This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: 6duxHd93+njLO1YnNd2up8fnFqgCNhU0G/rYQM9fLok= Subject key identifier: B8:0F:41:95:99:04:FD:7E:48:97:F5:A9:1C:6C:D0:99:6C:62:80:F5 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 269E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2676 Signing time: Mon 22 Dec 2025 15:32:48 +0000 Manifest this update: Mon 22 Dec 2025 15:32:47 +0000 Manifest next update: Mon 29 Dec 2025 15:32:47 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: g4x6j5gb1Ijh9lU/RoZyuqrvkRe3KGm5FNBonW3S3mE=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bji1Z+wCskup8d3EVsxZzlDVl29YQYSE+IGwR4pohHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9886 (0x269e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Dec 22 15:32:47 2025 GMT Not After : Dec 29 15:32:47 2025 GMT Subject: CN=694964a0-65d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:e0:60:5b:ec:f5:0a:88:97:5d:3d:2a:5c: b4:60:c1:a4:6c:5e:fe:83:26:fb:54:16:14:b9:c8: 16:b7:d9:f5:63:38:22:6b:3f:4f:9c:b0:b9:af:91: b9:6b:21:54:93:ca:10:df:29:5c:2b:26:bc:c4:4f: b2:20:1d:0b:b3:50:dc:36:e5:50:8e:0b:63:09:49: 9e:a7:aa:ce:0e:40:0d:20:13:1d:b2:5e:1e:06:54: 5a:b4:09:7a:75:70:8e:74:7c:4b:9d:d7:be:7b:1f: 76:c6:5b:7d:a8:e4:98:3f:09:b9:7b:03:72:6d:35: 11:f8:02:d8:d4:f1:4b:a3:47:c9:eb:bf:8f:6d:d5: a9:c6:3d:f7:d7:b4:9f:f9:5a:2a:11:53:ad:0a:67: a4:d9:25:18:10:1a:be:3f:39:2e:17:13:d8:8b:98: 87:fb:d2:dc:73:b1:c3:e2:a5:75:42:c3:2d:fa:71: 01:b4:4b:07:5b:2c:bd:27:8c:4f:29:43:2c:9b:9d: 04:f9:0d:9f:35:79:35:39:cf:bd:1f:8e:f0:26:8d: 7b:32:af:a9:14:a1:d9:f2:91:bd:93:4e:c7:1a:3c: 21:77:aa:31:23:52:90:c1:2f:83:8a:f5:de:88:9d: c9:24:21:9a:ab:32:1f:08:73:d6:ef:cb:67:a3:7c: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:41:95:99:04:FD:7E:48:97:F5:A9:1C:6C:D0:99:6C:62:80:F5 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:dd:26:22:21:2b:d4:90:d0:7e:b5:e6:f2:85:87:1f:24:2c: 8b:33:0a:04:1b:62:a1:7e:63:84:2c:f0:3a:75:69:ee:67:54: 42:a3:b3:df:5e:f9:a0:f6:00:2f:13:99:24:6c:a0:ef:02:5f: aa:22:c7:47:27:e0:b6:5a:f1:4f:69:f7:8b:be:46:14:ae:c1: ff:a9:16:6f:29:12:6c:a8:f0:14:d7:d7:b3:95:11:40:b4:93: e0:b1:cd:f6:84:ab:fd:7b:3c:77:f6:c0:0f:58:fe:c7:39:b3: 29:0e:b2:aa:30:d0:5d:9e:45:b8:9f:33:5f:de:b0:42:1b:3f: af:12:58:f7:56:4a:43:f1:4b:22:fb:d2:ed:4f:3a:c0:58:87: 82:56:65:25:48:9b:27:d6:bb:60:46:ce:12:7d:db:15:ea:76: 5a:b0:78:99:d5:61:ac:12:70:39:74:a2:de:74:13:63:c3:38: 9b:50:9e:b7:fe:48:4f:7a:dc:1b:24:f7:c2:0d:54:3d:e7:d4: 60:5e:4f:60:1a:6f:f3:c4:ae:d1:60:b4:27:02:f9:87:24:bc: 71:b1:69:5f:fd:35:93:b1:38:92:4d:bd:3f:8a:28:86:9e:61: 78:d6:15:a8:eb:2b:67:6f:78:ce:3c:68:4f:75:0b:2c:26:d6: e1:cd:8b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUxMjIyMTUzMjQ3WhcNMjUxMjI5MTUzMjQ3WjAYMRYwFAYD VQQDDA02OTQ5NjRhMC02NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMvgYFvs9QqIl109Kly0YMGkbF7+gyb7VBYUucgWt9n1Yzgiaz9PnLC5r5G5 ayFUk8oQ3ylcKya8xE+yIB0Ls1DcNuVQjgtjCUmep6rODkANIBMdsl4eBlRatAl6 dXCOdHxLnde+ex92xlt9qOSYPwm5ewNybTUR+ALY1PFLo0fJ67+PbdWpxj3317Sf +VoqEVOtCmek2SUYEBq+PzkuFxPYi5iH+9Lcc7HD4qV1QsMt+nEBtEsHWyy9J4xP KUMsm50E+Q2fNXk1Oc+9H47wJo17Mq+pFKHZ8pG9k07HGjwhd6oxI1KQwS+DivXe iJ3JJCGaqzIfCHPW78tno3yRWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgPQZWZ BP1+SJf1qRxs0JlsYoD1MB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY3SYiISvUkNB+tebyhYcfJCyLMwoEG2KhfmOELPA6dWnuZ1RCo7Pf Xvmg9gAvE5kkbKDvAl+qIsdHJ+C2WvFPafeLvkYUrsH/qRZvKRJsqPAU19ezlRFA tJPgsc32hKv9ezx39sAPWP7HObMpDrKqMNBdnkW4nzNf3rBCGz+vElj3VkpD8Usi +9LtTzrAWIeCVmUlSJsn1rtgRs4SfdsV6nZasHiZ1WGsEnA5dKLedBNjwzibUJ63 /khPetwbJPfCDVQ959RgXk9gGm/zxK7RYLQnAvmHJLxxsWlf/TWTsTiSTb0/iiiG nmF41hWo6ytnb3jOPGhPdQssJtbhzYsf -----END CERTIFICATE-----Generated at Tue Dec 23 19:19:02 2025 by rpki-client