This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: pPJjZG9RbhFrUAAFSNS/WgkPWfSRHVmbfhr9sws4aCo= Subject key identifier: 47:C1:43:D1:99:C0:F4:8D:CE:7A:E8:92:C2:FC:78:99:10:C7:8E:E2 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 34F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 34EE Signing time: Sat 06 Dec 2025 14:32:24 +0000 Manifest this update: Sat 06 Dec 2025 14:32:23 +0000 Manifest next update: Sat 13 Dec 2025 14:32:23 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: 8L6K/0T3ng+D6ZtYOy/LT/7YYFsTuvrcjq1ByCXrLPo=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Dec 6 14:32:23 2025 GMT Not After : Dec 13 14:32:23 2025 GMT Subject: CN=69343e78-67ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:1b:40:68:40:a5:44:f9:cd:20:fe:f7:09: ca:d0:ee:17:9b:4b:ed:5a:87:f7:44:23:ea:97:2e: 81:51:2f:2a:e7:0a:7d:7e:bc:c9:11:ec:bb:ab:1f: 2c:2a:80:75:45:a4:87:45:e9:4b:a7:95:5b:a1:21: 56:e7:77:61:5d:dc:aa:72:bf:09:0f:59:af:91:9f: 13:b6:74:f7:d5:a0:0c:44:7a:a4:73:82:be:64:65: fe:88:e8:da:80:07:96:3a:bb:b3:23:8b:4c:5c:19: 98:7c:4e:95:a4:af:35:5b:37:bb:5b:ac:fc:a2:0d: 9a:fd:7e:8d:c7:11:e1:fb:18:c3:a5:f8:f1:a4:4a: b3:31:50:22:fe:1a:4c:52:73:c4:fd:d9:02:69:26: 92:11:13:4b:eb:63:23:54:70:97:dc:3e:c7:ea:54: f6:96:52:58:fb:70:db:ca:d9:6d:92:f3:55:ad:18: 47:73:c5:df:e2:65:3f:c1:5f:8b:74:04:d4:41:75: 6a:36:9a:e5:89:ae:35:f6:ea:78:83:4d:8d:50:2c: f3:ef:cc:49:c5:1a:1e:9d:99:a3:1f:79:6d:f3:20: 0f:29:1b:68:04:a4:82:e3:b9:7e:0b:56:ce:51:63: 34:cf:b2:5c:66:d1:80:b1:12:b2:ad:2b:ad:9d:35: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C1:43:D1:99:C0:F4:8D:CE:7A:E8:92:C2:FC:78:99:10:C7:8E:E2 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:61:c1:43:75:95:cf:8c:af:fc:c3:10:3c:2f:74:cb:b9:09: 12:fd:2f:d7:88:4e:48:a0:66:27:56:ba:4b:23:5a:7f:c8:5d: 8c:bf:9e:92:5a:f5:57:9d:52:26:d2:58:dd:19:d4:51:82:17: 46:da:7a:c5:59:b7:89:f9:bc:b6:99:1b:39:69:02:c6:a8:00: 65:eb:2f:b5:e8:f0:a8:a2:a0:02:67:c0:a2:c2:e9:83:49:68: 3c:66:3d:91:47:36:e1:85:6c:5c:99:0f:6c:f4:0f:55:6b:8f: e2:62:4e:2f:8f:c5:a6:41:c3:24:2b:94:c2:86:8a:ec:7b:3d: 9c:eb:7b:3a:ad:41:36:af:a4:67:ed:e0:12:b7:72:91:6c:53: 4c:31:8b:81:a3:b7:02:f0:d2:c3:9f:a5:ad:cd:04:bf:b2:f1: 9c:b4:59:04:2f:9a:2b:06:35:10:ad:05:86:5c:c5:e9:c3:a2: 34:47:46:2e:9c:ce:21:4e:2e:a5:a0:a4:98:19:4a:51:08:f1: e9:ed:a0:1e:50:73:9c:f9:42:dd:f6:42:82:9f:d3:f8:42:b1: a0:65:d2:f6:fa:67:a3:bd:29:fc:49:94:6b:e0:ff:b0:4f:16: 53:3a:9d:78:a8:57:b7:8b:5c:98:1a:a8:ef:a3:a3:62:d6:75: 6e:fc:b7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUxMjA2MTQzMjIzWhcNMjUxMjEzMTQzMjIzWjAYMRYwFAYD VQQDEw02OTM0M2U3OC02N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUgbQGhApUT5zSD+9wnK0O4Xm0vtWof3RCPqly6BUS8q5wp9frzJEey7qx8s KoB1RaSHRelLp5VboSFW53dhXdyqcr8JD1mvkZ8TtnT31aAMRHqkc4K+ZGX+iOja gAeWOruzI4tMXBmYfE6VpK81Wze7W6z8og2a/X6NxxHh+xjDpfjxpEqzMVAi/hpM UnPE/dkCaSaSERNL62MjVHCX3D7H6lT2llJY+3DbytltkvNVrRhHc8Xf4mU/wV+L dATUQXVqNprlia419up4g02NUCzz78xJxRoenZmjH3lt8yAPKRtoBKSC47l+C1bO UWM0z7JcZtGAsRKyrSutnTVGhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfBQ9GZ wPSNznroksL8eJkQx47iMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAYcFDdZXPjK/8wxA8L3TLuQkS/S/XiE5IoGYnVrpLI1p/yF2Mv56S WvVXnVIm0ljdGdRRghdG2nrFWbeJ+by2mRs5aQLGqABl6y+16PCooqACZ8CiwumD SWg8Zj2RRzbhhWxcmQ9s9A9Va4/iYk4vj8WmQcMkK5TChorsez2c63s6rUE2r6Rn 7eASt3KRbFNMMYuBo7cC8NLDn6WtzQS/svGctFkEL5orBjUQrQWGXMXpw6I0R0Yu nM4hTi6loKSYGUpRCPHp7aAeUHOc+ULd9kKCn9P4QrGgZdL2+mejvSn8SZRr4P+w TxZTOp14qFe3i1yYGqjvo6Ni1nVu/LeX -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:16 2025 by rpki-client