This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: Z0nFcQkmwmcRNPe29HdgkCDRKRMoy3ciT3P963weQ+Q= Subject key identifier: AE:A9:44:44:EB:88:4A:EF:98:68:B4:8B:9C:67:A0:CA:AA:70:60:86 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0CAB Signing time: Tue 02 Dec 2025 17:52:49 +0000 Manifest this update: Tue 02 Dec 2025 17:52:49 +0000 Manifest next update: Tue 09 Dec 2025 17:52:49 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: 7mQjuFuqW+8bFGwgL5YwRtupGL/jQO7jhJhwe9vIDLc=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: TFFXR7HvdoBBfkYQcKZFG8C4IZWcW3CzAFgZ6vyFYeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Dec 2 17:52:49 2025 GMT Not After : Dec 9 17:52:49 2025 GMT Subject: CN=692f2771-7a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:a4:b3:b7:f9:86:88:6f:c7:33:da:d6:1d: e8:b2:d5:9b:ce:e0:41:b0:8b:3f:83:a7:dd:0b:3b: 10:10:d5:4b:69:86:e7:6f:4c:07:5d:c4:e6:9d:8f: c5:ca:b1:33:d9:d1:88:9a:7c:62:c7:5a:e8:2d:d1: 22:45:81:94:12:45:a7:5a:39:46:4d:be:ff:29:11: de:f7:b2:96:70:9c:0d:c9:87:a8:79:cf:f5:e5:09: 20:59:1f:25:02:54:da:4e:8b:9a:7e:02:93:10:3b: ac:7c:7e:1d:de:f3:e2:2a:a5:36:0b:b1:a7:01:b9: 99:24:2b:5f:84:ba:00:e8:76:9c:54:80:96:f5:b8: a6:59:c1:b4:2a:69:60:5b:84:fd:db:2f:63:6f:78: 41:a3:3b:eb:dd:92:75:a8:95:0f:16:93:71:e3:52: a4:51:74:57:04:c9:c2:a1:42:7c:f4:3c:3a:2b:57: ad:d6:eb:a5:3c:bf:da:b1:0e:58:8f:2e:84:0c:f7: fe:30:d8:5e:30:7a:0e:0e:d6:2c:21:4e:3a:72:f0: 32:0e:17:01:cc:43:5a:1e:ed:b6:62:5d:27:3e:dc: 95:08:10:91:26:8a:c0:fd:43:c2:b0:8a:83:7d:f5: 41:97:0c:f3:c9:61:2b:7e:3b:f9:f5:4f:76:07:4f: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A9:44:44:EB:88:4A:EF:98:68:B4:8B:9C:67:A0:CA:AA:70:60:86 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:b9:e4:49:38:a6:83:14:47:93:17:35:22:c3:b2:1d:ad: f6:6d:bf:46:ae:65:31:03:4f:12:09:20:de:6c:32:3b:f3:f5: 62:80:1b:9b:e7:b7:6b:e4:f5:ff:cf:05:43:e5:73:5b:39:cf: c6:45:6c:2a:ca:f7:a5:9c:3c:05:a2:38:f5:8d:d1:37:6d:69: c7:87:b8:35:7d:72:38:c0:dd:8e:df:03:1c:37:31:61:3d:88: d0:61:99:02:c5:9e:ea:cf:71:5d:0b:9d:46:bd:11:ba:f6:9b: 92:c0:44:55:f1:f6:3f:3e:84:d0:e2:ed:9f:de:17:36:b9:89: 7e:cf:03:f7:8f:36:d8:ba:90:c6:55:72:cc:b1:1d:57:34:c5: 27:a7:32:c5:4b:70:83:e7:d3:61:21:d1:d4:1d:44:21:d3:c4: db:dc:39:63:50:3f:23:11:07:0b:fa:f3:8e:68:7b:48:ef:7b: da:6c:29:29:e6:69:93:8b:ba:69:18:c1:58:ec:ba:bc:f4:de: e1:ff:3f:a0:4d:54:0b:58:6a:91:13:d9:74:78:d2:b8:9a:74: c0:ac:71:8e:1f:f7:96:89:5e:80:89:02:f3:ee:04:68:5b:80: 1f:c2:5d:76:dc:b3:bf:f5:2f:17:31:3b:8f:48:4e:f5:65:12: 0b:35:44:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUxMjAyMTc1MjQ5WhcNMjUxMjA5MTc1MjQ5WjAYMRYwFAYD VQQDEw02OTJmMjc3MS03YTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBSks7f5hohvxzPa1h3ostWbzuBBsIs/g6fdCzsQENVLaYbnb0wHXcTmnY/F yrEz2dGImnxix1roLdEiRYGUEkWnWjlGTb7/KRHe97KWcJwNyYeoec/15QkgWR8l AlTaTouafgKTEDusfH4d3vPiKqU2C7GnAbmZJCtfhLoA6HacVICW9bimWcG0Kmlg W4T92y9jb3hBozvr3ZJ1qJUPFpNx41KkUXRXBMnCoUJ89Dw6K1et1uulPL/asQ5Y jy6EDPf+MNheMHoODtYsIU46cvAyDhcBzENaHu22Yl0nPtyVCBCRJorA/UPCsIqD ffVBlwzzyWErfjv59U92B0+sOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6pRETr iErvmGi0i5xnoMqqcGCGMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFUbnkSTimgxRHkxc1IsOyHa32bb9GrmUxA08SCSDebDI78/VigBub 57dr5PX/zwVD5XNbOc/GRWwqyvelnDwFojj1jdE3bWnHh7g1fXI4wN2O3wMcNzFh PYjQYZkCxZ7qz3FdC51GvRG69puSwERV8fY/PoTQ4u2f3hc2uYl+zwP3jzbYupDG VXLMsR1XNMUnpzLFS3CD59NhIdHUHUQh08Tb3DljUD8jEQcL+vOOaHtI73vabCkp 5mmTi7ppGMFY7Lq89N7h/z+gTVQLWGqRE9l0eNK4mnTArHGOH/eWiV6AiQLz7gRo W4Afwl123LO/9S8XMTuPSE71ZRILNUT7 -----END CERTIFICATE-----Generated at Wed Dec 3 18:02:12 2025 by rpki-client