This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: MUmyaNdrW7QGUWdOmaZfAdzQkAQE70a/+OZD0v0UdpI= Subject key identifier: BE:49:9E:A6:CA:BC:33:FF:16:56:AC:E8:31:D3:90:90:6C:F0:37:A0 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: 0152 Signing time: Tue 23 Dec 2025 03:24:36 +0000 Manifest this update: Tue 23 Dec 2025 03:24:35 +0000 Manifest next update: Tue 30 Dec 2025 03:24:35 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: +6FtSQL6H3/4NV9ZIubaE3wg4y2Q1AuETBe14wHwEgY=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: AMCsMfJDurfCyrp2gOqfFlijgxzaSiXGO6EzIZjXWyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: Dec 23 03:24:35 2025 GMT Not After : Dec 30 03:24:35 2025 GMT Subject: CN=694a0b74-8a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:00:6d:9d:66:12:a0:d2:65:97:ed:b4:6e: e2:2a:ac:5c:ff:a7:e3:25:13:4f:7e:d4:a4:73:0a: c1:61:b3:83:ff:59:8b:a4:eb:d4:c2:b0:77:1d:fe: 75:9b:21:7f:8f:a6:cf:e9:da:3b:54:54:c2:db:9f: fc:57:ee:7a:a0:98:b4:95:3b:e9:b8:ad:88:97:e6: 9a:53:58:bd:71:bd:15:99:37:c5:ea:44:17:4c:a4: 17:2d:50:77:82:47:e5:92:05:7c:72:de:12:d9:b5: 5d:cc:58:1b:ca:65:a4:49:3e:7c:e2:9b:e1:7b:13: 55:a5:d1:eb:51:6f:b8:e9:10:f2:9b:2d:94:64:ee: fe:2e:01:e3:7e:39:d9:56:47:92:cf:a5:da:1c:7a: 12:15:6f:c8:c1:1e:44:d8:b5:1f:e8:14:ca:b4:21: 66:26:6d:2c:eb:63:56:a6:7a:24:a4:45:43:ff:09: a8:d4:73:95:4a:33:bc:ff:60:f9:6a:af:91:6f:70: d8:bf:ef:fb:17:75:ec:62:fd:0c:56:81:e5:50:ea: 95:c1:ae:5b:c3:1e:f7:ef:d6:2f:b0:8b:7f:21:e2: 0a:ae:94:27:3d:40:58:7d:77:ed:24:67:29:bd:80: c1:13:76:78:5c:29:40:7b:5e:7d:01:b1:04:8a:94: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:9E:A6:CA:BC:33:FF:16:56:AC:E8:31:D3:90:90:6C:F0:37:A0 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:eb:54:7e:5f:7c:37:86:2e:7d:5d:2f:5d:16:d3:7e:a2: 91:b1:73:f4:bb:11:59:1e:74:de:65:0b:2f:6c:ff:f3:18:c9: 76:3d:96:80:cd:2a:60:95:37:b8:df:c5:37:fd:61:4c:1d:87: 5c:2c:e8:97:27:ec:5b:f4:63:9c:83:b3:9e:b0:d6:33:f6:d3: 41:e5:87:bf:ef:29:69:06:2a:7d:84:17:e1:f4:b9:ad:9a:6d: 99:6b:04:41:3d:d1:44:93:12:90:23:b0:ce:39:64:aa:f3:27: dc:70:5f:4b:21:88:28:73:26:a1:a1:fc:a9:e6:02:38:01:e4: e7:7d:99:b8:b1:60:4a:2f:8c:ab:e5:92:ff:6f:be:83:98:2d: 0a:5d:d7:32:fe:e5:6f:87:df:84:a1:87:92:1a:89:7e:26:a8: b1:f3:88:fa:ca:57:97:7a:05:53:b0:e6:ed:73:44:fb:45:19: 4a:23:4c:e3:d1:ff:eb:0f:3f:95:b4:0b:2c:6b:24:16:23:4f: 38:5b:67:73:a8:3f:17:59:e3:64:f6:71:d9:76:a6:9f:d3:f5: 74:82:79:8a:d3:1c:fa:78:88:1e:02:6e:f5:a0:a3:10:35:2c: 58:a3:97:d3:d7:2a:88:82:61:33:b4:33:25:22:fa:81:10:fd: 12:b1:75:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0 RjdGQUMyMTMwHhcNMjUxMjIzMDMyNDM1WhcNMjUxMjMwMDMyNDM1WjAYMRYwFAYD VQQDDA02OTRhMGI3NC04YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw70AbZ1mEqDSZZfttG7iKqxc/6fjJRNPftSkcwrBYbOD/1mLpOvUwrB3Hf51 myF/j6bP6do7VFTC25/8V+56oJi0lTvpuK2Il+aaU1i9cb0VmTfF6kQXTKQXLVB3 gkflkgV8ct4S2bVdzFgbymWkST584pvhexNVpdHrUW+46RDymy2UZO7+LgHjfjnZ VkeSz6XaHHoSFW/IwR5E2LUf6BTKtCFmJm0s62NWpnokpEVD/wmo1HOVSjO8/2D5 aq+Rb3DYv+/7F3XsYv0MVoHlUOqVwa5bwx7379YvsIt/IeIKrpQnPUBYfXftJGcp vYDBE3Z4XClAe159AbEEipSFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5JnqbK vDP/Flas6DHTkJBs8DegMB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3 NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3 aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6xetUfl98N4YufV0vXRbTfqKRsXP0uxFZHnTeZQsvbP/zGMl2PZaA zSpglTe438U3/WFMHYdcLOiXJ+xb9GOcg7OesNYz9tNB5Ye/7ylpBip9hBfh9Lmt mm2ZawRBPdFEkxKQI7DOOWSq8yfccF9LIYgocyahofyp5gI4AeTnfZm4sWBKL4yr 5ZL/b76DmC0KXdcy/uVvh9+EoYeSGol+Jqix84j6yleXegVTsObtc0T7RRlKI0zj 0f/rDz+VtAssayQWI084W2dzqD8XWeNk9nHZdqaf0/V0gnmK0xz6eIgeAm71oKMQ NSxYo5fT1yqIgmEztDMlIvqBEP0SsXWA -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:38 2025 by rpki-client