This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: +yh9ZiuHMAJhqepaK0OXLALUU6lNcXhTsxu/4I900GM= Subject key identifier: 66:EB:B3:14:79:9C:7B:C6:E0:B6:21:E3:93:89:AE:FB:44:D9:23:75 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 34F3 Signing time: Tue 16 Dec 2025 14:34:51 +0000 Manifest this update: Tue 16 Dec 2025 14:34:50 +0000 Manifest next update: Tue 23 Dec 2025 14:34:50 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: oAiLIniwpnfi2uuSJEvDnxGZCbZngCFzvZDUTZDwMzg=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Dec 16 14:34:50 2025 GMT Not After : Dec 23 14:34:50 2025 GMT Subject: CN=69416e0b-c86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:9c:d8:d0:f9:51:4c:33:e0:4f:b7:e0:9f: 66:19:e7:94:8e:25:a2:6b:51:9f:d9:1a:40:d8:5b: 45:1b:5a:1d:8e:67:87:bb:f0:c1:42:01:a6:75:a9: 2c:19:ba:33:f1:27:da:d0:5f:ec:28:64:e5:ae:2a: df:20:00:24:dc:9e:7c:9f:2d:08:18:93:28:38:39: 63:8a:a2:95:de:0f:fa:1b:6d:94:1d:d2:72:60:d5: d6:4a:94:b4:49:13:a7:97:35:3d:c7:04:7b:b8:22: dc:2d:a3:ba:f5:47:e5:14:b5:44:40:ab:de:8a:4f: 5a:ee:ed:31:18:90:d2:97:9c:65:3c:51:eb:5d:c4: 62:e3:df:e2:f4:98:de:29:2f:d8:be:c8:cd:e8:bf: b0:dd:2c:5d:47:d9:3f:83:02:cc:67:02:60:12:96: b7:b4:a7:98:5e:72:66:16:d1:73:2e:7a:ea:a6:d8: 11:1d:aa:66:2f:03:1b:06:fc:80:e1:2d:04:1d:e2: 66:b4:21:9c:50:85:d2:fd:59:5c:8e:88:2e:c3:46: 7f:a8:e5:1c:01:13:d4:dc:8d:55:96:7c:41:d4:22: 39:b6:8f:01:c3:12:d3:84:ff:38:a1:ce:17:4f:b6: 5b:b6:aa:92:59:13:53:98:a6:fb:dc:49:b0:6e:81: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:B3:14:79:9C:7B:C6:E0:B6:21:E3:93:89:AE:FB:44:D9:23:75 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:67:c7:12:a0:66:93:0f:d8:5e:7e:e5:4a:2c:6d:33:60:f4: 39:f4:e2:08:c2:15:22:75:df:c7:96:36:d0:1b:01:90:38:6a: 17:8a:2e:72:c3:82:2e:1e:88:34:af:f1:b2:91:73:a0:fd:63: eb:e8:01:5a:c6:b9:cf:bd:89:97:a0:f7:86:c5:55:69:1f:a7: 49:83:4d:f6:28:55:3f:5f:4c:40:8c:38:d8:92:2d:c9:a9:98: 0c:a2:bc:78:81:1d:78:54:93:6c:ef:c5:11:23:f6:f9:d8:ba: e0:3c:69:c8:d4:75:ab:05:98:a1:31:6f:54:b7:d5:5a:cf:09: 39:3f:dd:d2:e2:24:b9:4e:fb:6f:37:db:c0:e3:bd:14:6f:57: dd:42:d6:c6:0a:36:15:80:ed:1e:30:00:17:7f:90:d2:b0:bb: 0c:44:07:ea:a0:27:a8:36:20:4c:fa:c8:0f:26:e7:5a:a1:dc: 6a:ef:6a:c0:ff:a8:98:e7:9d:e3:0b:6c:8d:3a:70:e9:cb:0b: e1:c7:f8:ed:68:ca:34:1c:00:34:c1:2e:3e:f4:f3:f9:20:cf: 39:ad:fa:36:b7:de:0c:aa:2b:4f:c8:0b:00:09:36:6c:ff:6c: 33:10:1a:67:2b:ea:c0:45:21:93:b6:c4:a1:7b:03:71:b9:98: a9:fc:6d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUxMjE2MTQzNDUwWhcNMjUxMjIzMTQzNDUwWjAYMRYwFAYD VQQDDA02OTQxNmUwYi1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEmc2ND5UUwz4E+34J9mGeeUjiWia1Gf2RpA2FtFG1odjmeHu/DBQgGmdaks Gboz8Sfa0F/sKGTlrirfIAAk3J58ny0IGJMoODljiqKV3g/6G22UHdJyYNXWSpS0 SROnlzU9xwR7uCLcLaO69UflFLVEQKveik9a7u0xGJDSl5xlPFHrXcRi49/i9Jje KS/YvsjN6L+w3SxdR9k/gwLMZwJgEpa3tKeYXnJmFtFzLnrqptgRHapmLwMbBvyA 4S0EHeJmtCGcUIXS/Vlcjoguw0Z/qOUcARPU3I1VlnxB1CI5to8BwxLThP84oc4X T7ZbtqqSWRNTmKb73EmwboExFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbrsxR5 nHvG4LYh45OJrvtE2SN1MB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZ8cSoGaTD9hefuVKLG0zYPQ59OIIwhUidd/HljbQGwGQOGoXii5y w4IuHog0r/GykXOg/WPr6AFaxrnPvYmXoPeGxVVpH6dJg032KFU/X0xAjDjYki3J qZgMorx4gR14VJNs78URI/b52LrgPGnI1HWrBZihMW9Ut9Vazwk5P93S4iS5Tvtv N9vA470Ub1fdQtbGCjYVgO0eMAAXf5DSsLsMRAfqoCeoNiBM+sgPJudaodxq72rA /6iY553jC2yNOnDpywvhx/jtaMo0HAA0wS4+9PP5IM85rfo2t94MqitPyAsACTZs /2wzEBpnK+rARSGTtsShewNxuZip/G25 -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:24 2025 by rpki-client