This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: TXC82nlOpoKWlkUVW5AuS/OO1mXpEZ5dmgnQiW999vE= Subject key identifier: D8:EE:08:B2:B7:5B:01:FB:39:96:38:39:18:3C:09:9D:9F:A0:94:AD Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 01D8 Signing time: Sun 21 Dec 2025 02:00:24 +0000 Manifest this update: Sun 21 Dec 2025 02:00:23 +0000 Manifest next update: Sun 28 Dec 2025 02:00:23 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: Z+AbRTikljdnslGszm8FFm4AxdYbBntGFYoJITdWjBc=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Dec 21 02:00:23 2025 GMT Not After : Dec 28 02:00:23 2025 GMT Subject: CN=694754b8-b94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:12:b1:03:36:60:f5:55:98:7b:fb:96:a7: 20:ba:0a:e4:9a:d1:24:a8:d3:1b:65:25:d9:bf:63: b7:b9:12:6d:37:4b:6f:01:74:1e:b0:6a:8b:d8:f9: b5:b4:ff:f3:be:75:28:85:f2:98:57:ca:2a:ec:f0: 33:0e:78:cb:6b:30:70:32:66:13:b7:3c:af:94:63: 63:c0:80:53:8b:68:c1:95:90:4d:78:9f:e0:c5:ca: d4:1a:66:4c:25:f5:8a:f5:ff:7f:94:59:2a:86:12: 24:d4:c9:1e:f7:5c:c2:88:78:66:a9:0c:bd:03:8e: cc:fa:a1:97:f5:96:9f:ac:c1:c7:92:7d:38:84:e0: 43:fd:ce:3c:5a:26:ad:a8:e8:58:26:56:b5:3c:8f: ec:83:96:c4:33:39:2b:e9:49:ce:e2:47:63:32:d6: f5:2f:34:5e:fe:c8:34:ed:11:ac:74:bd:68:f7:82: 6d:a6:7f:e5:77:e1:3c:5e:73:86:6e:26:80:5a:af: b3:53:28:5a:42:bc:67:f0:4d:b2:40:c9:cd:47:20: 4b:5b:82:4f:45:ba:6a:d6:8e:c8:13:53:09:8e:41: f9:75:ec:f7:07:d8:14:e1:03:eb:6f:06:1e:1c:f2: e4:9b:46:6d:fc:7a:0b:73:00:da:7e:07:dc:b4:5d: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:08:B2:B7:5B:01:FB:39:96:38:39:18:3C:09:9D:9F:A0:94:AD X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4e:7b:e7:35:e3:77:27:c7:ec:90:b5:b4:f7:ee:47:d9:a1: 37:db:22:b4:7b:f4:06:5d:4c:5f:54:21:e7:12:d0:0c:31:1a: d2:35:85:cf:75:d9:15:62:d6:15:54:1a:0d:c4:5d:93:83:b5: 02:82:65:7e:12:06:d3:97:72:fd:ba:d2:64:3a:45:20:4f:4d: 81:9e:23:32:38:96:69:1b:dd:d4:b9:21:ae:60:ae:21:fd:48: c2:91:95:a8:8e:20:1e:30:48:b2:76:aa:19:a2:33:8d:ea:32: 61:ad:b3:be:c5:c9:08:77:63:ad:b2:49:9a:ad:cb:6d:03:d1: a1:a0:6b:d6:51:e8:85:5d:db:6b:20:8c:b1:3c:e6:94:ea:75: 29:77:ca:a3:d5:41:aa:d8:41:9f:7f:f6:57:2c:4b:bb:1d:9d: 07:02:ac:f4:9c:0d:fa:be:da:f2:79:69:63:cd:66:a7:35:08: e7:43:43:6c:69:75:e1:f7:00:c2:6f:e6:72:29:8b:2b:c7:38: ed:08:51:fb:ad:f8:de:58:db:c6:a5:41:a2:d8:d3:b5:11:76: a1:fb:8c:32:40:8c:db:d7:0f:b8:60:32:7a:9f:95:fe:a4:e6: a3:e4:d2:04:1e:b8:a1:48:68:ee:51:59:bd:1d:47:9f:7b:28: 82:30:36:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUxMjIxMDIwMDIzWhcNMjUxMjI4MDIwMDIzWjAYMRYwFAYD VQQDDA02OTQ3NTRiOC1iOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRsSsQM2YPVVmHv7lqcgugrkmtEkqNMbZSXZv2O3uRJtN0tvAXQesGqL2Pm1 tP/zvnUohfKYV8oq7PAzDnjLazBwMmYTtzyvlGNjwIBTi2jBlZBNeJ/gxcrUGmZM JfWK9f9/lFkqhhIk1Mke91zCiHhmqQy9A47M+qGX9ZafrMHHkn04hOBD/c48Wiat qOhYJla1PI/sg5bEMzkr6UnO4kdjMtb1LzRe/sg07RGsdL1o94Jtpn/ld+E8XnOG biaAWq+zUyhaQrxn8E2yQMnNRyBLW4JPRbpq1o7IE1MJjkH5dez3B9gU4QPrbwYe HPLkm0Zt/HoLcwDafgfctF2UwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjuCLK3 WwH7OZY4ORg8CZ2foJStMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjTnvnNeN3J8fskLW09+5H2aE32yK0e/QGXUxfVCHnEtAMMRrSNYXP ddkVYtYVVBoNxF2Tg7UCgmV+EgbTl3L9utJkOkUgT02BniMyOJZpG93UuSGuYK4h /UjCkZWojiAeMEiydqoZojON6jJhrbO+xckId2OtskmarcttA9GhoGvWUeiFXdtr IIyxPOaU6nUpd8qj1UGq2EGff/ZXLEu7HZ0HAqz0nA36vtryeWljzWanNQjnQ0Ns aXXh9wDCb+ZyKYsrxzjtCFH7rfjeWNvGpUGi2NO1EXah+4wyQIzb1w+4YDJ6n5X+ pOaj5NIEHrihSGjuUVm9HUefeyiCMDbP -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:16 2025 by rpki-client