This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: suMMMi0e2CSwQkR9iYPFKUaeXqILpnkmw/EexDxUYxk= Subject key identifier: 75:F1:71:D1:91:5C:CF:95:B6:DC:C9:E4:27:F7:E5:0D:41:01:66:EF Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 57 Signing time: Wed 03 Dec 2025 05:23:10 +0000 Manifest this update: Wed 03 Dec 2025 05:23:09 +0000 Manifest next update: Wed 10 Dec 2025 05:23:09 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: Hv78nzSGuMVLxa3OglUzjy+yWTUWHjeTxMnRqLxnOUw=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Dec 3 05:23:09 2025 GMT Not After : Dec 10 05:23:09 2025 GMT Subject: CN=692fc93e-fd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:af:28:ad:7c:79:dc:4b:01:99:fa:a1:22: 5e:18:51:eb:3f:f2:9b:09:a6:85:47:53:1b:c9:d1: 94:36:85:2d:45:64:8d:27:98:ea:d3:d0:3d:47:05: d6:03:5f:3e:dd:82:09:c3:75:79:4d:47:a9:f5:09: 7d:04:56:ba:1e:c8:b5:9e:e6:d4:e4:0f:6f:03:98: 64:af:4c:16:de:06:83:c4:9c:64:2a:a1:5a:73:28: 82:a6:0d:88:9d:61:e1:20:6d:14:6a:fb:0e:40:d2: f0:40:e0:1d:ae:d1:9e:67:0c:6e:6f:2c:c1:98:59: 0f:cc:cd:60:50:08:85:07:fd:b9:68:95:99:6a:03: c7:ed:d6:45:4d:d8:cb:3d:76:7f:14:90:24:63:2d: 34:84:3d:53:32:ec:b1:db:c5:56:86:58:1a:ce:44: be:42:e8:25:e1:59:d3:59:53:69:e2:48:4d:90:a8: bb:7f:d6:14:e9:91:37:26:07:c4:3b:87:62:4d:cd: ca:a4:77:74:91:69:ac:5e:d9:72:c5:80:ea:ca:48: e0:ca:f8:52:0e:a3:ce:c7:62:cd:ec:35:99:1e:9e: 58:31:33:0f:14:45:99:99:c5:f4:30:bb:b4:dd:94: 8d:93:c8:d0:da:d1:3b:45:90:9a:86:23:27:20:1e: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F1:71:D1:91:5C:CF:95:B6:DC:C9:E4:27:F7:E5:0D:41:01:66:EF X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1c:a4:06:f8:e7:94:62:7e:8f:b2:45:e4:cc:16:24:05:4b: d6:96:91:03:38:e5:1d:67:12:6c:56:54:73:08:b0:e9:27:e2: cf:e7:82:64:74:f0:15:3d:d4:46:d1:2a:ae:1a:93:48:f1:82: d8:a9:78:20:bc:19:3f:5b:03:50:21:ef:fb:64:8f:f4:25:47: 08:a7:f6:8a:97:6f:e1:b8:d7:e4:a3:93:57:a9:89:bf:3b:c4: 52:8f:2a:34:27:aa:c2:1d:80:a9:b5:4e:ec:2a:22:97:93:3d: d0:95:62:b8:13:45:1f:8c:75:9b:6a:e0:d1:a1:22:73:c3:37: 05:32:40:c9:e0:32:74:6a:c2:9f:29:67:c4:24:12:ec:5a:19: 17:3c:50:1c:ac:3b:e0:a4:52:f5:52:2d:f5:d1:46:d8:7f:50: 37:55:68:18:4f:8b:85:70:cb:c4:19:28:24:ba:64:c4:63:22: b1:56:03:7e:2c:e2:e7:bb:b4:3a:e1:36:ef:bc:ee:01:20:2e: 95:74:c6:5b:bf:9b:e8:e2:02:52:0f:32:de:21:6b:44:54:7b: 82:4c:66:3e:a8:bd:31:8f:94:a4:f9:47:0c:8a:f9:5b:7a:ef: 4e:40:51:6a:37:24:02:a9:53:c4:e1:76:d9:72:4f:be:9f:89: 83:39:93:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTEyMDMwNTIzMDlaFw0yNTEyMTAwNTIzMDlaMBgxFjAUBgNV BAMTDTY5MmZjOTNlLWZkNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYla8orXx53EsBmfqhIl4YUes/8psJpoVHUxvJ0ZQ2hS1FZI0nmOrT0D1HBdYD Xz7dggnDdXlNR6n1CX0EVroeyLWe5tTkD28DmGSvTBbeBoPEnGQqoVpzKIKmDYid YeEgbRRq+w5A0vBA4B2u0Z5nDG5vLMGYWQ/MzWBQCIUH/blolZlqA8ft1kVN2Ms9 dn8UkCRjLTSEPVMy7LHbxVaGWBrORL5C6CXhWdNZU2niSE2QqLt/1hTpkTcmB8Q7 h2JNzcqkd3SRaaxe2XLFgOrKSODK+FIOo87HYs3sNZkenlgxMw8URZmZxfQwu7Td lI2TyNDa0TtFkJqGIycgHs/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdfFx0ZFc z5W23MnkJ/flDUEBZu8wHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8cpAb455Rifo+yReTMFiQFS9aWkQM45R1nEmxWVHMIsOkn4s/ngmR0 8BU91EbRKq4ak0jxgtipeCC8GT9bA1Ah7/tkj/QlRwin9oqXb+G41+Sjk1epib87 xFKPKjQnqsIdgKm1TuwqIpeTPdCVYrgTRR+MdZtq4NGhInPDNwUyQMngMnRqwp8p Z8QkEuxaGRc8UBysO+CkUvVSLfXRRth/UDdVaBhPi4Vwy8QZKCS6ZMRjIrFWA34s 4ue7tDrhNu+87gEgLpV0xlu/m+jiAlIPMt4ha0RUe4JMZj6ovTGPlKT5RwyK+Vt6 705AUWo3JAKpU8ThdtlyT76fiYM5k+E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:04 2025 by rpki-client