This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: Mdurkv3a1BXmsbYui2AXhil8M8xKigKTJl4t7IoJFSU= Subject key identifier: 60:FE:22:28:93:A6:70:FE:CC:75:FE:3A:7E:4D:71:21:1C:EE:81:3A Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0247 Signing time: Fri 19 Dec 2025 01:07:32 +0000 Manifest this update: Fri 19 Dec 2025 01:07:31 +0000 Manifest next update: Fri 26 Dec 2025 01:07:31 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: lD+BC+427+uQ/xc/8JziElbly5I1QrZ2tXtRWPxSRQg=) 2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: g/nswxyJsa+B6IHJZV4vfYf8nast/FctdpxoppJYiCU=) 3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Dec 19 01:07:31 2025 GMT Not After : Dec 26 01:07:31 2025 GMT Subject: CN=6944a554-d3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:2b:3e:af:19:f7:12:3c:56:1d:ae:ca:28: 44:76:26:b3:49:c3:bf:58:10:9c:ab:cf:a5:da:a5: cb:c6:09:e2:ab:65:2c:f6:36:e7:65:af:2a:78:7e: 29:cf:59:4d:51:d2:65:0d:dc:ce:51:67:5e:40:90: b6:ac:20:46:61:ff:bb:e4:bb:a8:ea:d2:67:a9:01: 48:17:0a:53:10:4a:63:80:38:7b:23:07:35:60:76: ca:0a:17:10:31:01:f1:36:cd:dd:3e:fe:fa:50:5e: 69:20:e7:4e:cf:d5:d8:86:f2:c9:58:60:0f:b7:79: d9:4a:7f:03:58:50:02:40:37:1e:bb:5a:e2:44:94: 0b:55:4c:a1:1d:7f:8e:ed:9a:56:15:c3:91:e7:9e: ad:fe:0a:c2:88:d5:62:9c:94:78:d1:53:6c:55:aa: 45:cf:08:1d:4d:88:2c:68:57:08:c3:13:a8:a3:e3: 61:6f:c4:c1:eb:fb:f8:1e:15:71:fb:03:32:24:1e: 78:e8:53:cf:52:cd:90:c5:e2:cc:02:af:e2:89:7c: 58:79:c8:86:8b:48:5e:e1:a0:4f:02:1c:7a:48:37: c9:a3:26:d9:a5:d8:71:9c:92:47:2f:0f:23:b0:36: 6e:8e:97:b7:3b:35:f8:06:46:fa:8d:43:f3:57:0c: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:22:28:93:A6:70:FE:CC:75:FE:3A:7E:4D:71:21:1C:EE:81:3A X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a9:1f:94:3a:41:e2:59:4b:c9:33:1c:db:f4:dd:99:e7:88: e5:4e:2d:9c:ae:39:14:45:51:8f:3e:fc:11:12:c4:8d:21:8a: e2:00:b1:db:4a:e0:57:be:5f:08:ba:2e:8b:99:6e:b0:b1:51: 17:af:42:7d:ef:86:8b:34:1b:cc:5e:ed:3e:23:ee:85:3a:a3: 62:46:6e:1a:ec:a2:31:3a:07:6d:ee:aa:56:f7:3a:bf:9e:96: aa:ea:b4:24:35:5a:15:70:8a:2f:9c:32:c5:93:5e:0c:6b:ee: f9:75:80:f4:6e:1a:cc:81:c7:8d:1b:59:ed:cb:6c:3d:45:8a: ca:1d:b9:db:68:c3:9b:d6:c8:70:51:28:30:01:c9:17:1b:92: f0:68:61:17:dc:49:c3:d8:73:b6:8b:76:44:7d:32:29:94:a8: 83:aa:62:13:5f:26:c1:f7:ea:3b:0a:d8:e9:2b:b8:9a:8e:a5: 2b:69:c9:15:f0:8c:c2:8f:5c:8c:19:d2:d5:97:fa:8a:32:f4: e2:fe:7d:32:67:14:cc:5d:0e:23:fc:b2:3c:df:e1:1b:f7:5c: 42:04:ef:b2:b0:44:d9:3c:07:af:a7:02:88:62:7b:f8:20:91: 3d:8d:b5:41:c5:e6:50:e6:49:f1:8f:d5:e4:af:0b:76:6b:7a: db:f9:7f:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjUxMjE5MDEwNzMxWhcNMjUxMjI2MDEwNzMxWjAYMRYwFAYD VQQDDA02OTQ0YTU1NC1kM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRArPq8Z9xI8Vh2uyihEdiazScO/WBCcq8+l2qXLxgniq2Us9jbnZa8qeH4p z1lNUdJlDdzOUWdeQJC2rCBGYf+75Luo6tJnqQFIFwpTEEpjgDh7Iwc1YHbKChcQ MQHxNs3dPv76UF5pIOdOz9XYhvLJWGAPt3nZSn8DWFACQDceu1riRJQLVUyhHX+O 7ZpWFcOR556t/grCiNVinJR40VNsVapFzwgdTYgsaFcIwxOoo+Nhb8TB6/v4HhVx +wMyJB546FPPUs2QxeLMAq/iiXxYeciGi0he4aBPAhx6SDfJoybZpdhxnJJHLw8j sDZujpe3OzX4Bkb6jUPzVwyviQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGD+IiiT pnD+zHX+On5NcSEc7oE6MB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsqR+UOkHiWUvJMxzb9N2Z54jlTi2crjkURVGPPvwREsSNIYriALHb SuBXvl8Iui6LmW6wsVEXr0J974aLNBvMXu0+I+6FOqNiRm4a7KIxOgdt7qpW9zq/ npaq6rQkNVoVcIovnDLFk14Ma+75dYD0bhrMgceNG1nty2w9RYrKHbnbaMOb1shw USgwAckXG5LwaGEX3EnD2HO2i3ZEfTIplKiDqmITXybB9+o7CtjpK7iajqUrackV 8IzCj1yMGdLVl/qKMvTi/n0yZxTMXQ4j/LI83+Eb91xCBO+ysETZPAevpwKIYnv4 IJE9jbVBxeZQ5knxj9Xkrwt2a3rb+X+Q -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:23 2025 by rpki-client