This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: YMTd9ThRol2GWAifgXLCUWEXxMWaoFlmOezyZf7UHO8= Subject key identifier: FA:B1:E6:9B:2A:52:12:08:A7:E8:9A:D2:41:96:6F:E3:70:1F:88:05 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 0185 Signing time: Fri 19 Dec 2025 02:59:22 +0000 Manifest this update: Fri 19 Dec 2025 02:59:21 +0000 Manifest next update: Fri 26 Dec 2025 02:59:21 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: V1Q79Qq55JLQ205skgPz3/SlMx+xHeoPZfhV3MDyeek=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: NmyQHlBil47JzTSCPQYz/6ZBa9AnAtiDqsHIcZPO3dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Dec 19 02:59:21 2025 GMT Not After : Dec 26 02:59:21 2025 GMT Subject: CN=6944bf8a-15a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:a9:e0:5c:1f:88:a4:88:9f:19:8c:86:0a: e2:9b:1f:b6:65:e4:64:91:6f:4b:48:06:16:f7:e4: 16:fc:00:16:8a:25:97:e0:dd:4f:30:c4:83:55:6d: f6:1a:02:04:35:42:e6:59:36:3a:2a:7e:33:cc:71: 35:ef:b2:b6:d6:8f:8e:ae:fb:d4:1b:e9:a7:e6:fd: 7c:a8:e5:92:8e:df:26:8b:d0:18:7f:ea:2a:58:d5: 89:58:df:e0:98:87:85:e1:bd:a6:ba:9c:a4:c7:93: 07:17:22:3e:98:47:93:b6:8a:39:01:ac:fa:9c:43: dc:e6:b2:40:ab:31:3d:3f:3e:00:c7:4d:2c:7f:77: 37:6a:d8:cd:5e:e7:c9:7a:54:60:4c:34:f3:1b:37: a3:d2:d8:71:39:3c:a7:60:a3:96:d7:1b:5a:1d:73: 21:2c:d2:fd:ec:7c:dc:f9:a0:ef:da:5e:b4:61:65: ce:05:4b:ca:3e:d6:38:0f:6c:af:f3:a7:d4:1a:32: d9:6a:b5:26:d6:d8:c0:f2:0f:3e:13:49:b0:fc:07: 81:1c:48:17:ae:2a:dc:62:9d:72:58:7c:31:67:a4: 02:9a:2e:4e:0b:09:fd:1d:6a:9b:66:40:fc:92:bc: a5:38:c3:05:4c:3f:1a:fe:e7:68:33:c8:7d:74:b9: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:E6:9B:2A:52:12:08:A7:E8:9A:D2:41:96:6F:E3:70:1F:88:05 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:06:f4:d0:3e:36:3e:e9:aa:35:aa:56:74:19:55:5f:d1:57: 63:b7:d6:03:7c:12:b0:7d:ca:96:ae:c6:76:4a:16:5a:f5:d5: 9e:fe:02:4e:dc:73:b7:b5:98:3d:0a:7e:63:a3:46:e9:53:35: 42:54:3f:c8:b6:92:d0:6b:78:dd:77:1c:97:48:1e:dc:6a:91: 97:a1:bb:62:68:0c:2b:d0:83:a9:6a:52:cf:ff:65:ee:06:6d: 35:28:ac:8a:37:c9:c6:97:fb:63:1d:cd:50:cb:c7:a2:66:c1: 3c:fa:93:37:9b:0d:24:d9:8d:b5:b2:fe:86:de:7b:44:38:4e: fd:81:72:8f:0a:8f:53:e9:e8:90:21:2c:11:aa:46:72:f0:0c: 1d:88:a5:45:97:98:73:36:9f:80:76:b3:61:6e:42:b5:fb:fa: 05:c5:80:79:bf:aa:f2:c2:60:cc:b7:e6:0d:73:46:40:45:e7: e2:c3:27:54:20:8c:61:c3:58:36:99:d0:40:1d:3e:96:9b:94: 4f:ac:61:ce:02:df:24:2f:0d:28:10:a9:ab:26:cd:cb:a9:fe: 15:15:f3:a3:74:c3:86:5d:eb:bc:f7:b6:3e:b4:d0:c6:a1:89: 9e:26:0c:68:84:a5:3c:0f:21:78:c7:cc:c3:95:87:c5:58:60: 43:e7:b0:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjUxMjE5MDI1OTIxWhcNMjUxMjI2MDI1OTIxWjAYMRYwFAYD VQQDDA02OTQ0YmY4YS0xNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsWp4FwfiKSInxmMhgrimx+2ZeRkkW9LSAYW9+QW/AAWiiWX4N1PMMSDVW32 GgIENULmWTY6Kn4zzHE177K21o+OrvvUG+mn5v18qOWSjt8mi9AYf+oqWNWJWN/g mIeF4b2mupykx5MHFyI+mEeTtoo5Aaz6nEPc5rJAqzE9Pz4Ax00sf3c3atjNXufJ elRgTDTzGzej0thxOTynYKOW1xtaHXMhLNL97Hzc+aDv2l60YWXOBUvKPtY4D2yv 86fUGjLZarUm1tjA8g8+E0mw/AeBHEgXrircYp1yWHwxZ6QCmi5OCwn9HWqbZkD8 krylOMMFTD8a/udoM8h9dLl2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqx5psq UhIIp+ia0kGWb+NwH4gFMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5BvTQPjY+6ao1qlZ0GVVf0Vdjt9YDfBKwfcqWrsZ2ShZa9dWe/gJO 3HO3tZg9Cn5jo0bpUzVCVD/ItpLQa3jddxyXSB7capGXobtiaAwr0IOpalLP/2Xu Bm01KKyKN8nGl/tjHc1Qy8eiZsE8+pM3mw0k2Y21sv6G3ntEOE79gXKPCo9T6eiQ ISwRqkZy8AwdiKVFl5hzNp+AdrNhbkK1+/oFxYB5v6rywmDMt+YNc0ZARefiwydU IIxhw1g2mdBAHT6Wm5RPrGHOAt8kLw0oEKmrJs3Lqf4VFfOjdMOGXeu897Y+tNDG oYmeJgxohKU8DyF4x8zDlYfFWGBD57CI -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:33 2025 by rpki-client