This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: p3y9FrdbDlWp8Mt4GFmzWu5zvH6UYvapjrrjaA/wVtA= Subject key identifier: 67:99:AC:DE:94:A2:7D:19:E1:0F:7B:7C:CC:BA:85:92:5E:40:3D:43 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0CB0 Signing time: Tue 16 Dec 2025 18:03:44 +0000 Manifest this update: Tue 16 Dec 2025 18:03:43 +0000 Manifest next update: Tue 23 Dec 2025 18:03:43 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: QkjCdX4ddvhYXDaWXlOxU0P09xDQiMKsvmgVcjc6jko=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: Dec 16 18:03:43 2025 GMT Not After : Dec 23 18:03:43 2025 GMT Subject: CN=69419f00-794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:c2:84:ac:0a:09:54:6f:fe:34:7f:cb:97: ed:d8:68:16:00:1e:5a:c4:86:4d:f3:b5:e9:98:d5: bd:87:3e:80:55:a3:03:c0:ac:ca:52:0e:df:1b:a0: a9:f1:2c:0b:c5:55:96:0e:02:72:b3:d0:53:eb:f7: 03:32:3e:cc:2b:b5:bf:22:06:9c:f9:1a:06:41:b6: b6:69:33:bc:f4:64:61:6e:a2:25:b1:8d:85:72:4f: 31:e2:f1:9c:a4:3e:c9:8b:f8:dd:8e:e0:22:d6:be: 0a:4a:81:a0:9b:f7:62:41:dc:71:91:a0:f2:df:a3: 54:a3:0c:4c:a8:61:16:1d:f2:c3:79:4f:4a:11:ea: 30:69:16:bb:17:26:e2:7d:c8:61:b2:22:69:fd:31: 85:c4:15:a6:1f:7c:13:ca:86:97:6c:5d:b0:85:6f: b8:b2:a6:8a:10:4a:9c:86:3e:c5:5a:27:83:0e:c5: 02:c7:8d:06:b8:35:61:79:da:7b:54:78:39:5c:e0: fc:8c:c5:64:31:5b:47:fe:08:45:44:fb:8d:78:e1: 03:a7:15:80:58:55:6b:2a:c1:35:6b:fa:09:8d:30: 05:a4:72:c1:53:1b:df:e4:ea:c8:2c:27:6a:c9:87: c7:c8:f8:9a:ea:6e:84:6e:ac:04:65:a2:a2:fe:d6: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:AC:DE:94:A2:7D:19:E1:0F:7B:7C:CC:BA:85:92:5E:40:3D:43 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:cd:bc:23:45:5c:57:e5:12:e4:3f:e2:cc:56:31:18:c9: 3c:8f:40:c8:8a:ea:a4:45:13:03:2f:39:90:6f:dd:a0:87:ae: 60:71:14:7c:b7:b7:1c:74:cd:19:50:ce:80:bc:f7:19:b1:09: c8:63:26:63:60:24:5d:54:a7:43:af:e8:b7:8a:48:f3:69:8d: 15:0b:95:1c:a0:37:62:e1:20:df:76:d2:bb:85:0f:51:ac:0f: 7b:6f:c0:41:77:9b:9b:dc:bb:e0:ce:75:2d:2f:6c:88:c2:e4: 7d:1f:4b:9e:ff:13:f9:b6:70:52:62:1d:89:38:84:39:29:ad: 19:96:36:89:fb:38:b9:47:ec:22:53:9e:e8:fd:df:37:5d:22: 88:10:c5:c8:0f:01:27:bc:be:b7:09:63:76:df:6c:6f:86:6d: 78:ac:99:57:1f:9a:86:3d:0d:78:f9:d7:58:ed:76:fc:b6:aa: 23:b7:d8:76:f2:fe:02:00:6b:a3:31:d8:eb:ce:82:1d:91:ec: 26:45:a1:6e:01:25:64:53:3a:7e:ff:23:73:f1:10:e9:00:1d: 22:b6:99:4f:cb:f0:14:d7:06:ef:5e:6c:7c:ac:34:c4:3f:06: 2a:49:51:a0:8d:7a:02:77:16:e8:6c:4f:4e:3f:6e:78:b6:79: bc:7e:e7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjUxMjE2MTgwMzQzWhcNMjUxMjIzMTgwMzQzWjAYMRYwFAYD VQQDDA02OTQxOWYwMC03OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6/ChKwKCVRv/jR/y5ft2GgWAB5axIZN87XpmNW9hz6AVaMDwKzKUg7fG6Cp 8SwLxVWWDgJys9BT6/cDMj7MK7W/Igac+RoGQba2aTO89GRhbqIlsY2Fck8x4vGc pD7Ji/jdjuAi1r4KSoGgm/diQdxxkaDy36NUowxMqGEWHfLDeU9KEeowaRa7Fybi fchhsiJp/TGFxBWmH3wTyoaXbF2whW+4sqaKEEqchj7FWieDDsUCx40GuDVhedp7 VHg5XOD8jMVkMVtH/ghFRPuNeOEDpxWAWFVrKsE1a/oJjTAFpHLBUxvf5OrILCdq yYfHyPia6m6EbqwEZaKi/taibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeZrN6U on0Z4Q97fMy6hZJeQD1DMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2s28I0VcV+US5D/izFYxGMk8j0DIiuqkRRMDLzmQb92gh65gcRR8 t7ccdM0ZUM6AvPcZsQnIYyZjYCRdVKdDr+i3ikjzaY0VC5UcoDdi4SDfdtK7hQ9R rA97b8BBd5ub3LvgznUtL2yIwuR9H0ue/xP5tnBSYh2JOIQ5Ka0ZljaJ+zi5R+wi U57o/d83XSKIEMXIDwEnvL63CWN232xvhm14rJlXH5qGPQ14+ddY7Xb8tqojt9h2 8v4CAGujMdjrzoIdkewmRaFuASVkUzp+/yNz8RDpAB0itplPy/AU1wbvXmx8rDTE PwYqSVGgjXoCdxbobE9OP254tnm8fueR -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:30 2025 by rpki-client