This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: uQyBbPtwZIV+Du48EZbL6GGGGflsdTwSoId+aDJ0Jns= Subject key identifier: 1F:9B:8D:2E:18:A3:46:11:E2:16:50:3E:57:49:7C:A7:52:65:8D:F7 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0684 Signing time: Mon 22 Dec 2025 21:43:50 +0000 Manifest this update: Mon 22 Dec 2025 21:43:50 +0000 Manifest next update: Mon 29 Dec 2025 21:43:50 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: A9tLxY4HVuS+QGazYsXy/DWWIYHO5+L6ohcLj5YQf/c=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: XMGvyfsQwK+pnHEVDwFM8GXYoyCJLTHsKywLmoRsvnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Dec 22 21:43:50 2025 GMT Not After : Dec 29 21:43:50 2025 GMT Subject: CN=6949bb96-4e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:88:aa:4b:5a:2c:7c:be:3d:e2:b6:0c:3c: 5b:d8:a7:ad:4f:52:84:b5:53:ce:11:e7:0b:7b:b0: df:a7:b2:ae:47:ac:d8:9c:e9:68:25:e9:50:b0:7b: 1e:30:f3:8d:99:ae:74:f8:73:95:7a:f9:7d:35:86: 7e:14:a0:01:aa:d5:e8:2e:00:ba:12:fe:1f:de:51: 33:28:81:06:2b:e1:0d:f3:60:dd:2a:15:11:b7:58: 0e:f2:14:36:9f:56:c7:f4:6a:04:f9:7b:22:81:86: fb:46:1a:ca:18:a8:78:65:19:22:d8:ec:d1:45:f4: f2:e0:59:69:9d:48:21:3e:44:2c:45:c4:b2:c4:8e: 46:55:8d:bd:bf:b4:63:bc:4f:38:07:70:4c:13:45: 6f:21:b9:18:a9:4f:1c:c4:a2:58:ee:16:46:46:5d: 21:02:6c:81:eb:c8:77:8a:7b:66:b5:fb:8f:86:5a: ab:50:6e:f7:f1:64:2a:07:44:8d:55:ab:ad:d0:e7: f5:b3:99:21:20:fe:6e:cb:df:c6:e4:bd:18:0b:53: c9:ef:c5:02:64:38:fb:58:b5:dd:a2:e0:3f:32:35: cc:43:15:21:ea:b2:de:f5:b5:8e:d3:66:97:96:9a: 7f:ee:9a:0a:66:77:9b:24:f4:cf:8c:84:3f:c5:c3: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:8D:2E:18:A3:46:11:E2:16:50:3E:57:49:7C:A7:52:65:8D:F7 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:f5:5a:82:e9:56:78:2c:b7:99:52:df:c4:e3:13:82:96: 9e:2c:7a:f7:3a:8b:65:56:16:e1:3a:3f:84:51:7a:a9:c7:1e: 07:3a:49:a6:63:a0:6b:53:33:50:0d:9e:f0:4a:80:85:ca:a1: 30:95:83:c8:50:af:bb:77:dc:4c:da:8c:6e:a3:88:c6:51:b7: 77:a0:26:f7:5c:36:07:8e:8c:c8:7d:30:05:26:0a:0f:84:a2: 90:6c:59:8d:74:cf:8f:be:f3:a9:8b:f1:86:06:7a:90:2c:af: 06:d4:63:b1:31:7b:ad:de:d2:fa:7d:31:19:e6:be:65:94:96: 72:4a:4d:88:9f:cc:80:b7:2b:0a:3c:e9:91:41:42:2b:dc:a1: c3:11:20:b9:a6:f1:aa:3f:9f:65:cc:83:52:6a:39:4c:9b:c5: d6:fa:94:78:1c:67:59:9e:0d:47:f7:09:28:12:a0:48:12:7c: 07:b0:b0:b7:fd:d8:7f:58:89:05:65:17:8d:49:0c:62:fe:30: 1d:53:55:51:cb:9b:ff:7b:32:47:ad:81:c4:e9:49:2a:54:1d: 4e:8d:ea:04:1d:39:3d:7d:b1:80:9a:98:e2:c8:af:c1:46:d6: 73:62:06:26:e6:d5:a8:78:8f:ce:eb:df:03:94:87:5f:83:25: f1:5a:c5:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUxMjIyMjE0MzUwWhcNMjUxMjI5MjE0MzUwWjAYMRYwFAYD VQQDDA02OTQ5YmI5Ni00ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/iIqktaLHy+PeK2DDxb2KetT1KEtVPOEecLe7Dfp7KuR6zYnOloJelQsHse MPONma50+HOVevl9NYZ+FKABqtXoLgC6Ev4f3lEzKIEGK+EN82DdKhURt1gO8hQ2 n1bH9GoE+XsigYb7RhrKGKh4ZRki2OzRRfTy4FlpnUghPkQsRcSyxI5GVY29v7Rj vE84B3BME0VvIbkYqU8cxKJY7hZGRl0hAmyB68h3intmtfuPhlqrUG738WQqB0SN Vaut0Of1s5khIP5uy9/G5L0YC1PJ78UCZDj7WLXdouA/MjXMQxUh6rLe9bWO02aX lpp/7poKZnebJPTPjIQ/xcNGgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+bjS4Y o0YR4hZQPldJfKdSZY33MB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1vVagulWeCy3mVLfxOMTgpaeLHr3OotlVhbhOj+EUXqpxx4HOkmm Y6BrUzNQDZ7wSoCFyqEwlYPIUK+7d9xM2oxuo4jGUbd3oCb3XDYHjozIfTAFJgoP hKKQbFmNdM+PvvOpi/GGBnqQLK8G1GOxMXut3tL6fTEZ5r5llJZySk2In8yAtysK POmRQUIr3KHDESC5pvGqP59lzINSajlMm8XW+pR4HGdZng1H9wkoEqBIEnwHsLC3 /dh/WIkFZReNSQxi/jAdU1VRy5v/ezJHrYHE6UkqVB1OjeoEHTk9fbGAmpjiyK/B RtZzYgYm5tWoeI/O698DlIdfgyXxWsVG -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:23 2025 by rpki-client