This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: DfgZWpj8vn0JJ8tG6Q6Rb8AdfF94paIcqYkyswcuVXg= Subject key identifier: 92:5A:02:7C:C6:CC:42:20:5B:18:08:EB:6B:FF:8F:5F:7A:50:87:EB Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 5D Signing time: Sun 07 Dec 2025 05:10:38 +0000 Manifest this update: Sun 07 Dec 2025 05:10:37 +0000 Manifest next update: Sun 14 Dec 2025 05:10:37 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: r7kq5mHfDdWBLrpfbfW2OBl74m7iurSDBgzQcBCuZK8=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Dec 7 05:10:37 2025 GMT Not After : Dec 14 05:10:37 2025 GMT Subject: CN=69350c4e-784a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:27:28:6d:07:0a:73:82:fa:45:65:ee:5d: 6f:6a:a6:64:91:23:e4:1c:69:53:4c:44:20:19:db: 7e:d3:eb:91:6b:77:29:d7:4f:0d:28:b6:d7:5f:e9: 2b:80:0f:24:7f:f9:e8:2e:45:5c:b5:72:30:c2:09: 6a:6a:8d:71:50:15:1f:7a:ca:c7:bd:f8:26:9a:28: 8e:96:0c:07:d3:36:ec:1c:9f:5e:88:61:7c:5e:4c: a4:44:ff:b9:31:16:ad:a2:8a:1b:4d:52:bc:a4:9d: 2d:a7:b8:71:5b:6e:9e:2a:ab:30:a0:79:54:69:dd: b9:c8:38:46:a3:d8:4f:11:c0:5d:f4:6a:b4:f9:f1: 4c:8a:6d:f9:fe:9f:20:9b:bd:c8:6d:dc:89:57:c6: 14:c1:be:d3:cb:42:0b:df:9b:5e:b6:42:6f:f5:ff: fc:5f:57:93:86:81:42:ef:7d:d3:27:13:05:c4:aa: 4d:b0:e9:a6:2c:a9:3b:01:85:e9:cf:ef:c9:23:cf: c3:b3:87:9f:b6:a1:6f:58:62:c2:dc:5e:18:4f:94: 8d:42:b6:08:88:7b:a1:ac:12:f5:5c:8d:bd:43:6a: 4b:2e:e9:d9:16:94:88:5d:74:f4:0e:4a:84:96:6d: f0:cf:75:f8:33:f4:4b:8f:43:7d:58:76:44:35:89: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:02:7C:C6:CC:42:20:5B:18:08:EB:6B:FF:8F:5F:7A:50:87:EB X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1d:c7:25:0f:8d:27:50:e1:f0:23:98:6a:bb:6e:37:86:c5: aa:57:89:72:48:0f:93:21:97:33:81:d5:65:cf:40:a5:9f:d1: 60:0c:19:d1:46:25:da:28:bb:c7:9a:12:d8:75:4c:98:12:e2: 47:f9:e1:d3:62:87:b3:cf:20:4b:d7:58:b5:b6:0e:1b:49:67: 16:44:0f:1e:58:a5:12:1c:f6:c5:68:da:d4:af:f3:33:ea:1f: ed:d5:70:ee:52:da:3d:54:10:7b:da:05:d8:07:92:74:0b:d0: d7:e2:07:1c:74:6c:61:21:c6:17:2b:1a:ca:5a:22:6d:e8:d8: 7b:71:f6:36:24:f9:70:42:53:cb:02:2d:a6:c0:ac:07:53:84: e4:94:f1:45:e4:e2:c4:d1:9f:e8:0e:ea:88:1c:88:98:e9:66: af:ca:b1:ef:9c:1b:08:5e:d0:f3:2b:5e:39:5c:a4:e1:18:60: f0:da:ba:e1:5d:f0:18:3f:96:38:79:17:0d:eb:18:9c:fd:fb: 2e:2f:7b:10:fd:29:87:fe:96:30:06:4c:ab:e5:6e:9c:7d:4a: b3:0e:c1:ca:25:9c:a9:f3:5a:a6:dd:5b:86:a5:d9:71:ed:b5: 61:ec:68:6d:64:d5:d7:90:e4:b7:d2:16:eb:a0:3d:84:f1:ec: 38:ca:97:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTEyMDcwNTEwMzdaFw0yNTEyMTQwNTEwMzdaMBgxFjAUBgNV BAMTDTY5MzUwYzRlLTc4NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYeCcobQcKc4L6RWXuXW9qpmSRI+QcaVNMRCAZ237T65FrdynXTw0ottdf6SuA DyR/+eguRVy1cjDCCWpqjXFQFR96yse9+CaaKI6WDAfTNuwcn16IYXxeTKRE/7kx Fq2iihtNUryknS2nuHFbbp4qqzCgeVRp3bnIOEaj2E8RwF30arT58UyKbfn+nyCb vcht3IlXxhTBvtPLQgvfm162Qm/1//xfV5OGgULvfdMnEwXEqk2w6aYsqTsBhenP 78kjz8Ozh5+2oW9YYsLcXhhPlI1CtgiIe6GsEvVcjb1Daksu6dkWlIhddPQOSoSW bfDPdfgz9EuPQ31YdkQ1iRBTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkloCfMbM QiBbGAjra/+PX3pQh+swHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcdxyUPjSdQ4fAjmGq7bjeGxapXiXJID5MhlzOB1WXPQKWf0WAMGdFG Jdoou8eaEth1TJgS4kf54dNih7PPIEvXWLW2DhtJZxZEDx5YpRIc9sVo2tSv8zPq H+3VcO5S2j1UEHvaBdgHknQL0NfiBxx0bGEhxhcrGspaIm3o2Htx9jYk+XBCU8sC LabArAdThOSU8UXk4sTRn+gO6ogciJjpZq/Kse+cGwhe0PMrXjlcpOEYYPDauuFd 8Bg/ljh5Fw3rGJz9+y4vexD9KYf+ljAGTKvlbpx9SrMOwcolnKnzWqbdW4al2XHt tWHsaG1k1deQ5LfSFuugPYTx7DjKl0o= -----END CERTIFICATE-----Generated at Sun Dec 7 15:31:00 2025 by rpki-client