This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: Y1/G1sIY+fvL19O1V3G131UvHKFTXP0jAlZLm9Cn3Ks= Subject key identifier: E3:60:6E:47:3B:3E:AB:61:19:79:A6:C8:DD:85:2E:08:1A:F1:21:2B Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: 0125 Signing time: Tue 23 Dec 2025 03:39:36 +0000 Manifest this update: Tue 23 Dec 2025 03:39:35 +0000 Manifest next update: Tue 30 Dec 2025 03:39:35 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: WkFhZ2qRKwznF22I064ujl66wH/EgRdDhqA8KUMu6rY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Dec 23 03:39:35 2025 GMT Not After : Dec 30 03:39:35 2025 GMT Subject: CN=694a0ef8-dbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:99:c2:60:f2:3e:19:77:78:af:12:ee:5f: 88:eb:26:ef:3e:9c:e0:b9:96:0e:bd:08:f4:e6:d4: 16:0d:a7:7d:5d:92:9a:61:ab:bf:d7:28:5b:ab:c9: 45:5f:5a:86:7d:85:0a:f7:8b:90:23:4d:52:dd:86: 40:d1:03:f5:07:bf:fa:d2:b8:bd:5b:bb:74:b3:5c: 93:fc:d6:f7:8f:cb:38:40:d8:86:90:d5:37:1e:13: 3e:31:34:89:94:d3:a2:ee:34:e1:c6:d7:56:bd:fe: 27:2b:7a:18:37:de:e0:b5:f7:62:04:40:e2:df:43: f4:25:72:a6:7b:28:57:64:b9:ba:59:4a:f7:35:f4: 4a:65:93:42:be:52:35:28:f2:d8:ae:f2:0a:4b:3a: 68:95:6e:a0:14:f2:e8:e5:07:fc:ca:1e:23:14:d5: 3e:db:a2:7e:4e:85:4c:ea:d6:71:e2:f2:a2:cb:b8: f4:c2:63:d3:5b:bd:59:4b:48:51:5c:25:10:f1:12: ed:2c:3d:ed:34:f1:c7:25:c3:31:d0:60:a5:b9:f5: 10:d1:06:b2:5a:d0:65:11:34:19:08:cf:b8:fa:36: ce:04:7a:cb:8a:01:cc:6a:4d:04:ae:bc:31:cf:73: 7f:1e:72:96:19:77:3f:21:ce:89:3c:a5:0b:24:6f: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:60:6E:47:3B:3E:AB:61:19:79:A6:C8:DD:85:2E:08:1A:F1:21:2B X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:09:11:d7:17:58:02:d3:3c:aa:5b:4d:a5:a2:c1:65:a6:9a: ce:78:39:bd:b9:2f:32:9b:74:50:49:41:da:77:55:9b:f3:29: 7c:88:95:67:18:f9:bb:bb:02:72:1b:a4:2c:1e:a6:44:86:d6: 19:df:3d:70:14:97:26:27:bf:7e:76:cd:5c:e1:d0:bd:0a:44: 72:c6:07:9d:d1:fb:44:98:07:69:84:1b:b6:09:19:04:75:dd: 3c:5a:35:33:17:32:5a:86:30:34:09:91:49:6b:56:58:62:2a: 36:c1:e9:76:72:dd:65:d8:d9:6d:9d:40:97:1a:5b:66:2e:df: 16:ef:73:12:55:d9:cf:fb:54:a0:44:15:12:e2:4a:a8:e5:16: 5d:e5:1e:4b:9d:65:e3:a6:63:7b:68:e8:69:dd:fd:1b:3b:a5: 55:61:47:91:15:13:4a:e4:f0:37:90:ca:b6:84:28:d1:05:56: c8:72:3f:a7:20:0b:4b:5c:6f:84:5e:5e:6a:7a:90:74:03:8c: da:0a:6e:86:db:25:c5:0f:3f:23:53:4c:4a:97:85:fb:78:58: 7c:cf:b4:0c:ce:45:e3:e4:e2:a3:e8:3d:1f:4d:56:8e:51:97: eb:a6:f9:b2:c1:6c:3a:3d:e0:ad:83:bc:c3:95:99:23:27:bd: 77:c1:37:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUxMjIzMDMzOTM1WhcNMjUxMjMwMDMzOTM1WjAYMRYwFAYD VQQDDA02OTRhMGVmOC1kYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9uZwmDyPhl3eK8S7l+I6ybvPpzguZYOvQj05tQWDad9XZKaYau/1yhbq8lF X1qGfYUK94uQI01S3YZA0QP1B7/60ri9W7t0s1yT/Nb3j8s4QNiGkNU3HhM+MTSJ lNOi7jThxtdWvf4nK3oYN97gtfdiBEDi30P0JXKmeyhXZLm6WUr3NfRKZZNCvlI1 KPLYrvIKSzpolW6gFPLo5Qf8yh4jFNU+26J+ToVM6tZx4vKiy7j0wmPTW71ZS0hR XCUQ8RLtLD3tNPHHJcMx0GClufUQ0QayWtBlETQZCM+4+jbOBHrLigHMak0Errwx z3N/HnKWGXc/Ic6JPKULJG+iLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONgbkc7 PqthGXmmyN2FLgga8SErMB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCRHXF1gC0zyqW02losFlpprOeDm9uS8ym3RQSUHad1Wb8yl8iJVn GPm7uwJyG6QsHqZEhtYZ3z1wFJcmJ79+ds1c4dC9CkRyxged0ftEmAdphBu2CRkE dd08WjUzFzJahjA0CZFJa1ZYYio2wel2ct1l2NltnUCXGltmLt8W73MSVdnP+1Sg RBUS4kqo5RZd5R5LnWXjpmN7aOhp3f0bO6VVYUeRFRNK5PA3kMq2hCjRBVbIcj+n IAtLXG+EXl5qepB0A4zaCm6G2yXFDz8jU0xKl4X7eFh8z7QMzkXj5OKj6D0fTVaO UZfrpvmywWw6PeCtg7zDlZkjJ713wTfl -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client