This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: IeSAxKG1QsVxKryTQzeTAN6arf4WaYU65oG8+GekkRY= Subject key identifier: 0F:0A:F9:8F:73:FD:55:10:3F:10:D7:4A:A7:53:82:C8:94:0A:39:9E Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C82 Signing time: Thu 18 Dec 2025 18:14:49 +0000 Manifest this update: Thu 18 Dec 2025 18:14:49 +0000 Manifest next update: Thu 25 Dec 2025 18:14:49 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: Vy3fZoqmTZ9ZP6l3GHd2kM7BMpA5NI4yZCwCIqxIWIQ=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Dec 18 18:14:49 2025 GMT Not After : Dec 25 18:14:49 2025 GMT Subject: CN=69444499-a3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:79:ae:3b:14:f0:0e:a4:3d:39:e4:20:df: 3b:59:89:a4:0a:4c:ab:46:59:f9:2f:aa:61:ef:11: e8:8f:85:1e:94:22:9f:24:ac:58:91:f1:ca:23:f4: 87:13:b6:21:ad:46:a3:7b:d6:a3:a1:94:a9:c5:d2: 3e:53:fa:ec:47:be:be:a9:f3:1b:7c:30:3d:64:57: 0a:2c:a1:c3:3a:73:1e:70:eb:ef:d9:c4:a4:c8:5c: f5:7e:93:da:07:eb:a9:c0:ec:a4:bb:ab:63:27:1b: e6:34:52:52:7e:7c:bd:94:fa:53:be:49:05:bf:49: 06:c1:ea:82:0a:97:39:46:74:31:01:73:58:ea:98: d6:5c:be:42:c8:f5:19:6a:13:da:0f:91:30:44:3c: 96:6d:37:fe:97:d6:97:d6:81:82:80:e3:3d:f1:78: e6:37:95:6a:8d:27:81:7a:fd:95:df:34:2e:23:c4: e6:6e:57:0d:e5:35:74:57:25:07:8b:00:91:cf:e0: ff:7d:3f:f9:67:e3:fb:d0:e1:cf:e8:ce:f0:d1:14: 81:41:27:de:0d:63:b1:62:ca:a0:84:83:1d:f6:d0: db:84:b9:dd:72:07:2b:59:df:6e:5b:5f:35:b0:22: d2:a1:4f:0f:35:da:40:5f:9d:30:9d:0f:f6:9f:f8: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0A:F9:8F:73:FD:55:10:3F:10:D7:4A:A7:53:82:C8:94:0A:39:9E X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d8:60:11:43:5f:21:4a:89:81:13:60:0d:4b:e4:0c:69:89: 45:8b:8f:75:6f:db:3a:bd:b5:51:f9:ae:30:e6:20:89:9b:8f: 10:7f:8d:8f:db:3c:c4:04:3b:5e:53:e9:82:a9:50:45:67:5c: 40:53:c4:de:13:58:b5:e5:19:34:09:a5:fd:eb:34:ad:e1:6e: 47:ca:ef:08:eb:10:17:be:cc:5d:57:c2:8a:27:33:8a:d3:00: 7c:b8:05:7c:98:81:87:e4:cc:75:d1:38:43:3c:90:f9:ba:af: 46:51:16:a0:55:9f:07:c8:8c:28:e6:de:32:f2:7e:58:5b:11: 08:e5:98:ea:95:13:10:2a:0c:92:0b:47:d0:0d:92:9f:c9:f8: f5:cd:df:24:03:89:a0:3b:60:40:3d:5d:e4:8d:02:bd:b2:5f: 7a:16:84:f8:c8:2f:17:b8:55:43:3c:6f:53:ed:af:5b:34:ba: 85:a6:31:e4:dd:7e:a7:cf:31:96:22:ed:1e:1e:99:17:d3:8b: 6e:7c:9a:42:9c:0c:60:3f:2a:43:ac:df:07:cc:55:59:43:f7: ad:d3:01:38:7a:ff:15:31:99:13:be:b6:f3:23:c1:d3:80:30: 61:2b:f7:ec:16:ef:67:40:42:49:12:e4:e9:fa:84:8c:ae:75: 97:11:21:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUxMjE4MTgxNDQ5WhcNMjUxMjI1MTgxNDQ5WjAYMRYwFAYD VQQDDA02OTQ0NDQ5OS1hM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQJ5rjsU8A6kPTnkIN87WYmkCkyrRln5L6ph7xHoj4UelCKfJKxYkfHKI/SH E7YhrUaje9ajoZSpxdI+U/rsR76+qfMbfDA9ZFcKLKHDOnMecOvv2cSkyFz1fpPa B+upwOyku6tjJxvmNFJSfny9lPpTvkkFv0kGweqCCpc5RnQxAXNY6pjWXL5CyPUZ ahPaD5EwRDyWbTf+l9aX1oGCgOM98XjmN5VqjSeBev2V3zQuI8TmblcN5TV0VyUH iwCRz+D/fT/5Z+P70OHP6M7w0RSBQSfeDWOxYsqghIMd9tDbhLndcgcrWd9uW181 sCLSoU8PNdpAX50wnQ/2n/gNUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8K+Y9z /VUQPxDXSqdTgsiUCjmeMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq2GARQ18hSomBE2ANS+QMaYlFi491b9s6vbVR+a4w5iCJm48Qf42P 2zzEBDteU+mCqVBFZ1xAU8TeE1i15Rk0CaX96zSt4W5Hyu8I6xAXvsxdV8KKJzOK 0wB8uAV8mIGH5Mx10ThDPJD5uq9GURagVZ8HyIwo5t4y8n5YWxEI5ZjqlRMQKgyS C0fQDZKfyfj1zd8kA4mgO2BAPV3kjQK9sl96FoT4yC8XuFVDPG9T7a9bNLqFpjHk 3X6nzzGWIu0eHpkX04tufJpCnAxgPypDrN8HzFVZQ/et0wE4ev8VMZkTvrbzI8HT gDBhK/fsFu9nQEJJEuTp+oSMrnWXESHp -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:05 2025 by rpki-client