This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: GH5JHuwN+I88i++jCg3qUjVBnlZ55f/ZLySXLje7pKk= Subject key identifier: C1:C7:76:CE:98:59:09:F5:FA:87:28:7D:22:0C:A7:48:42:71:83:BC Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 0388 Signing time: Mon 22 Dec 2025 23:49:51 +0000 Manifest this update: Mon 22 Dec 2025 23:49:51 +0000 Manifest next update: Mon 29 Dec 2025 23:49:51 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: YKPuuFvND+m8/JUlO6Aw+yrm0AMQXWXzt7AKBV9WEDk=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Dec 22 23:49:51 2025 GMT Not After : Dec 29 23:49:51 2025 GMT Subject: CN=6949d91f-1442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:2f:b7:0c:87:05:e6:30:d5:25:7d:e1:cf: bb:bb:fd:b5:31:b0:c9:f4:21:fd:a1:f1:cf:0e:36: d4:9d:f7:e1:2d:a8:f9:d3:de:da:89:46:c4:fe:a9: b2:c7:de:66:5c:c5:f0:c4:8f:9e:84:b6:df:81:13: 65:fd:6e:13:8d:3f:c1:3e:6c:b8:bd:00:38:10:52: 2f:6b:af:72:9d:98:aa:0d:b3:94:57:d6:59:fb:fb: da:45:f8:75:24:e7:39:03:a1:9d:c6:41:bb:b6:b1: 99:bd:55:d4:22:8c:5d:7a:63:b3:19:57:83:93:41: 92:30:67:70:1d:5e:fc:f6:ed:97:86:0a:da:2b:a3: d7:4f:57:5c:6b:2b:ef:73:dd:55:8a:1c:9d:c9:d0: 95:00:56:b7:c7:23:72:78:1f:de:c8:1e:20:9f:2d: 05:96:87:f3:5e:f8:ed:93:87:8a:dc:31:c4:61:ea: f9:3b:58:f5:97:05:b8:cb:22:f8:26:79:f7:4b:99: bf:b9:e8:ec:69:2b:c0:43:69:26:2c:a6:e3:6f:56: 96:32:3f:6c:f7:06:08:65:fd:e1:ac:68:da:b3:55: 7d:8e:c9:9b:2c:5c:89:e6:a1:83:ad:a7:a7:51:ad: 07:b4:07:c7:1d:3b:bf:e6:b7:b5:79:47:d4:2c:25: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C7:76:CE:98:59:09:F5:FA:87:28:7D:22:0C:A7:48:42:71:83:BC X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:11:4b:e1:84:bd:7d:75:42:f6:9e:47:6e:1e:cd:e4:5e:3a: e9:d0:c2:e7:70:f4:ba:0f:59:b3:93:86:20:5d:1a:c0:02:01: 62:cb:2e:fa:b0:c4:6a:13:8f:4f:bc:b3:9d:94:e2:c5:f6:55: 31:38:2c:fb:7c:3a:b6:96:05:c2:2e:98:a0:d1:25:bf:e6:64: 7d:f4:45:9a:b1:65:eb:47:c3:1d:c3:be:56:ea:99:0e:99:9c: 01:bd:d6:11:83:b1:46:1b:85:d6:71:86:3f:c6:05:af:d6:4d: 71:66:eb:04:8a:83:9a:7c:d1:74:96:93:5a:a4:55:08:49:e5: b2:42:e6:48:a6:9f:29:04:e0:69:f8:8c:bd:be:9e:25:dc:15: 97:4b:89:47:00:e5:1a:b7:ec:32:3b:8d:6a:48:c6:2f:46:a0: a6:f5:5d:c4:2f:cb:65:18:3f:d0:84:09:f3:25:78:0e:50:86: b3:41:00:88:c5:a2:ff:36:9c:6c:2c:96:c4:95:0d:ad:4f:23: 2a:13:b8:1c:83:07:b8:b1:d4:f5:75:c9:50:84:f5:09:5b:3e: 61:e8:98:93:b5:ae:c5:39:8d:2a:1e:cc:b8:05:ab:9d:cf:5c: 35:f1:05:b2:c6:02:81:c3:23:d3:d7:b3:29:17:fd:e8:ab:f8: 28:92:4d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUxMjIyMjM0OTUxWhcNMjUxMjI5MjM0OTUxWjAYMRYwFAYD VQQDDA02OTQ5ZDkxZi0xNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1cvtwyHBeYw1SV94c+7u/21MbDJ9CH9ofHPDjbUnffhLaj5097aiUbE/qmy x95mXMXwxI+ehLbfgRNl/W4TjT/BPmy4vQA4EFIva69ynZiqDbOUV9ZZ+/vaRfh1 JOc5A6GdxkG7trGZvVXUIoxdemOzGVeDk0GSMGdwHV789u2XhgraK6PXT1dcayvv c91VihydydCVAFa3xyNyeB/eyB4gny0FlofzXvjtk4eK3DHEYer5O1j1lwW4yyL4 Jnn3S5m/uejsaSvAQ2kmLKbjb1aWMj9s9wYIZf3hrGjas1V9jsmbLFyJ5qGDraen Ua0HtAfHHTu/5re1eUfULCU2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHHds6Y WQn1+ocofSIMp0hCcYO8MB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZEUvhhL19dUL2nkduHs3kXjrp0MLncPS6D1mzk4YgXRrAAgFiyy76 sMRqE49PvLOdlOLF9lUxOCz7fDq2lgXCLpig0SW/5mR99EWasWXrR8Mdw75W6pkO mZwBvdYRg7FGG4XWcYY/xgWv1k1xZusEioOafNF0lpNapFUISeWyQuZIpp8pBOBp +Iy9vp4l3BWXS4lHAOUat+wyO41qSMYvRqCm9V3EL8tlGD/QhAnzJXgOUIazQQCI xaL/NpxsLJbElQ2tTyMqE7gcgwe4sdT1dclQhPUJWz5h6JiTta7FOY0qHsy4Baud z1w18QWyxgKBwyPT17MpF/3oq/gokk24 -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:07 2025 by rpki-client