This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: XKJR1g5g/QFWzf5P/8D/he1CB+q6/9m/jOs01smhaTE= Subject key identifier: BF:C3:FB:A7:ED:C0:05:EC:7A:2C:E4:D2:EC:BF:B2:C1:EB:D4:A2:A3 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 8D Signing time: Fri 05 Dec 2025 04:33:01 +0000 Manifest this update: Fri 05 Dec 2025 04:33:01 +0000 Manifest next update: Fri 12 Dec 2025 04:33:01 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: LUPzUN667AkZAAlW+NXrpmzz0t+KK3JOf7WQUzVvHBI=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) 4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Dec 5 04:33:01 2025 GMT Not After : Dec 12 04:33:01 2025 GMT Subject: CN=6932607d-f295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:d8:7e:8e:ca:72:47:da:51:56:d5:46:35: 78:a6:85:97:26:82:a0:70:ac:24:01:80:b9:bd:b9: dc:f5:4b:66:4b:5e:45:f1:72:85:71:08:77:85:4b: 1d:cc:d4:b6:fa:ed:9a:c5:fc:9e:18:b4:12:1e:2d: d3:a2:bc:ac:51:bc:9d:c0:3a:df:a8:d3:6f:bf:a7: 91:62:bd:ad:44:6c:d0:73:19:8d:87:ff:8a:5e:5c: 7c:72:fc:4f:59:c8:c5:bc:0d:e3:68:51:65:70:22: 15:80:fd:a0:b9:8e:93:8b:41:18:19:91:75:3e:8e: b8:95:ca:04:cb:92:2d:5b:71:ec:cc:5a:45:3e:f8: 2f:6a:d9:6d:cc:f2:75:73:ff:e7:82:b0:d6:29:c5: 38:93:c5:95:73:c1:e0:bd:ad:17:47:1e:d2:6e:1b: 50:02:7f:46:20:5c:d2:13:7d:73:4b:08:7a:5f:53: a1:9c:cc:44:0f:85:50:77:94:1b:48:c5:5e:30:88: 31:90:1e:40:7f:99:6a:93:66:3b:e5:f8:c4:d1:4e: 46:3c:aa:15:54:35:60:db:2f:b0:96:50:2e:5b:a5: 1a:9a:e5:0c:69:ca:c7:b2:0b:54:fb:b4:ed:97:8d: 58:d3:d0:ac:68:21:4a:bb:ee:d2:0e:e0:f6:f6:f8: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C3:FB:A7:ED:C0:05:EC:7A:2C:E4:D2:EC:BF:B2:C1:EB:D4:A2:A3 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f3:18:9e:b7:f6:f6:42:77:a9:cd:72:96:63:ea:bc:74:39: 46:90:51:a5:33:9b:10:0b:96:d4:fd:d3:e3:cc:bd:0d:44:b1: 20:94:5f:37:19:e5:c0:bf:69:5b:6e:7b:42:4a:ae:06:8d:7a: 47:2c:97:82:ab:bc:80:c3:d9:7b:6e:4c:1c:26:53:75:9a:7a: 05:3a:3a:f3:27:14:d7:52:f4:35:5f:17:7a:42:ff:fe:f9:b5: 69:38:62:a4:a3:87:86:6c:c1:2f:f3:c8:d8:1b:b3:22:bd:ec: 85:9e:d8:a3:65:46:38:c2:70:ce:3a:75:06:f7:1b:37:97:62: ad:b9:30:d0:07:bf:7f:1e:42:6e:eb:97:0e:c2:ca:d4:bd:ab: 91:6a:c8:45:f4:38:72:90:00:37:8e:63:15:b6:c3:13:7f:55: 33:bf:47:83:5a:e1:57:40:39:d7:2f:69:83:37:f2:a8:da:bb: 20:23:8f:0e:55:3f:1e:6f:c3:b7:1d:93:c4:f0:18:de:09:b0: af:d3:d9:f8:ab:b8:dc:0f:89:c1:73:6b:6a:22:1d:3f:aa:c8: 2b:b7:de:e6:f4:e3:ba:4b:17:15:8c:0e:92:b3:a8:b6:46:23: 6e:1c:64:9b:1a:9a:26:be:c0:6d:57:cc:05:0c:0f:8a:6d:df: ef:12:70:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjUxMjA1MDQzMzAxWhcNMjUxMjEyMDQzMzAxWjAYMRYwFAYD VQQDEw02OTMyNjA3ZC1mMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0PYfo7KckfaUVbVRjV4poWXJoKgcKwkAYC5vbnc9UtmS15F8XKFcQh3hUsd zNS2+u2axfyeGLQSHi3TorysUbydwDrfqNNvv6eRYr2tRGzQcxmNh/+KXlx8cvxP WcjFvA3jaFFlcCIVgP2guY6Ti0EYGZF1Po64lcoEy5ItW3HszFpFPvgvatltzPJ1 c//ngrDWKcU4k8WVc8Hgva0XRx7SbhtQAn9GIFzSE31zSwh6X1OhnMxED4VQd5Qb SMVeMIgxkB5Af5lqk2Y75fjE0U5GPKoVVDVg2y+wllAuW6UamuUMacrHsgtU+7Tt l41Y09CsaCFKu+7SDuD29vhLnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/D+6ft wAXseizk0uy/ssHr1KKjMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8xiet/b2QnepzXKWY+q8dDlGkFGlM5sQC5bU/dPjzL0NRLEglF83 GeXAv2lbbntCSq4GjXpHLJeCq7yAw9l7bkwcJlN1mnoFOjrzJxTXUvQ1Xxd6Qv/+ +bVpOGKko4eGbMEv88jYG7MiveyFntijZUY4wnDOOnUG9xs3l2KtuTDQB79/HkJu 65cOwsrUvauRashF9DhykAA3jmMVtsMTf1Uzv0eDWuFXQDnXL2mDN/Ko2rsgI48O VT8eb8O3HZPE8BjeCbCv09n4q7jcD4nBc2tqIh0/qsgrt97m9OO6SxcVjA6Ss6i2 RiNuHGSbGpomvsBtV8wFDA+Kbd/vEnCa -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:35 2025 by rpki-client