This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: Ov5/9Iq9XIh5uU6i2iW4UnQWNXd9uhpVUP/pcRxJnG8= Subject key identifier: 83:A1:95:58:0E:39:41:0F:6E:99:C7:4B:89:C2:6F:C2:45:9C:06:94 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 110B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 1103 Signing time: Mon 22 Dec 2025 16:57:58 +0000 Manifest this update: Mon 22 Dec 2025 16:57:58 +0000 Manifest next update: Mon 29 Dec 2025 16:57:58 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: LmJD1TrNT5KbPb28JMlcYIqyCsl+gf9hXrTcea+yR/E=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4363 (0x110b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Dec 22 16:57:58 2025 GMT Not After : Dec 29 16:57:58 2025 GMT Subject: CN=69497896-9129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:f7:08:0c:c6:74:d1:99:2e:af:81:45:82: 7a:b0:10:e6:cb:aa:47:92:8e:e7:6c:00:58:9f:40: f8:d6:b6:5c:19:28:a2:40:d8:b2:7b:b9:be:70:de: 00:c0:1f:78:bb:89:f8:a4:ec:31:e6:96:e3:2f:3c: d8:99:31:88:e9:b8:6d:b6:80:da:ae:9c:27:82:ed: 90:af:99:3f:50:71:7f:77:bf:c2:dc:3b:08:03:34: 70:ee:75:9a:06:a6:96:b7:4a:69:2e:2d:48:cc:f1: 99:53:d7:a9:2e:41:d6:67:4f:12:42:c6:22:f1:0e: 2c:c0:0b:3d:d5:94:98:25:6e:77:65:a7:9f:e5:72: 5c:bd:48:ee:66:1f:09:59:5d:d1:91:1e:4b:6b:e5: 6b:65:a6:62:2f:51:6b:9c:0c:80:88:57:09:e3:85: 4c:7c:7b:6d:56:cf:c3:00:20:7d:5b:b3:5a:01:6b: a8:d1:e2:3c:44:8b:5c:bd:95:be:f3:6b:cb:d4:79: d5:a0:86:6a:6c:1a:ae:f7:ad:2a:a1:af:47:fa:d1: f4:70:85:9c:43:27:49:8d:df:73:52:e7:a4:90:ef: cb:2d:17:ed:a5:2a:f1:4d:0c:0a:b0:54:cb:9e:26: 3e:ca:c8:6c:62:56:a1:c3:0c:c9:f3:42:e9:63:d4: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A1:95:58:0E:39:41:0F:6E:99:C7:4B:89:C2:6F:C2:45:9C:06:94 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e0:b1:2c:0a:1d:9e:9e:f3:5d:92:7b:a1:2b:63:3d:a5:0b: 11:cf:a4:b7:bd:e7:54:62:db:66:fb:66:15:63:78:b3:be:e6: eb:e2:96:6e:26:ab:5c:6a:7c:f2:61:8e:49:0e:84:0b:50:c7: 66:12:dc:f3:9a:68:3b:50:cc:66:1d:da:49:56:fa:a0:fb:dd: 82:83:c6:5c:88:0c:eb:11:f8:94:07:2a:49:92:1e:e1:12:f1: 67:1d:a3:56:26:ed:1c:85:1d:9d:72:d1:c2:5a:ae:13:f7:c1: 65:d1:ab:cf:86:6e:07:e0:f8:33:47:d3:a2:1f:ae:6e:53:27: 29:7f:33:35:77:ad:d6:74:79:f4:01:9c:6e:f0:07:9f:74:98: 21:55:61:30:b3:a7:33:e7:fd:9b:dc:31:5b:32:36:48:d1:4b: aa:ec:a5:82:b9:2a:ba:b2:ac:35:e7:f5:28:98:ca:7c:62:45: 38:45:54:ab:2c:d5:1c:c4:60:c3:23:3e:5f:83:4e:20:72:82: 8f:17:e7:56:bb:6f:e9:38:73:a3:ed:61:4b:9c:69:6b:a3:9a: 00:74:ff:bf:5a:fb:27:47:3c:c6:63:dd:88:e3:b0:ed:4f:b7: 00:e6:e4:eb:e4:9f:b2:ea:da:a7:10:f7:2f:31:57:e6:9f:23: cc:e1:3c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUxMjIyMTY1NzU4WhcNMjUxMjI5MTY1NzU4WjAYMRYwFAYD VQQDDA02OTQ5Nzg5Ni05MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4E73CAzGdNGZLq+BRYJ6sBDmy6pHko7nbABYn0D41rZcGSiiQNiye7m+cN4A wB94u4n4pOwx5pbjLzzYmTGI6bhttoDarpwngu2Qr5k/UHF/d7/C3DsIAzRw7nWa BqaWt0ppLi1IzPGZU9epLkHWZ08SQsYi8Q4swAs91ZSYJW53Zaef5XJcvUjuZh8J WV3RkR5La+VrZaZiL1FrnAyAiFcJ44VMfHttVs/DACB9W7NaAWuo0eI8RItcvZW+ 82vL1HnVoIZqbBqu960qoa9H+tH0cIWcQydJjd9zUuekkO/LLRftpSrxTQwKsFTL niY+yshsYlahwwzJ80LpY9SlwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOhlVgO OUEPbpnHS4nCb8JFnAaUMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH4LEsCh2envNdknuhK2M9pQsRz6S3vedUYttm+2YVY3izvubr4pZu JqtcanzyYY5JDoQLUMdmEtzzmmg7UMxmHdpJVvqg+92Cg8ZciAzrEfiUBypJkh7h EvFnHaNWJu0chR2dctHCWq4T98Fl0avPhm4H4PgzR9OiH65uUycpfzM1d63WdHn0 AZxu8AefdJghVWEws6cz5/2b3DFbMjZI0Uuq7KWCuSq6sqw15/UomMp8YkU4RVSr LNUcxGDDIz5fg04gcoKPF+dWu2/pOHOj7WFLnGlro5oAdP+/WvsnRzzGY92I47Dt T7cA5uTr5J+y6tqnEPcvMVfmnyPM4Txw -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:41 2025 by rpki-client