This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json) Hash identifier: gG5cw/XUK9RdNnyy+II/qNbfpeiAIbmKvOhj+Gn6chU= Subject key identifier: 85:AD:E4:49:20:02:4B:79:EC:D4:AD:8F:87:9C:10:A4:FA:3E:14:94 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft Manifest number: 36 Signing time: Tue 02 Dec 2025 20:16:31 +0000 Manifest this update: Tue 02 Dec 2025 20:16:31 +0000 Manifest next update: Tue 09 Dec 2025 20:16:31 +0000 Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: B0QXSK54PQVrAc/qTSUG56/+aD3EHwgYWqy1X22BNKk=) 2: 844A140AC5F111F08382761DC4F9AE02.roa (hash: Gx2kCxxEj3/RIVTnJMerfYLqRKpDP3Xj2fha+8LVQi8=) 3: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: lPYCcJwpQhTwYbnLcej2EE1L4oSnFREXIyfOYx7DkzU=) 4: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: oCw/U7EHZyY3epAeaKjuRj0uw2tokHOQeiiiuBTFKyU=) 5: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=) 6: 8DF67C6AC5EB11F0BC424964C4F9AE02.roa (hash: Jh4KCNzZjKqM4r3/qqC/nIIfiTNy+SLhz86KNl2loAY=) 7: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: r4LE1v/40b0WOCFXtWlsGTCc5sxQVvVVfzbmBEp1ue4=) 8: D8511C62C5F911F08390847DC4F9AE02.roa (hash: mPN4v6Wr0i53K2v54rMGBAtCPDW2RDtBsIS7kf2niPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Dec 2 20:16:31 2025 GMT Not After : Dec 9 20:16:31 2025 GMT Subject: CN=692f491f-1c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:13:f4:c0:1a:b5:ef:dc:87:63:9c:19:e4: 9c:56:6f:91:46:f3:68:5b:07:b6:30:b4:59:61:39: e5:16:65:4e:2d:2b:69:94:13:60:60:33:9b:6c:c7: da:aa:1d:64:f5:2f:43:4d:ef:62:bf:bb:9a:22:6c: ab:0b:4b:2e:c4:ab:9e:ea:82:9e:44:70:63:f7:3d: 02:7b:75:00:e5:03:ba:e2:8b:38:3f:76:26:5d:ac: 84:47:88:a8:46:a0:b7:eb:5c:79:97:c8:4b:8a:41: 87:ce:04:c5:36:8f:7a:48:0c:d6:f1:d8:10:ee:38: 40:3e:e7:96:a8:5e:7c:79:ee:ea:3e:77:00:a3:dc: 2f:91:3e:88:30:5a:27:9c:02:74:49:09:bd:d0:9d: 9b:7e:59:3f:da:cc:da:3a:6b:8f:68:c2:7b:48:0f: 04:66:8e:c5:eb:bb:62:31:ee:82:6a:e1:ee:39:d4: c7:87:17:d3:d9:9c:54:8e:09:b2:a8:9e:79:91:fd: d8:67:25:ff:37:c7:41:3b:6a:54:9a:64:ae:01:5e: 9c:6f:95:f1:13:65:b8:3d:67:4f:25:64:da:46:c0: f4:20:4e:83:c7:df:a2:71:3f:9a:93:3e:98:71:92: 22:82:06:7d:3a:3b:c2:fa:44:f1:32:e3:8b:15:43: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:E4:49:20:02:4B:79:EC:D4:AD:8F:87:9C:10:A4:FA:3E:14:94 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:64:e0:1e:94:15:2c:02:fc:f2:20:57:83:76:5a:aa:f5:3d: 55:8d:a5:85:31:10:91:5b:db:3c:43:a8:7d:cd:e8:88:14:d0: 8e:bb:bd:01:af:d9:35:55:c0:29:1a:4b:2d:df:d6:f2:7b:4f: 45:8a:e8:77:5f:e4:ef:3f:82:a6:db:a4:af:ad:dd:f2:be:81: 51:40:e7:41:20:97:f3:9f:57:f8:42:8a:fc:68:36:89:54:e8: a0:81:c5:f4:33:3c:2b:b5:5e:c3:0f:d6:28:39:b3:1c:0e:0b: f7:c4:1b:ce:a2:0a:f7:34:5d:70:9f:3a:bb:9d:dd:bb:41:cc: 81:ac:91:fb:6f:f9:2e:ba:4d:24:6e:c6:8f:7c:6a:af:d0:5a: bd:73:39:63:7b:dd:09:b3:e9:14:d3:e6:9f:de:af:6f:e8:ad: 3c:b7:c7:dc:e5:97:28:f6:25:17:59:de:0a:f0:b4:21:6d:69: b5:46:50:13:15:af:5e:88:dc:96:de:50:ab:8f:63:fa:17:8a: 8f:f2:2c:ea:cd:df:af:90:4e:7a:a3:9a:ce:ec:de:b1:88:17: 0a:40:10:7a:89:59:36:ed:5f:f4:be:7f:60:25:2a:a8:3f:99: 61:6b:47:41:4f:3c:29:57:5f:83:de:5e:bd:ab:1c:5d:e7:73: 3b:82:f1:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTEyMDIyMDE2MzFaFw0yNTEyMDkyMDE2MzFaMBgxFjAUBgNV BAMTDTY5MmY0OTFmLTFjNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFFxP0wBq179yHY5wZ5JxWb5FG82hbB7YwtFlhOeUWZU4tK2mUE2BgM5tsx9qq HWT1L0NN72K/u5oibKsLSy7Eq57qgp5EcGP3PQJ7dQDlA7riizg/diZdrIRHiKhG oLfrXHmXyEuKQYfOBMU2j3pIDNbx2BDuOEA+55aoXnx57uo+dwCj3C+RPogwWiec AnRJCb3QnZt+WT/azNo6a49owntIDwRmjsXru2Ix7oJq4e451MeHF9PZnFSOCbKo nnmR/dhnJf83x0E7alSaZK4BXpxvlfETZbg9Z08lZNpGwPQgToPH36JxP5qTPphx kiKCBn06O8L6RPEy44sVQ6RXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUha3kSSAC S3ns1K2Ph5wQpPo+FJQwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0M2MkIyOTg2OTM0MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDht MWNQbnlYNXJkRHpkcHRONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJRk4B6UFSwC/PIgV4N2Wqr1PVWNpYUxEJFb2zxDqH3N6IgU0I67vQGv 2TVVwCkaSy3f1vJ7T0WK6Hdf5O8/gqbbpK+t3fK+gVFA50Egl/OfV/hCivxoNolU 6KCBxfQzPCu1XsMP1ig5sxwOC/fEG86iCvc0XXCfOrud3btBzIGskftv+S66TSRu xo98aq/QWr1zOWN73Qmz6RTT5p/er2/orTy3x9zllyj2JRdZ3grwtCFtabVGUBMV r16I3JbeUKuPY/oXio/yLOrN36+QTnqjms7s3rGIFwpAEHqJWTbtX/S+f2AlKqg/ mWFrR0FPPClXX4PeXr2rHF3nczuC8WE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:31 2025 by rpki-client