This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json) Hash identifier: NaFpEsJNgrfCoRJjnMhO83DxDm+5OBLF7xTKZPeSCMI= Subject key identifier: 0E:19:E7:6A:4E:55:E6:AA:DE:1F:23:72:75:91:20:7B:FC:85:02:08 Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 1194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft Manifest number: 117F Signing time: Mon 22 Dec 2025 16:55:45 +0000 Manifest this update: Mon 22 Dec 2025 16:55:44 +0000 Manifest next update: Mon 29 Dec 2025 16:55:44 +0000 Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: +jjbLU+3jbLdpaKZhjmL5olTToDNj+yNi2KS+ZW4/q8=) 2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: 6AfnF5nLJAE3w4JLaTI+K2fojs88gAENM8OolAaJRQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4500 (0x1194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: Dec 22 16:55:44 2025 GMT Not After : Dec 29 16:55:44 2025 GMT Subject: CN=69497811-9c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:a9:46:91:ca:19:19:1e:9b:64:17:97:aa: d9:23:bb:0e:c9:d2:3a:e6:7d:fb:4d:9a:dc:77:cb: 25:32:d3:e9:62:6d:9f:83:71:d2:9a:67:9a:38:f5: 22:47:aa:4f:0c:36:46:9d:41:5a:9c:21:76:12:49: ff:94:8b:40:6a:e3:bc:6c:47:c1:7b:3a:a3:8a:56: fd:73:77:36:4c:38:cb:ad:25:ac:cd:51:2a:fe:e0: c4:e6:91:64:a7:fd:58:22:f7:32:64:e5:6d:c4:f4: c2:aa:73:ba:a8:d7:ac:11:c4:ff:a3:95:2e:16:af: 05:4c:df:00:8a:78:a3:da:76:b2:e4:9d:9c:3b:88: 9f:e7:03:5d:74:83:d4:a9:44:a0:e5:04:aa:d2:c7: 75:c1:d6:05:52:1d:b8:f5:88:8d:fd:75:1a:cc:49: cc:de:e9:39:d3:58:f7:12:7e:b1:4a:3e:6f:ae:f0: 0e:61:3c:3b:93:c2:13:08:2e:97:7f:ef:13:4a:ca: 17:5b:91:82:ff:53:4e:f0:9e:8a:35:10:bb:00:b9: 96:d7:e1:41:da:12:c8:4c:c0:18:32:41:04:8d:df: ac:67:1d:e3:f6:73:21:7f:7a:ce:ec:a8:25:ce:6f: 36:bb:53:41:0f:99:17:e7:f0:6e:c0:ff:76:8e:be: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:19:E7:6A:4E:55:E6:AA:DE:1F:23:72:75:91:20:7B:FC:85:02:08 X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bd:bb:34:76:65:29:fa:95:5e:b0:47:1a:8f:06:15:36:41: 9b:da:fe:ed:9e:5f:9e:01:f8:2d:67:73:c2:78:74:63:9b:66: ac:0c:ef:a9:3d:bf:bf:fa:1c:41:cc:7c:c5:8e:d1:12:eb:96: 8c:60:9a:95:0c:ef:32:9c:23:58:03:40:e2:1a:5e:67:cc:d6: de:8b:ba:22:47:57:8f:1f:47:5a:38:77:4b:c9:f4:51:22:f7: e4:bf:8e:40:af:c4:08:40:a1:37:17:ed:ea:19:de:38:5d:44: cf:4a:5a:85:f1:e3:47:d2:4b:25:b2:c9:e6:8d:a4:a8:a3:43: fe:e5:18:08:3e:67:2f:1e:ce:af:c5:f6:6c:e1:fe:f5:a2:72: c4:49:72:0c:8b:24:59:56:01:47:79:10:c4:54:b4:33:3a:6c: b2:12:bb:43:15:75:cf:b9:2e:11:d6:23:b6:6d:5c:62:d3:b4: fa:9e:43:2f:17:fe:d3:3c:0c:72:b7:fc:ee:5f:4b:b7:4d:1c: e3:08:b8:39:e5:91:94:f9:fe:2a:e7:4b:e7:5e:56:f2:3a:ab: 7d:9e:04:36:04:59:8e:d5:ba:1e:ff:52:a5:e4:06:93:5e:e1: f1:48:cd:6a:5f:a3:34:61:c4:3d:5a:34:58:cb:ec:87:ae:65: c6:8b:09:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjUxMjIyMTY1NTQ0WhcNMjUxMjI5MTY1NTQ0WjAYMRYwFAYD VQQDDA02OTQ5NzgxMS05YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzOpRpHKGRkem2QXl6rZI7sOydI65n37TZrcd8slMtPpYm2fg3HSmmeaOPUi R6pPDDZGnUFanCF2Ekn/lItAauO8bEfBezqjilb9c3c2TDjLrSWszVEq/uDE5pFk p/1YIvcyZOVtxPTCqnO6qNesEcT/o5UuFq8FTN8Ainij2nay5J2cO4if5wNddIPU qUSg5QSq0sd1wdYFUh249YiN/XUazEnM3uk501j3En6xSj5vrvAOYTw7k8ITCC6X f+8TSsoXW5GC/1NO8J6KNRC7ALmW1+FB2hLITMAYMkEEjd+sZx3j9nMhf3rO7Kgl zm82u1NBD5kX5/BuwP92jr6R7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Z52pO Veaq3h8jcnWRIHv8hQIIMB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEI2NS9FNkU0MjJBNjE1NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4 UWhYR0hnbV9oeDFJcTdYNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+vbs0dmUp+pVesEcajwYVNkGb2v7tnl+eAfgtZ3PCeHRjm2asDO+p Pb+/+hxBzHzFjtES65aMYJqVDO8ynCNYA0DiGl5nzNbei7oiR1ePH0daOHdLyfRR Ivfkv45Ar8QIQKE3F+3qGd44XUTPSlqF8eNH0kslssnmjaSoo0P+5RgIPmcvHs6v xfZs4f71onLESXIMiyRZVgFHeRDEVLQzOmyyErtDFXXPuS4R1iO2bVxi07T6nkMv F/7TPAxyt/zuX0u3TRzjCLg55ZGU+f4q50vnXlbyOqt9ngQ2BFmO1boe/1Kl5AaT XuHxSM1qX6M0YcQ9WjRYy+yHrmXGiwk+ -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:37 2025 by rpki-client