This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: kp9samswmV2JWGFFhDepSR6S0pXERcUhBnVTgjRiAaA= Subject key identifier: 90:FA:04:43:18:BD:77:46:AF:F4:00:42:84:B5:3A:2A:48:6E:6E:5F Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 86 Signing time: Fri 21 Nov 2025 04:42:11 +0000 Manifest this update: Fri 21 Nov 2025 04:42:10 +0000 Manifest next update: Fri 28 Nov 2025 04:42:10 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: Znn7r4wy050PkRC1PQ5jbMHEJtOukDDPuzL8VidK6z8=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=) 4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 04:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Nov 21 04:42:10 2025 GMT Not After : Nov 28 04:42:10 2025 GMT Subject: CN=691feda2-f9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:ef:f2:c9:33:5d:6a:8d:47:3f:78:c0:7a: 78:93:de:89:6a:9e:9a:72:1d:cb:72:74:9e:2a:43: 06:39:bb:61:43:60:14:9e:55:9e:18:da:1b:c4:4c: 60:2a:0e:cf:3c:ab:e1:91:fb:76:c9:65:19:ba:2e: ee:cd:cd:39:cd:2f:f6:79:68:5e:36:ae:b2:58:d0: e3:19:2b:94:5f:13:b8:b8:e2:48:7a:49:68:9f:16: 14:25:a0:1e:41:1b:f3:35:cd:5e:89:b9:5c:d3:20: 11:d5:59:66:ea:02:fa:1f:b1:3f:8a:fe:f4:9f:53: cd:3a:77:a3:14:74:7e:68:1e:d3:9f:c5:b0:d8:2c: bc:a8:1c:0c:3c:b9:dc:cc:66:7d:43:b4:2e:f6:cd: b0:c9:8c:33:45:29:52:a5:78:ca:2b:cd:bb:e2:2f: 8e:76:ef:8d:4d:bd:4f:c8:92:36:5e:b6:d0:42:4e: 7c:e5:79:6f:c6:ce:06:cc:6e:5a:0b:39:cc:91:cc: c7:92:e8:dc:54:7a:3a:80:c8:fa:5b:7d:c0:aa:b0: 60:25:67:b7:01:89:8e:ee:c6:40:4f:19:60:a1:0d: 3f:ca:cd:1f:c7:fe:60:1c:d1:e6:72:91:78:9d:8b: 18:d6:2d:ea:a9:b5:43:51:5a:69:fc:83:f1:05:22: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:04:43:18:BD:77:46:AF:F4:00:42:84:B5:3A:2A:48:6E:6E:5F X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:35:14:1c:e7:23:51:58:a6:46:5f:b7:e4:f3:12:40:f7:73: f9:b9:01:44:50:d9:8c:bf:a2:bd:f5:e7:f2:94:76:f8:44:80: 95:83:f8:ea:c9:f7:08:9c:48:0e:ac:56:c9:bf:4a:e8:c1:08: c9:1c:92:7a:12:70:c3:e9:e5:bb:26:9d:9e:7c:4c:7a:f2:ff: e0:18:81:fa:14:6c:0b:97:5a:92:f4:4f:43:19:dc:3e:25:95: c1:83:c3:ef:ee:8c:3b:50:bc:0e:45:b9:78:4e:89:64:b5:97: 5b:75:50:25:0d:d0:85:31:3e:77:c9:24:7a:ba:88:a5:10:17: 71:42:e8:d5:92:19:d2:22:78:5a:10:1b:1b:ed:e8:5d:93:6a: b0:55:d5:45:d5:6e:c7:2b:ee:57:f9:82:36:1a:8d:b1:c3:ae: 28:47:0e:2a:db:80:19:f9:cc:c3:ee:d0:97:a1:cd:1f:60:7d: c0:b3:1e:af:4f:99:01:24:1c:46:08:35:57:d7:3f:89:30:3c: e3:ea:cd:ba:3b:80:06:07:4f:32:21:cf:6e:60:0a:ac:ba:30: 44:4f:ed:8f:4f:cb:e1:01:ea:5d:51:2e:1d:93:22:5f:96:fb: f8:f8:89:ab:ed:73:f9:aa:24:71:23:44:54:01:c9:05:1c:93: 04:13:97:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjUxMTIxMDQ0MjEwWhcNMjUxMTI4MDQ0MjEwWjAYMRYwFAYD VQQDEw02OTFmZWRhMi1mOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf7v8skzXWqNRz94wHp4k96Jap6ach3LcnSeKkMGObthQ2AUnlWeGNobxExg Kg7PPKvhkft2yWUZui7uzc05zS/2eWheNq6yWNDjGSuUXxO4uOJIeklonxYUJaAe QRvzNc1eiblc0yAR1Vlm6gL6H7E/iv70n1PNOnejFHR+aB7Tn8Ww2Cy8qBwMPLnc zGZ9Q7Qu9s2wyYwzRSlSpXjKK8274i+Odu+NTb1PyJI2XrbQQk585Xlvxs4GzG5a CznMkczHkujcVHo6gMj6W33AqrBgJWe3AYmO7sZATxlgoQ0/ys0fx/5gHNHmcpF4 nYsY1i3qqbVDUVpp/IPxBSKuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD6BEMY vXdGr/QAQoS1OipIbm5fMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqNRQc5yNRWKZGX7fk8xJA93P5uQFEUNmMv6K99efylHb4RICVg/jq yfcInEgOrFbJv0rowQjJHJJ6EnDD6eW7Jp2efEx68v/gGIH6FGwLl1qS9E9DGdw+ JZXBg8Pv7ow7ULwORbl4TolktZdbdVAlDdCFMT53ySR6uoilEBdxQujVkhnSInha EBsb7ehdk2qwVdVF1W7HK+5X+YI2Go2xw64oRw4q24AZ+czD7tCXoc0fYH3Asx6v T5kBJBxGCDVX1z+JMDzj6s26O4AGB08yIc9uYAqsujBET+2PT8vhAepdUS4dkyJf lvv4+Imr7XP5qiRxI0RUAckFHJMEE5ck -----END CERTIFICATE-----Generated at Sat Nov 22 20:55:30 2025 by rpki-client