This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json) Hash identifier: 5n6tl/xf4KJszFYz3K/rikz4puaWRNxUx2ntUxYHYns= Subject key identifier: F5:40:E3:3B:C3:BA:91:97:6D:BB:DD:BE:B2:AC:97:77:2C:3E:F6:52 Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft Manifest number: 47B9 Signing time: Sat 20 Dec 2025 15:38:37 +0000 Manifest this update: Sat 20 Dec 2025 15:38:37 +0000 Manifest next update: Sat 27 Dec 2025 15:38:37 +0000 Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: ED3Jlhdooah7Fcp4ZNqgXNMLe/Xo45vKy3RO4RinFhA=) 2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: 1Xe1cmvJhp+1uOgf9drz3lA2Kuch55N2lYYnYgzX/Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Validity Not Before: Dec 20 15:38:37 2025 GMT Not After : Dec 27 15:38:37 2025 GMT Subject: CN=6946c2fd-1d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:6a:eb:a7:8a:d0:7b:0c:43:b5:4e:57:02: a0:b1:04:0c:da:ab:c9:04:55:bf:9a:90:08:71:45: 9d:3f:51:98:68:60:11:73:7d:50:96:d4:46:69:99: d9:ed:42:27:36:eb:44:15:03:98:09:2c:b6:0f:a5: f8:b9:e5:78:09:99:c0:f2:c9:56:b8:70:c1:54:96: 63:69:dc:3f:e3:8a:ba:09:26:15:63:11:73:e4:8c: 36:37:ae:98:61:ed:43:f4:79:02:54:0b:0e:b4:d4: 8d:08:a8:ec:45:7e:4e:a1:5e:f3:a9:df:fa:45:70: 51:38:7c:c5:22:06:e9:ea:76:98:5c:41:cf:a8:10: 2e:4b:7c:d6:ff:01:96:f6:09:4f:fe:40:30:15:5a: bc:11:e7:0f:96:f0:6d:3a:30:08:c0:20:74:94:85: 32:32:9f:36:91:f3:cc:b3:dc:03:15:20:dc:eb:e1: 54:a0:e6:d6:bb:2d:ef:70:c1:c6:de:1f:77:64:eb: 9b:91:64:ae:fe:70:fd:f9:21:1d:ab:85:8f:c3:48: 01:ee:3e:6d:de:e4:25:d1:e3:34:21:96:f7:2e:f9: 1a:07:ca:99:f1:69:dc:87:83:6b:49:9a:6a:37:9e: 14:47:3b:2d:34:13:9c:e6:fa:67:d1:34:f9:24:47: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:40:E3:3B:C3:BA:91:97:6D:BB:DD:BE:B2:AC:97:77:2C:3E:F6:52 X509v3 Authority Key Identifier: keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:95:41:55:57:f7:62:b6:32:61:94:e0:e2:dd:a7:62:5a:86: 5b:b5:64:e4:79:07:2a:b1:f3:be:51:63:d2:2b:dc:5d:63:3d: 54:d1:84:c5:4e:9f:e2:48:5d:e9:cb:9c:61:83:c0:b1:87:c0: b9:4d:10:fc:5f:89:fe:1e:90:07:3a:56:37:d3:c9:a9:23:06: 90:12:6d:b1:18:bf:12:70:03:32:f0:64:2c:db:79:b7:ad:50: d3:1f:00:29:d9:f4:5d:e5:dd:af:6d:38:76:71:a9:39:82:bb: 8d:fa:ea:e6:98:69:83:09:8e:e8:65:4d:ee:73:1e:06:71:95: 6e:f5:b1:b3:71:95:d2:ab:cf:20:a0:da:ad:fc:89:d4:04:e7: 23:88:25:90:16:1f:b3:ab:8f:b1:a6:31:66:cf:55:4e:f5:98: ba:fd:6b:6d:3b:99:d8:e8:58:f6:b1:3f:c6:fb:24:08:31:00: 05:70:7c:54:79:5c:9c:71:e6:bf:bb:26:b7:d2:5e:76:1e:b7: ca:e4:be:48:dc:9d:05:e5:df:36:5e:8b:19:6d:0c:2a:4e:19: 73:35:a5:f1:85:7c:a7:7f:2f:ba:26:7c:5f:0a:7c:07:a5:39: 1a:34:66:9c:70:ba:40:bc:62:cd:67:b5:f3:86:da:25:a9:1c: 3a:79:58:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB N0RCMUVEMjgwHhcNMjUxMjIwMTUzODM3WhcNMjUxMjI3MTUzODM3WjAYMRYwFAYD VQQDDA02OTQ2YzJmZC0xZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkg1q66eK0HsMQ7VOVwKgsQQM2qvJBFW/mpAIcUWdP1GYaGARc31QltRGaZnZ 7UInNutEFQOYCSy2D6X4ueV4CZnA8slWuHDBVJZjadw/44q6CSYVYxFz5Iw2N66Y Ye1D9HkCVAsOtNSNCKjsRX5OoV7zqd/6RXBROHzFIgbp6naYXEHPqBAuS3zW/wGW 9glP/kAwFVq8EecPlvBtOjAIwCB0lIUyMp82kfPMs9wDFSDc6+FUoObWuy3vcMHG 3h93ZOubkWSu/nD9+SEdq4WPw0gB7j5t3uQl0eM0IZb3LvkaB8qZ8Wnch4NrSZpq N54URzstNBOc5vpn0TT5JEdtDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVA4zvD upGXbbvdvrKsl3csPvZSMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL S2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDlUFVV/ditjJhlODi3adiWoZbtWTkeQcqsfO+UWPSK9xdYz1U0YTF Tp/iSF3py5xhg8Cxh8C5TRD8X4n+HpAHOlY308mpIwaQEm2xGL8ScAMy8GQs23m3 rVDTHwAp2fRd5d2vbTh2cak5gruN+urmmGmDCY7oZU3ucx4GcZVu9bGzcZXSq88g oNqt/InUBOcjiCWQFh+zq4+xpjFmz1VO9Zi6/WttO5nY6Fj2sT/G+yQIMQAFcHxU eVyccea/uya30l52HrfK5L5I3J0F5d82XosZbQwqThlzNaXxhXynfy+6JnxfCnwH pTkaNGaccLpAvGLNZ7XzhtolqRw6eVgo -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:07 2025 by rpki-client