This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft File: sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft (raw, json) Hash identifier: Y2edjQ7wm+N/54xgRZn3vQtGUS45XW0FJ1hOAaBXLiY= Subject key identifier: BB:A5:C0:50:F0:74:0C:2E:A2:66:3B:D0:96:84:28:88:9B:97:4B:35 Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2 Certificate issuer: /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft Manifest number: 0B Signing time: Sun 21 Dec 2025 07:05:53 +0000 Manifest this update: Sun 21 Dec 2025 07:05:53 +0000 Manifest next update: Sun 28 Dec 2025 07:05:53 +0000 Files and hashes: 1: sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl (hash: e9b8dvQcYH2J61dchl8mzwNfbzyWUruzOq8vlNac8QI=) 2: AE868E3ED9C311F0B65612906CD3641D.roa (hash: 0OvpHT5K7nTFvUT7IEEUj6lauwVXtHDpYvaG5WqitIA=) 3: C9811862D9C311F09C41289D70D3641D.roa (hash: q3ur6vaj0QiCKwLl3DFzE1DC8goZKUMd7d4YfxBfcJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 07:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2 Validity Not Before: Dec 21 07:05:53 2025 GMT Not After : Dec 28 07:05:53 2025 GMT Subject: CN=69479c51-9c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:81:4d:d0:98:2c:fa:db:8e:da:30:60:f8: 40:91:12:dc:2a:4c:5c:0f:ae:b9:98:3e:96:88:ca: 0f:80:03:5d:ae:6d:33:19:8e:03:73:b3:a1:9a:86: 72:79:45:f6:51:ef:e3:a6:6c:ee:ae:60:87:18:58: 92:02:c9:00:7f:5a:d7:ea:0e:a8:e5:0d:42:98:23: 96:5c:67:19:a6:4a:72:4e:f4:49:d1:56:f2:43:fa: 95:b3:55:6b:95:2e:c8:4e:35:75:01:4d:32:c1:2e: 8f:36:b3:27:09:cf:e7:ed:03:5b:c0:9f:19:d6:e3: 09:6e:b8:64:c0:ed:19:dc:6a:42:72:7c:0d:c9:fa: b3:b0:ac:15:cf:cd:aa:73:6a:20:c7:3a:05:98:d9: 24:2d:7f:ac:ff:ad:47:a7:cd:d2:3b:6e:19:1d:41: b9:5e:37:54:63:25:89:0d:7d:75:65:18:95:a5:e0: 09:a7:f5:49:3a:73:af:c0:81:fd:58:44:a9:85:17: 11:a1:01:e8:83:8b:28:38:80:b3:80:95:a7:19:e5: fe:aa:8a:04:d5:92:38:cc:cf:f5:ad:f9:5e:71:b8: 74:57:c3:4a:50:bb:0b:4f:3c:40:4c:a6:c9:28:2f: ab:7c:da:78:e1:c3:bb:be:f8:e0:80:1b:06:fa:d2: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:C0:50:F0:74:0C:2E:A2:66:3B:D0:96:84:28:88:9B:97:4B:35 X509v3 Authority Key Identifier: keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:33:cf:91:42:5f:52:5b:f3:fd:a4:55:e3:08:1e:c8:6a:2b: fd:1b:ec:c8:47:26:7a:52:8b:1f:90:6b:c2:12:dd:b6:71:b6: d5:d4:09:5f:23:79:b5:3e:e3:d0:78:2b:13:3d:e0:8d:c4:71: d2:28:8f:3f:cb:df:2f:de:7e:23:36:2b:f0:f6:51:33:08:4c: 64:8d:8d:bc:e6:90:28:14:34:2f:76:4f:5d:be:a7:22:3b:95: f7:07:f8:42:b8:b1:ca:4e:7d:18:90:3f:c8:8f:95:16:d6:73: a2:d9:d1:f1:8a:21:b3:6d:7d:47:99:b3:90:e5:65:ef:e9:0f: 0b:65:6f:e3:ff:c4:41:02:10:9e:96:dc:d9:6d:e2:9c:8b:54: ab:11:bb:71:55:27:71:23:4d:d2:af:81:f1:91:75:1d:01:d7: b8:46:ef:53:17:83:65:a0:7c:6e:b3:75:d8:0a:a8:4b:de:c2: 2a:a7:e3:65:1d:17:c5:f9:c0:84:f1:da:2b:81:55:47:5a:fb: de:64:70:5a:d2:57:28:64:ff:a4:29:92:0c:97:6c:8e:d6:a1: 8c:d6:e2:f9:3f:b8:31:43:cc:4c:df:52:38:b1:e9:c9:a0:a4: fc:a3:c9:a2:34:c1:e7:29:e1:71:68:98:9d:b8:dc:ff:12:35: aa:48:d0:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoQjMwRjk2MzAyNTRFQTdFNDI5MURGNkZDNjRBNjk4OTgx ODM3NUZDMjAeFw0yNTEyMjEwNzA1NTNaFw0yNTEyMjgwNzA1NTNaMBgxFjAUBgNV BAMMDTY5NDc5YzUxLTljODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx24FN0Jgs+tuO2jBg+ECREtwqTFwPrrmYPpaIyg+AA12ubTMZjgNzs6GahnJ5 RfZR7+OmbO6uYIcYWJICyQB/WtfqDqjlDUKYI5ZcZxmmSnJO9EnRVvJD+pWzVWuV LshONXUBTTLBLo82sycJz+ftA1vAnxnW4wluuGTA7RncakJyfA3J+rOwrBXPzapz aiDHOgWY2SQtf6z/rUenzdI7bhkdQbleN1RjJYkNfXVlGJWl4Amn9Uk6c6/Agf1Y RKmFFxGhAeiDiyg4gLOAlacZ5f6qigTVkjjMz/Wt+V5xuHRXw0pQuwtPPEBMpsko L6t82njhw7u++OCAGwb60hRlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu6XAUPB0 DC6iZjvQloQoiJuXSzUwHwYDVR0jBBgwFoAUsw+WMCVOp+QpHfb8ZKaYmBg3X8Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0U5RDNGQzk4RDY4 OTExRjBBMkZBMzcwMzZDRDM2NDFEL3N3LVdNQ1ZPcC1RcEhmYjhaS2FZbUJnM1g4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3ctV01DVk9wLVFwSGZiOFpLYVltQmczWDhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0U5RDNGQzk4RDY4OTExRjBBMkZBMzcwMzZDRDM2NDFEL3N3LVdNQ1ZPcC1R cEhmYjhaS2FZbUJnM1g4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwzz5FCX1Jb8/2kVeMIHshqK/0b7MhHJnpSix+Qa8IS3bZxttXUCV8j ebU+49B4KxM94I3EcdIojz/L3y/efiM2K/D2UTMITGSNjbzmkCgUNC92T12+pyI7 lfcH+EK4scpOfRiQP8iPlRbWc6LZ0fGKIbNtfUeZs5DlZe/pDwtlb+P/xEECEJ6W 3Nlt4pyLVKsRu3FVJ3EjTdKvgfGRdR0B17hG71MXg2WgfG6zddgKqEvewiqn42Ud F8X5wITx2iuBVUda+95kcFrSVyhk/6QpkgyXbI7WoYzW4vk/uDFDzEzfUjix6cmg pPyjyaI0wecp4XFomJ243P8SNapI0LI= -----END CERTIFICATE-----Generated at Sun Dec 21 16:11:54 2025 by rpki-client