This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: BDFpDjxqjxxhniA+wInR41bXiPI2RMCCmC8Pjdi9FTg= Subject key identifier: A2:98:F0:0A:D9:2D:29:75:56:8C:63:C6:51:BF:BE:E4:0D:71:CA:D6 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 01DA Signing time: Thu 25 Dec 2025 01:52:19 +0000 Manifest this update: Thu 25 Dec 2025 01:52:18 +0000 Manifest next update: Thu 01 Jan 2026 01:52:18 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: N8ltmkx2oej/Hb413wx2BjjgbbTLkfEiwoDMKsPAVFU=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Dec 25 01:52:18 2025 GMT Not After : Jan 1 01:52:18 2026 GMT Subject: CN=694c98d3-f854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:5f:0d:81:ec:72:75:89:06:84:90:9c:1e: dc:61:f5:a1:34:09:60:e8:b6:e2:4b:4f:bc:3e:17: 65:97:79:eb:e2:16:a4:00:b0:45:43:61:25:59:9e: 6d:59:7a:7b:52:0d:a4:1c:e6:c5:7a:f1:27:24:4b: ed:87:6b:28:e8:ba:67:02:11:55:3d:bc:68:9c:be: bd:95:06:fb:4b:38:a4:ef:19:79:c9:35:e4:4d:43: 96:1c:53:02:91:6d:0e:c1:ad:f9:a6:8e:42:dc:21: 2a:38:8d:b4:17:44:8e:df:cf:15:0f:bb:a9:bb:95: 67:7a:36:5b:70:39:44:86:5a:f6:67:25:9a:c0:48: 31:9e:7d:e5:77:cc:ef:30:58:34:a2:bd:e2:54:40: 7a:f2:99:17:04:ff:7d:f8:49:7d:fc:10:60:71:ad: be:80:32:b4:8e:f8:89:c7:5f:97:34:d3:60:ea:79: fd:3f:94:32:bc:69:b1:a1:73:ac:69:16:17:3c:58: 9b:d1:d7:9a:f5:ed:86:82:1f:bf:a0:d9:3b:cc:d6: d3:22:c1:56:9f:88:ef:fe:9c:bb:98:24:87:98:0f: 25:aa:06:0e:b5:28:93:ea:ef:6f:1d:df:69:4c:ab: 56:32:53:f4:22:f4:1b:67:7e:21:83:4d:e5:96:2d: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:F0:0A:D9:2D:29:75:56:8C:63:C6:51:BF:BE:E4:0D:71:CA:D6 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:83:d0:9c:00:cc:a1:1e:9d:a5:0a:21:10:0d:e0:63:52:7d: 4f:ad:99:9c:06:bc:8f:4c:60:2c:76:03:e0:d5:ce:b4:1c:5c: 4e:d4:a9:c0:d7:86:93:4a:fb:25:80:47:64:cf:68:a8:bf:34: 1b:f8:32:dd:45:f3:24:42:a6:c1:5b:2a:b1:91:da:d8:c6:85: 38:5d:f2:f5:17:ff:e9:12:40:c3:96:11:e0:a3:45:9a:60:c5: bd:ee:74:cc:34:d9:76:a3:7e:3c:ad:77:b3:5f:63:ac:1b:37: 5f:97:59:19:db:a0:95:0d:8c:5b:52:73:38:80:ef:5f:b6:61: 81:5d:22:f8:33:93:d1:92:27:dc:e5:37:bc:89:0a:06:bc:0b: 0c:b1:64:b7:80:93:99:ab:b6:c6:93:2d:53:81:2d:aa:6e:d1: d0:b0:e6:17:cb:fa:47:06:f5:c9:17:2a:8b:ba:b3:a1:a8:f9: 5c:08:cd:e7:b4:6a:b7:f0:ba:6f:bb:cd:10:49:4a:14:68:0f: fd:73:e6:08:62:72:f4:a8:62:d5:54:29:ad:4f:86:de:65:1c: af:6c:18:ae:3d:50:e2:93:a8:bd:0b:c1:ab:ce:07:38:25:b6: 93:47:cf:40:12:6d:d4:65:7e:83:c6:8c:27:1f:05:06:96:b5: bb:db:13:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUxMjI1MDE1MjE4WhcNMjYwMTAxMDE1MjE4WjAYMRYwFAYD VQQDDA02OTRjOThkMy1mODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4FfDYHscnWJBoSQnB7cYfWhNAlg6LbiS0+8Phdll3nr4hakALBFQ2ElWZ5t WXp7Ug2kHObFevEnJEvth2so6LpnAhFVPbxonL69lQb7Szik7xl5yTXkTUOWHFMC kW0Owa35po5C3CEqOI20F0SO388VD7upu5VnejZbcDlEhlr2ZyWawEgxnn3ld8zv MFg0or3iVEB68pkXBP99+El9/BBgca2+gDK0jviJx1+XNNNg6nn9P5QyvGmxoXOs aRYXPFib0dea9e2Ggh+/oNk7zNbTIsFWn4jv/py7mCSHmA8lqgYOtSiT6u9vHd9p TKtWMlP0IvQbZ34hg03lli1gzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKY8ArZ LSl1VoxjxlG/vuQNccrWMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPg9CcAMyhHp2lCiEQDeBjUn1PrZmcBryPTGAsdgPg1c60HFxO1KnA 14aTSvslgEdkz2iovzQb+DLdRfMkQqbBWyqxkdrYxoU4XfL1F//pEkDDlhHgo0Wa YMW97nTMNNl2o348rXezX2OsGzdfl1kZ26CVDYxbUnM4gO9ftmGBXSL4M5PRkifc 5Te8iQoGvAsMsWS3gJOZq7bGky1TgS2qbtHQsOYXy/pHBvXJFyqLurOhqPlcCM3n tGq38Lpvu80QSUoUaA/9c+YIYnL0qGLVVCmtT4beZRyvbBiuPVDik6i9C8Grzgc4 JbaTR89AEm3UZX6DxownHwUGlrW72xO5 -----END CERTIFICATE-----Generated at Thu Dec 25 10:58:29 2025 by rpki-client