This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: nnxPfvHAp+qYCfSFl4cKHwVpSoPNxHVnYiEq+5ir4bQ= Subject key identifier: 5C:81:27:52:F7:F0:72:56:6D:45:7B:D5:24:4A:BB:F8:E5:75:37:AA Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0242 Signing time: Tue 09 Dec 2025 00:13:48 +0000 Manifest this update: Tue 09 Dec 2025 00:13:47 +0000 Manifest next update: Tue 16 Dec 2025 00:13:47 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: thdrUuf2M1NT3/CDGj6SGnPoFkSFmDURNKVDAoVu1Gc=) 2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: g/nswxyJsa+B6IHJZV4vfYf8nast/FctdpxoppJYiCU=) 3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Dec 9 00:13:47 2025 GMT Not After : Dec 16 00:13:47 2025 GMT Subject: CN=693769bb-0671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:d0:f5:e6:5a:b6:c7:03:74:32:9d:7a:87: 32:c0:e6:20:ce:e9:4c:39:e3:2a:3b:e0:04:50:e6: 4b:df:5a:99:26:a7:f8:b6:66:30:96:b3:6c:df:b9: 04:00:5d:ca:55:43:55:02:f2:4b:de:99:c7:45:e5: 2d:0c:89:c3:96:54:a6:36:5d:3d:7d:aa:e0:14:21: 3f:42:98:be:1b:d5:0e:bb:ba:ec:8d:00:d9:d3:05: b0:d3:34:1a:c4:fc:ae:78:a0:f8:e2:ae:8f:d6:47: b2:39:34:e2:8c:c6:fa:f3:72:40:09:3a:ed:86:c8: 7d:ce:0b:3b:b9:3a:a4:96:ce:60:a8:8f:81:6d:c8: ae:5c:e4:5e:1a:f6:e3:14:d7:ab:fa:b5:2b:bc:cf: 14:48:51:f4:7c:6e:cc:11:2c:4a:76:09:c3:5a:0c: 8c:30:11:de:e7:62:f3:d5:9b:53:7f:47:e2:20:54: 05:9a:85:3b:fd:cd:00:c6:73:e9:5b:2e:95:ed:b9: 7d:d2:6b:c4:96:3b:de:15:dc:ad:95:51:21:1f:6d: dd:15:6f:fb:20:70:aa:e9:98:64:4e:dc:47:74:c8: 53:8d:11:29:a2:33:e2:6e:bc:5f:86:af:42:bb:ae: d2:b5:8b:ed:b7:4b:bd:06:93:55:5f:53:83:49:b6: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:81:27:52:F7:F0:72:56:6D:45:7B:D5:24:4A:BB:F8:E5:75:37:AA X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:62:ba:53:70:1a:97:82:65:3c:a8:aa:fe:dc:27:12:0e:9c: 05:11:8b:d7:da:fa:5d:84:4d:c3:38:61:8f:5b:e2:dd:08:3d: 86:be:05:06:83:3e:8e:90:81:d5:a1:0d:01:ad:88:28:82:bb: 99:20:fc:ec:ac:86:cf:6a:88:e0:6a:c7:1e:c7:83:8f:35:52: 4d:a4:6c:60:f7:7d:b1:17:08:c5:b5:a4:c3:b0:9e:7a:3e:3b: ec:df:29:f4:7b:d7:bd:8e:9d:fc:9a:62:76:36:a3:bc:94:8b: b0:82:4a:c6:bd:78:55:74:92:c3:69:04:9e:6a:3e:84:ef:f8: 7c:9e:85:3f:af:44:10:b9:2c:c5:7b:08:9a:33:18:fe:34:b9: 81:e8:bc:36:12:00:d9:d8:49:e3:93:ca:7d:ce:c0:fb:8a:1b: b5:7f:4d:0f:5b:63:8c:25:6f:cb:aa:0c:f3:51:1d:cb:1c:9b: e1:16:ed:32:9b:ea:68:79:92:12:ea:3b:42:d8:f7:1c:03:59: ea:6d:85:5b:03:1e:20:b4:96:e6:6c:cc:b0:2f:1f:33:d8:8e: c1:85:90:53:0c:89:bd:2e:7f:59:40:e7:b0:c4:6c:40:65:18: a8:f5:83:06:7b:06:b5:85:34:09:ba:23:25:dd:3b:77:24:30: fe:cb:37:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUxMjA5MDAxMzQ3WhcNMjUxMjE2MDAxMzQ3WjAYMRYwFAYD VQQDEw02OTM3NjliYi0wNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArErQ9eZatscDdDKdeocywOYgzulMOeMqO+AEUOZL31qZJqf4tmYwlrNs37kE AF3KVUNVAvJL3pnHReUtDInDllSmNl09fargFCE/Qpi+G9UOu7rsjQDZ0wWw0zQa xPyueKD44q6P1keyOTTijMb683JACTrthsh9zgs7uTqkls5gqI+BbciuXOReGvbj FNer+rUrvM8USFH0fG7MESxKdgnDWgyMMBHe52Lz1ZtTf0fiIFQFmoU7/c0AxnPp Wy6V7bl90mvEljveFdytlVEhH23dFW/7IHCq6ZhkTtxHdMhTjREpojPibrxfhq9C u67StYvtt0u9BpNVX1ODSbadcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyBJ1L3 8HJWbUV71SRKu/jldTeqMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3YrpTcBqXgmU8qKr+3CcSDpwFEYvX2vpdhE3DOGGPW+LdCD2GvgUG gz6OkIHVoQ0BrYgogruZIPzsrIbPaojgascex4OPNVJNpGxg932xFwjFtaTDsJ56 Pjvs3yn0e9e9jp38mmJ2NqO8lIuwgkrGvXhVdJLDaQSeaj6E7/h8noU/r0QQuSzF ewiaMxj+NLmB6Lw2EgDZ2Enjk8p9zsD7ihu1f00PW2OMJW/LqgzzUR3LHJvhFu0y m+poeZIS6jtC2PccA1nqbYVbAx4gtJbmbMywLx8z2I7BhZBTDIm9Ln9ZQOewxGxA ZRio9YMGewa1hTQJuiMl3Tt3JDD+yzdS -----END CERTIFICATE-----Generated at Wed Dec 10 17:44:10 2025 by rpki-client