This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: 7vxsbjlW002ovKypmUEDq6oQSn4kVl5xvO7zhVFYgU0= Subject key identifier: E2:64:F2:44:D5:6B:5B:EC:3A:5B:82:10:65:77:16:9A:BA:87:4A:EC Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 350D Signing time: Sat 20 Dec 2025 15:06:24 +0000 Manifest this update: Sat 20 Dec 2025 15:06:24 +0000 Manifest next update: Sat 27 Dec 2025 15:06:24 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: oE+pYQRaXT9HycrTtSr94WhuDGHKvmhjefXWhN8jj08=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Dec 20 15:06:24 2025 GMT Not After : Dec 27 15:06:24 2025 GMT Subject: CN=6946bb70-8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:14:80:0f:39:f2:60:33:a0:09:24:c1:39: 88:8e:c5:27:1e:05:09:9b:f0:2e:33:36:17:04:6f: a4:2c:50:2d:25:c0:09:a5:56:e1:8a:93:fc:ab:e0: 64:e0:11:90:94:5a:c1:4e:ff:3f:b1:2f:3e:91:5e: 6d:f4:51:de:be:a0:7e:a4:da:98:be:02:30:6c:30: 96:d5:6d:86:2d:ae:67:fa:df:e6:0e:85:0e:64:cc: 95:4f:b5:ad:21:3c:2f:a1:ad:ae:22:95:87:e4:4b: 23:6d:26:fa:90:b6:94:40:8d:6c:0c:aa:e4:18:f0: 5c:97:47:59:69:e8:35:68:98:b8:b2:61:59:a5:b6: ea:99:11:1e:ab:e4:bd:65:99:5c:fc:14:13:af:03: fb:b1:25:a8:e9:a2:34:83:bc:b7:e8:fe:db:92:ae: df:e6:44:2d:fe:68:c0:f9:d2:0f:ae:cf:55:3b:6c: bb:05:e9:4b:4d:cd:35:78:af:4a:9e:80:db:de:dd: 00:cf:36:e4:be:0e:f3:5c:7c:52:da:de:4f:41:78: f9:80:71:48:d9:cf:35:10:f1:7a:dd:62:7a:a0:54: 2d:37:5b:88:5a:a6:62:21:b3:4c:54:dd:01:e7:cb: ba:4f:9d:ea:e4:84:06:4e:41:e6:70:52:bf:4e:8a: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:64:F2:44:D5:6B:5B:EC:3A:5B:82:10:65:77:16:9A:BA:87:4A:EC X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:be:cb:b4:c2:71:f6:b6:db:40:e0:89:33:a6:92:8f:e1: a0:6f:fb:9e:8b:3b:c8:41:7d:cc:da:17:8a:0e:22:2d:ba:fd: fc:75:6a:15:9d:2b:ed:f3:a1:ec:12:b4:da:6b:41:bf:cc:11: 39:f4:ca:64:4d:b9:89:5e:ac:ed:4c:f4:f1:e1:f1:f1:a9:58: b2:04:97:b3:d1:9b:33:79:7d:fe:f9:8c:c7:46:d7:58:4a:ce: 62:f6:80:5d:2e:94:8c:d7:14:74:22:52:bd:fb:ab:98:de:46: 51:87:55:58:12:43:e4:54:6c:7e:65:27:8b:54:88:66:57:e1: df:49:4e:95:c6:0b:f1:af:6c:93:cf:bb:ff:af:f5:3f:13:40: b7:4d:f5:28:a7:d7:ec:8a:54:52:7f:ca:e4:22:e7:db:bb:1b: 76:f8:39:18:20:20:eb:5d:15:51:c2:f5:2a:6d:a1:d6:24:0b: 84:81:05:d6:20:83:ed:1c:a6:39:ad:88:2e:32:ee:c6:54:c3: 26:f4:e6:56:ba:eb:dc:54:22:6f:d9:f2:45:2f:90:a4:f6:37: be:5e:d5:42:84:be:d3:00:92:a9:76:fc:23:c7:9e:1e:5b:8b: d5:dc:e6:aa:75:6f:b2:84:ea:24:4e:ae:da:bc:e8:b1:9a:6f: f1:43:3a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUxMjIwMTUwNjI0WhcNMjUxMjI3MTUwNjI0WjAYMRYwFAYD VQQDDA02OTQ2YmI3MC04ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAitUUgA858mAzoAkkwTmIjsUnHgUJm/AuMzYXBG+kLFAtJcAJpVbhipP8q+Bk 4BGQlFrBTv8/sS8+kV5t9FHevqB+pNqYvgIwbDCW1W2GLa5n+t/mDoUOZMyVT7Wt ITwvoa2uIpWH5EsjbSb6kLaUQI1sDKrkGPBcl0dZaeg1aJi4smFZpbbqmREeq+S9 ZZlc/BQTrwP7sSWo6aI0g7y36P7bkq7f5kQt/mjA+dIPrs9VO2y7BelLTc01eK9K noDb3t0Azzbkvg7zXHxS2t5PQXj5gHFI2c81EPF63WJ6oFQtN1uIWqZiIbNMVN0B 58u6T53q5IQGTkHmcFK/ToplqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJk8kTV a1vsOluCEGV3Fpq6h0rsMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Ir7LtMJx9rbbQOCJM6aSj+Ggb/ueizvIQX3M2heKDiItuv38dWoV nSvt86HsErTaa0G/zBE59MpkTbmJXqztTPTx4fHxqViyBJez0ZszeX3++YzHRtdY Ss5i9oBdLpSM1xR0IlK9+6uY3kZRh1VYEkPkVGx+ZSeLVIhmV+HfSU6Vxgvxr2yT z7v/r/U/E0C3TfUop9fsilRSf8rkIufbuxt2+DkYICDrXRVRwvUqbaHWJAuEgQXW IIPtHKY5rYguMu7GVMMm9OZWuuvcVCJv2fJFL5Ck9je+XtVChL7TAJKpdvwjx54e W4vV3OaqdW+yhOokTq7avOixmm/xQzom -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:02 2025 by rpki-client