:7b:1b:d6:92:7b:0a:4e:9a:93: c1:2d:cf:b3:ea:30:17:eb:0b:21:d8:4b:b3:06:2c: cc:04:4b:9b:d1:b1:15:94:bd:4f:86:92:c3:0b:83: cd:df:5f:a4:a0:e3:df:18:3f:f3:2b:22:ff:ac:34: bf:fa:28:db:29:c6:6e:fa:2b:a1:39:7a:69:0d:1d: 1b:9c:aa:6a:be:2e:77:16:84:6d:a8:79:7b:76:61: 6c:9d:fd:99:8a:3a:03:62:0d:09:36:aa:24:77:c8: d4:e4:1c:0c:6b:74:b6:fb:91:60:f6:98:02:f0:cd: 45:d5:5e:40:4c:0f:51:86:f2:b5:b3:99:48:5c:10: 71:0c:e4:1e:45:85:ed:f7:db:d7:c5:6e:a7:ac:ef: 86:99:a0:83:25:d4:25:47:0e:53:0a:f9:aa:74:d8: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:39:AD:FF:F5:4A:3B:76:CA:D6:3F:A9:43:64:C6:63:6F:E4:F7:5C X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:90:7d:81:d5:0a:2c:4c:d5:0f:4e:01:0f:07:d1:6b:5f:e1: 59:d9:ed:eb:f0:ad:e6:f3:15:3e:29:44:e6:f4:1f:29:46:02: e0:ba:ab:75:03:8b:a2:e4:8c:bb:1b:1a:5c:9a:4a:e9:fa:2c: 27:8c:c3:b2:98:26:b9:38:d3:4f:25:ec:27:18:c7:61:55:dd: 0b:44:cc:58:1b:cd:74:85:32:e2:6c:71:72:d5:25:df:e0:06: d2:1b:08:1f:e8:34:26:1d:cc:13:13:ed:f9:54:a3:8a:8d:e1: b4:6f:71:ff:49:03:67:ce:93:89:13:cb:8b:b8:ce:42:33:10: 24:e1:45:38:b7:6b:d1:06:b8:e7:e3:15:83:54:af:21:20:8f: f5:f4:a7:b1:a2:e0:16:b7:2b:d8:95:14:ea:bd:54:89:ba:b7: ad:0b:03:93:34:d3:3a:5e:89:f9:cc:26:50:d8:42:71:13:a8: 8d:8d:a4:8f:ea:2d:92:db:60:c7:4a:ce:88:1f:3a:d9:a3:aa: 02:e7:ff:cc:02:60:91:d8:13:22:93:e9:71:e2:aa:e7:51:0b: 21:77:c8:49:d1:53:75:65:38:e0:2d:14:3a:c9:12:85:65:a3: 7e:73:a6:76:b1:61:84:23:11:7c:70:3c:3f:9b:24:6b:80:70: 07:a2:9e:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNTEyMDUwNTM3NTRaFw0yNTEyMTIwNTM3NTRaMBgxFjAUBgNV BAMTDTY5MzI2ZmIyLTg3ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0ciy8vW/hTPmwMb9v5wfQwj1OPf6BwEyBTjdyMhAR+HJjT/SnpcEn1djPVfQs mLJoUuWVs5ycJDZM4JiOOPWB5dWli9yqI//3xPazEDw8yrnA9ZqVP5/8X8arhLwE c3sb1pJ7Ck6ak8Etz7PqMBfrCyHYS7MGLMwES5vRsRWUvU+GksMLg83fX6Sg498Y P/MrIv+sNL/6KNspxm76K6E5emkNHRucqmq+LncWhG2oeXt2YWyd/ZmKOgNiDQk2 qiR3yNTkHAxrdLb7kWD2mALwzUXVXkBMD1GG8rWzmUhcEHEM5B5Fhe3329fFbqes 74aZoIMl1CVHDlMK+ap02HoPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEDmt//VK O3bK1j+pQ2TGY2/k91wwHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKQfYHVCixM1Q9OAQ8H0Wtf4VnZ7evwrebzFT4pROb0HylGAuC6q3UD i6LkjLsbGlyaSun6LCeMw7KYJrk4008l7CcYx2FV3QtEzFgbzXSFMuJscXLVJd/g BtIbCB/oNCYdzBMT7flUo4qN4bRvcf9JA2fOk4kTy4u4zkIzECThRTi3a9EGuOfj FYNUryEgj/X0p7Gi4Ba3K9iVFOq9VIm6t60LA5M00zpeifnMJlDYQnETqI2NpI/q LZLbYMdKzogfOtmjqgLn/8wCYJHYEyKT6XHiqudRCyF3yEnRU3VlOOAtFDrJEoVl o35zpnaxYYQjEXxwPD+bJGuAcAeinkk= -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:59 2025 by rpki-client