This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: JmYNcP8GNhiSQU679onJ7gMIHpNqdDj0USRYDUHkQTM= Subject key identifier: E4:00:FA:EC:3A:A5:0D:4A:04:25:54:9E:57:9B:A4:67:78:9B:35:DE Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C83 Signing time: Sat 20 Dec 2025 18:07:39 +0000 Manifest this update: Sat 20 Dec 2025 18:07:38 +0000 Manifest next update: Sat 27 Dec 2025 18:07:38 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: Ak/qF/tfU2RpcZCSr5oidN1+iV20dpnFoUam8Sgo+GQ=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Dec 20 18:07:38 2025 GMT Not After : Dec 27 18:07:38 2025 GMT Subject: CN=6946e5ea-853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:d2:dc:6e:84:a5:d5:2f:9a:f3:4f:e8:ee: 20:30:67:29:1e:56:ca:6f:54:40:5b:4a:b6:84:b8: e7:05:13:18:b5:da:77:ab:6a:93:05:92:ac:df:4a: 26:51:f8:c0:7e:0e:a0:42:77:17:cc:27:9e:6f:d5: 82:08:ba:bb:28:6b:e7:68:3f:e1:94:ae:cf:5f:10: 43:ab:2f:9d:e3:89:30:87:f4:f9:e2:f5:62:cc:90: 7b:27:88:e4:56:e3:10:50:31:83:b2:9b:80:1f:20: fc:3a:45:0d:2a:fe:85:d7:e0:70:86:5f:96:4b:0d: 4c:a1:a3:cd:a5:e2:a7:94:90:08:9a:d5:ff:0d:26: 9c:6b:2e:02:1b:d3:6d:ae:2d:68:9b:7a:d9:b8:55: 76:5a:08:73:e7:94:29:c5:50:9c:37:b9:7d:41:e2: 1f:36:3b:9e:b8:bc:57:5f:9c:e6:34:a6:9c:af:2e: 92:8b:07:75:c9:9c:6b:39:5d:a4:e9:ac:38:9b:d4: 3c:fd:bc:af:c4:f9:b3:63:b2:24:95:d3:48:52:d9: 7a:e0:4f:c5:f7:2a:a8:dc:20:d2:17:1a:15:ac:35: 81:5f:a4:2e:79:a2:f4:40:fd:24:b7:e2:8f:5c:95: d6:67:14:1b:38:b6:e4:b9:43:a3:1b:47:98:0f:f4: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:00:FA:EC:3A:A5:0D:4A:04:25:54:9E:57:9B:A4:67:78:9B:35:DE X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:05:8c:d5:76:2c:58:88:34:9c:00:ee:ee:b6:ab:ae:8e:4c: 4c:bf:4e:de:ab:f7:dc:6d:d9:1f:a6:ed:93:ec:22:1a:a3:7c: a0:a8:5c:9a:48:2d:f4:10:e5:c4:b6:9f:09:4d:84:fc:14:31: 68:02:89:99:14:03:3e:0b:63:c1:8e:af:0d:f7:2c:79:4b:b4: 70:ef:33:24:9a:97:00:03:ef:ed:da:3e:1e:6d:27:3a:f5:a8: 9c:7d:31:21:c7:b1:89:45:e2:84:71:9e:92:14:88:a0:75:ce: e7:87:b9:e3:ff:f6:5b:74:22:61:5e:af:e5:8a:bd:75:15:45: f1:a1:a7:cc:eb:5a:f7:7c:9a:7e:f6:23:2a:4b:fa:49:06:1c: 3e:ae:b7:b8:21:f0:ea:b3:41:a4:de:20:76:73:c6:99:0a:91: 6f:4b:73:81:32:b2:87:2d:1b:8a:c0:e0:7e:a1:2d:de:87:d2: 7f:2f:b9:6e:67:fc:fa:5b:c6:b6:22:1e:52:e1:39:12:f9:16: 6c:72:28:53:96:57:5c:37:f9:6b:4e:bd:69:6f:78:e3:58:af: 9b:8d:1e:56:41:f5:83:b5:e5:f6:3c:5c:72:d1:78:ea:f3:9d: 1b:3b:5d:35:2d:2e:cf:d7:65:ba:56:f9:f3:f8:ae:22:96:bb: 38:ae:ab:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUxMjIwMTgwNzM4WhcNMjUxMjI3MTgwNzM4WjAYMRYwFAYD VQQDDA02OTQ2ZTVlYS04NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxinS3G6EpdUvmvNP6O4gMGcpHlbKb1RAW0q2hLjnBRMYtdp3q2qTBZKs30om UfjAfg6gQncXzCeeb9WCCLq7KGvnaD/hlK7PXxBDqy+d44kwh/T54vVizJB7J4jk VuMQUDGDspuAHyD8OkUNKv6F1+Bwhl+WSw1MoaPNpeKnlJAImtX/DSacay4CG9Nt ri1om3rZuFV2Wghz55QpxVCcN7l9QeIfNjueuLxXX5zmNKacry6Siwd1yZxrOV2k 6aw4m9Q8/byvxPmzY7IkldNIUtl64E/F9yqo3CDSFxoVrDWBX6QueaL0QP0kt+KP XJXWZxQbOLbkuUOjG0eYD/TxIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQA+uw6 pQ1KBCVUnlebpGd4mzXeMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkBYzVdixYiDScAO7utquujkxMv07eq/fcbdkfpu2T7CIao3ygqFya SC30EOXEtp8JTYT8FDFoAomZFAM+C2PBjq8N9yx5S7Rw7zMkmpcAA+/t2j4ebSc6 9aicfTEhx7GJReKEcZ6SFIigdc7nh7nj//ZbdCJhXq/lir11FUXxoafM61r3fJp+ 9iMqS/pJBhw+rre4IfDqs0Gk3iB2c8aZCpFvS3OBMrKHLRuKwOB+oS3eh9J/L7lu Z/z6W8a2Ih5S4TkS+RZscihTlldcN/lrTr1pb3jjWK+bjR5WQfWDteX2PFxy0Xjq 850bO101LS7P12W6Vvnz+K4ilrs4rqvM -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:06 2025 by rpki-client