This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft File: w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft (raw, json) Hash identifier: pFlk8YyLte/pi/QfU+mADSZXuTlo7K99C3KMMRM2x/c= Subject key identifier: E3:B1:B7:D9:11:EE:03:6C:3C:F6:A5:24:48:71:DB:FF:31:24:E6:AD Authority key identifier: C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49 Certificate issuer: /CN=A91557F2/serialNumber=C3F8FCE162A10558626379E8C019732A243E6349 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft Manifest number: 0903 Signing time: Mon 22 Dec 2025 20:57:58 +0000 Manifest this update: Mon 22 Dec 2025 20:57:58 +0000 Manifest next update: Mon 29 Dec 2025 20:57:58 +0000 Files and hashes: 1: w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl (hash: qgRPVQkweLw3ZUPJh6v8816WXvYAY9mBBHD3xV+jAhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=C3F8FCE162A10558626379E8C019732A243E6349 Validity Not Before: Dec 22 20:57:58 2025 GMT Not After : Dec 29 20:57:58 2025 GMT Subject: CN=6949b0d6-0cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:78:13:56:85:8e:09:74:ea:72:f0:e9:a9: 8a:47:57:27:d4:9a:02:42:41:ac:04:70:c6:2f:8a: 29:66:7c:3b:13:9e:2c:d0:99:e7:93:a1:12:f5:ed: 54:ab:5e:d1:a8:9d:aa:75:1b:49:13:48:53:8c:84: d0:ff:71:77:e9:7c:0f:e9:7a:cd:65:e3:d9:7b:34: 80:51:d9:e7:43:bf:c1:52:59:54:9e:49:e9:37:bd: df:25:88:7d:08:54:78:0e:42:77:1f:14:09:df:0d: ed:b1:2e:39:09:83:83:80:b8:a7:2b:38:da:bd:bd: f9:68:03:69:cf:b9:b7:1d:dc:6a:35:74:ca:54:6b: f9:dc:3e:11:64:42:96:32:19:8b:99:cc:70:c4:61: 96:df:90:ad:f0:05:52:c1:0b:6f:4b:cb:ca:3a:53: 3e:7d:bc:cf:bd:d6:97:5a:cf:f2:e9:d0:23:f6:20: a0:42:fc:e9:0b:e5:1f:ea:e4:0e:80:46:06:8a:e7: 2a:fa:7a:a3:91:cf:ab:8c:0c:d1:c1:32:e6:bd:80: 57:51:03:33:96:06:45:e0:63:3c:7f:a7:48:18:56: 46:71:20:37:b8:4f:43:71:a3:7a:25:33:89:5f:03: 5e:5e:18:31:63:0c:cc:ab:b7:33:f4:f4:c9:c9:32: 89:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B1:B7:D9:11:EE:03:6C:3C:F6:A5:24:48:71:DB:FF:31:24:E6:AD X509v3 Authority Key Identifier: keyid:C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ca:75:8a:04:93:43:ea:62:dc:2a:46:87:44:c0:b6:56:fd: e5:a7:36:c6:62:af:c1:ce:91:f1:bf:63:e6:00:7a:3d:71:4a: 47:0f:65:f1:ba:20:8d:5f:fb:3a:dc:dc:28:e7:b7:85:1e:2c: 99:d0:ef:99:0e:3c:f5:58:59:d7:2a:36:d4:59:aa:86:13:b0: a1:32:ac:42:7d:ce:cf:16:a2:72:2c:f7:fa:e2:8d:21:c3:fe: d4:78:c0:d6:90:b0:d0:a5:58:7e:e2:14:bf:3f:83:52:8b:44: c1:ac:1f:9a:af:64:39:40:d8:b0:73:46:e9:81:5c:30:d6:92: 85:7d:9f:6c:0c:44:4c:28:20:60:85:12:e8:ad:f6:c6:ec:53: 18:be:c7:cc:1c:a0:c7:51:f2:d9:07:a5:4a:87:57:77:6c:88: e5:9f:cd:3b:dd:99:b3:e3:b4:da:47:82:9a:1c:4a:9b:b8:95: eb:98:5e:6d:c4:c4:27:8f:dc:23:a6:41:45:de:b8:51:c3:43: a6:26:82:ed:e7:f5:ea:e7:05:8d:02:84:ad:4b:ba:10:d3:74: b1:8f:9e:2c:aa:86:fa:e0:79:00:5b:93:1e:33:5a:7a:ef:18: e8:ec:b5:44:6d:d2:d4:ed:c1:1d:a6:8f:3c:8a:65:fc:51:3f: cf:df:81:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEMzRjhGQ0UxNjJBMTA1NTg2MjYzNzlFOEMwMTk3MzJB MjQzRTYzNDkwHhcNMjUxMjIyMjA1NzU4WhcNMjUxMjI5MjA1NzU4WjAYMRYwFAYD VQQDDA02OTQ5YjBkNi0wY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Bh4E1aFjgl06nLw6amKR1cn1JoCQkGsBHDGL4opZnw7E54s0Jnnk6ES9e1U q17RqJ2qdRtJE0hTjITQ/3F36XwP6XrNZePZezSAUdnnQ7/BUllUnknpN73fJYh9 CFR4DkJ3HxQJ3w3tsS45CYODgLinKzjavb35aANpz7m3HdxqNXTKVGv53D4RZEKW MhmLmcxwxGGW35Ct8AVSwQtvS8vKOlM+fbzPvdaXWs/y6dAj9iCgQvzpC+Uf6uQO gEYGiucq+nqjkc+rjAzRwTLmvYBXUQMzlgZF4GM8f6dIGFZGcSA3uE9DcaN6JTOJ XwNeXhgxYwzMq7cz9PTJyTKJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOxt9kR 7gNsPPalJEhx2/8xJOatMB8GA1UdIwQYMBaAFMP4/OFioQVYYmN56MAZcyokPmNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJWaGlZM25vd0JsektpUS1Z MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dfajg0V0toQlZoaVkzbm93Qmx6S2lRLVkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJW aGlZM25vd0JsektpUS1ZMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ynWKBJND6mLcKkaHRMC2Vv3lpzbGYq/BzpHxv2PmAHo9cUpHD2Xx uiCNX/s63Nwo57eFHiyZ0O+ZDjz1WFnXKjbUWaqGE7ChMqxCfc7PFqJyLPf64o0h w/7UeMDWkLDQpVh+4hS/P4NSi0TBrB+ar2Q5QNiwc0bpgVww1pKFfZ9sDERMKCBg hRLorfbG7FMYvsfMHKDHUfLZB6VKh1d3bIjln8073Zmz47TaR4KaHEqbuJXrmF5t xMQnj9wjpkFF3rhRw0OmJoLt5/Xq5wWNAoStS7oQ03Sxj54sqob64HkAW5MeM1p6 7xjo7LVEbdLU7cEdpo88imX8UT/P34EC -----END CERTIFICATE-----Generated at Wed Dec 24 00:35:52 2025 by rpki-client