This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json) Hash identifier: XTlmsXCwMqoACrPRUGMA2M7+oRS8DsTKCNTVI29n5EQ= Subject key identifier: E0:29:4D:20:5E:46:A3:C8:C4:16:97:36:C5:A5:22:4A:C7:44:8D:E2 Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft Manifest number: 2E Signing time: Tue 23 Dec 2025 06:27:44 +0000 Manifest this update: Tue 23 Dec 2025 06:27:43 +0000 Manifest next update: Tue 30 Dec 2025 06:27:43 +0000 Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: CGGxAPQYNY1eLL2QWiwNJUDhfzfgX+Alt4e8foYws3Y=) 2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: iL5Q8l5UWu94q64YaDJD+oexRS/HLLSzlzHuSDLmHTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Validity Not Before: Dec 23 06:27:43 2025 GMT Not After : Dec 30 06:27:43 2025 GMT Subject: CN=694a3660-17e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:5f:de:03:34:6e:f2:1d:09:21:48:b7:a7: 0c:2c:95:68:09:78:27:94:1e:69:4d:ef:ba:d8:94: 71:3c:f4:23:02:57:75:ec:87:f0:bb:0e:0a:b4:3f: 8e:7d:d6:02:45:6f:27:dd:05:85:f2:65:92:b9:13: 45:0f:27:43:6e:13:97:29:89:de:8a:46:d8:68:06: a9:67:bf:41:44:fd:e7:59:13:3d:04:33:b7:f9:ce: 93:79:19:d9:50:74:0d:b4:0e:a8:64:84:52:62:b8: 6a:03:12:2a:5a:b4:58:25:73:bd:ef:ed:91:40:f6: b2:42:21:d4:39:13:59:bc:04:43:e0:93:55:67:e2: 56:53:86:c0:4c:55:9a:5e:76:02:2b:07:11:7e:ad: a7:4e:6b:96:4c:d0:ff:2b:0b:35:49:2b:79:03:6f: fa:84:19:32:f8:cc:53:ae:bf:1f:6d:e0:94:de:0e: 96:67:60:70:0e:87:ef:8d:4c:ac:bc:dd:a6:08:36: 13:7b:47:a6:f3:87:93:bd:35:b1:b9:37:f6:9f:e6: 08:3a:30:eb:11:28:1c:53:ca:5d:e5:37:9f:f7:2c: 82:55:31:e4:c2:e7:2b:d7:e5:72:5e:21:94:07:47: 73:0c:f8:1f:dc:fd:ae:0b:f2:59:a8:8a:46:f0:e1: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:4D:20:5E:46:A3:C8:C4:16:97:36:C5:A5:22:4A:C7:44:8D:E2 X509v3 Authority Key Identifier: keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:7f:a7:36:ca:cb:df:3e:37:b1:2a:92:b9:f1:80:19:97:8d: 55:ab:69:50:03:4e:91:90:25:de:c1:f0:a4:c6:1c:6b:1e:82: 0f:07:fc:d3:c6:5f:47:a6:c8:88:18:47:04:f8:b6:f2:97:e9: 56:3b:c6:56:56:ee:76:d6:3b:90:2e:4d:39:a2:fd:27:2f:22: 17:cf:e6:af:2a:a8:e6:f5:43:42:d7:14:d3:3d:55:bb:18:fe: a0:29:56:a6:79:dd:74:23:b6:58:6f:58:04:d3:b2:d6:96:de: fc:ea:13:12:93:30:7f:12:28:dc:50:25:54:d8:09:b1:5f:02: 53:fb:b6:cb:58:83:c6:c7:b0:fe:75:e6:12:99:a3:59:06:56: 77:4c:b4:dc:fe:de:a2:f2:27:e9:5b:d8:4c:3d:6b:e8:71:f8: 45:ab:cd:93:02:09:69:7e:78:8d:0c:a3:3e:1a:7b:5d:18:cb: 4c:be:60:64:97:3f:54:48:d1:ba:33:54:a6:f6:26:2f:7d:ea: d8:b7:90:b5:01:2e:bf:8d:98:e7:c8:ac:da:19:e3:30:c7:39: 50:37:dd:ef:6b:73:b0:0e:de:72:74:71:43:80:99:83:82:c9: 0e:93:e4:2f:03:e3:43:2f:34:dd:55:37:d3:56:2f:3a:10:e8: 8a:f0:00:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkE3NDExMC8GA1UEBRMoQUQ2NTM0ODM5RkU2QTdBODc3NjBBMUVEMEEzOUMzMTA2 OTNGQjlGRjAeFw0yNTEyMjMwNjI3NDNaFw0yNTEyMzAwNjI3NDNaMBgxFjAUBgNV BAMMDTY5NGEzNjYwLTE3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMoF/eAzRu8h0JIUi3pwwslWgJeCeUHmlN77rYlHE89CMCV3Xsh/C7Dgq0P459 1gJFbyfdBYXyZZK5E0UPJ0NuE5cpid6KRthoBqlnv0FE/edZEz0EM7f5zpN5GdlQ dA20DqhkhFJiuGoDEipatFglc73v7ZFA9rJCIdQ5E1m8BEPgk1Vn4lZThsBMVZpe dgIrBxF+radOa5ZM0P8rCzVJK3kDb/qEGTL4zFOuvx9t4JTeDpZnYHAOh++NTKy8 3aYINhN7R6bzh5O9NbG5N/af5gg6MOsRKBxTyl3lN5/3LIJVMeTC5yvX5XJeIZQH R3MM+B/c/a4L8lmoikbw4TrHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ClNIF5G o8jEFpc2xaUiSsdEjeIwHwYDVR0jBBgwFoAUrWU0g5/mp6h3YKHtCjnDEGk/uf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QTc0LzRDMzFGQjQ0OUE4 ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZoM1lLSHRDam5ERUdrX3Vm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcldVMGc1X21wNmgzWUtIdENqbkRFR2tfdWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QTc0LzRDMzFGQjQ0OUE4ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZo M1lLSHRDam5ERUdrX3VmOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJN/pzbKy98+N7EqkrnxgBmXjVWraVADTpGQJd7B8KTGHGsegg8H/NPG X0emyIgYRwT4tvKX6VY7xlZW7nbWO5AuTTmi/ScvIhfP5q8qqOb1Q0LXFNM9VbsY /qApVqZ53XQjtlhvWATTstaW3vzqExKTMH8SKNxQJVTYCbFfAlP7tstYg8bHsP51 5hKZo1kGVndMtNz+3qLyJ+lb2Ew9a+hx+EWrzZMCCWl+eI0Moz4ae10Yy0y+YGSX P1RI0bozVKb2Ji996ti3kLUBLr+NmOfIrNoZ4zDHOVA33e9rc7AO3nJ0cUOAmYOC yQ6T5C8D40MvNN1VN9NWLzoQ6IrwAC8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client