This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft File: S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json) Hash identifier: xDF+aS9LHa2WmWEWBzD6cMAtVgMziLs5iijE5T3zWFw= Subject key identifier: 9F:5D:27:15:BD:7D:BA:59:F3:3C:7C:90:CA:6B:1A:24:CE:0E:0D:78 Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft Manifest number: 0269 Signing time: Tue 23 Dec 2025 01:21:21 +0000 Manifest this update: Tue 23 Dec 2025 01:21:20 +0000 Manifest next update: Tue 30 Dec 2025 01:21:20 +0000 Files and hashes: 1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: K8fEpet3nV0HrfAbwX6CU3VZ1mOkLKo8YQAUr62g+N0=) 2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Validity Not Before: Dec 23 01:21:20 2025 GMT Not After : Dec 30 01:21:20 2025 GMT Subject: CN=6949ee90-348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:fd:bb:f1:a6:d8:0c:86:9f:e8:c6:a6:90: 67:eb:ee:ec:c1:be:f5:61:3c:ce:00:10:9e:99:51: 2e:07:f6:f6:1e:6b:2b:7b:85:dc:aa:c4:b8:5b:9e: bb:75:df:71:9e:2f:3a:0f:91:24:6e:bc:f7:cd:b5: 71:71:02:aa:4c:cb:2b:5d:6f:a9:d2:67:83:69:e4: 7f:b9:0a:17:a8:72:00:65:c8:33:7a:82:2c:85:16: d1:f3:c7:bd:8c:85:13:c9:85:92:c2:df:4f:d7:05: f7:a0:37:90:f8:70:25:b5:96:e2:74:6a:4f:7c:6d: 1f:e8:53:26:af:1d:ef:55:c2:5e:fa:f5:4c:e0:fe: 15:c3:c6:f4:4d:ef:53:bb:54:02:7e:6c:2e:30:61: 82:e0:01:a5:59:3e:18:f6:33:1a:e3:fe:58:3f:b4: 45:47:10:79:d0:b0:4a:6e:58:2d:fe:e3:01:20:5f: 1c:08:a5:2a:c8:22:a3:73:aa:b5:1c:21:5e:bf:4c: 1d:46:48:ff:2b:2c:bc:88:f8:9f:5b:88:c9:8f:b8: 1e:01:e3:29:78:ed:d0:64:ae:fc:46:c9:eb:29:6e: b0:bc:51:31:08:cf:e7:f5:f0:dc:38:aa:d1:b6:bd: 48:4e:9b:63:9e:b8:19:89:f5:44:ce:40:5b:e8:fc: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:27:15:BD:7D:BA:59:F3:3C:7C:90:CA:6B:1A:24:CE:0E:0D:78 X509v3 Authority Key Identifier: keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:80:a3:20:35:b1:e3:26:71:de:06:04:12:fb:2c:77:cd:01: ac:29:0a:1c:85:1a:95:25:a1:0f:e5:ce:44:38:72:6a:d4:1c: 9a:3b:8d:61:a9:6e:27:9a:33:18:1e:8d:ef:c3:3b:92:10:6c: 43:e6:27:72:7f:89:69:14:05:e8:68:2a:0d:bd:05:e5:93:92: ca:e7:a5:65:67:75:7c:40:2c:4f:14:ba:4e:bd:94:09:4b:5f: 3d:a6:83:54:4f:5a:c4:51:2c:3a:5f:64:19:68:74:7c:54:cb: 37:ba:be:85:6d:ec:fd:1b:65:aa:9e:ab:82:96:60:8f:b4:93: 58:81:ff:2c:af:4a:99:cc:7f:a9:da:06:ff:81:d5:9e:cb:58: 63:d5:32:c6:85:7d:19:b8:a3:ab:40:bd:57:ab:a3:c6:2b:67: 46:0e:d1:59:7e:e9:05:93:61:23:1b:19:97:25:69:e2:1b:ba: 31:0f:6a:9c:7c:68:84:36:0a:0b:d4:26:30:65:03:db:33:18: aa:01:ba:01:ca:6a:3a:88:e2:88:10:61:9e:5e:bd:82:f7:29: cb:7e:4f:60:d7:8b:e0:a2:8a:82:59:53:68:c1:7a:78:32:13: 70:59:a1:7a:24:64:48:2f:a7:9c:33:1b:86:ad:ea:73:56:84: 7a:3d:0d:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDYxNDExMC8GA1UEBRMoNEI1QzE2MjNGQkIzM0Q5NkEyNDFBQjM1REIwRjBCREVC NUMzOUNCMDAeFw0yNTEyMjMwMTIxMjBaFw0yNTEyMzAwMTIxMjBaMBgxFjAUBgNV BAMMDTY5NDllZTkwLTM0OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCruf278abYDIaf6MamkGfr7uzBvvVhPM4AEJ6ZUS4H9vYeayt7hdyqxLhbnrt1 33GeLzoPkSRuvPfNtXFxAqpMyytdb6nSZ4Np5H+5CheocgBlyDN6giyFFtHzx72M hRPJhZLC30/XBfegN5D4cCW1luJ0ak98bR/oUyavHe9Vwl769Uzg/hXDxvRN71O7 VAJ+bC4wYYLgAaVZPhj2Mxrj/lg/tEVHEHnQsEpuWC3+4wEgXxwIpSrIIqNzqrUc IV6/TB1GSP8rLLyI+J9biMmPuB4B4yl47dBkrvxGyespbrC8UTEIz+f18Nw4qtG2 vUhOm2OeuBmJ9UTOQFvo/AytAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn10nFb19 ulnzPHyQymsaJM4ODXgwHwYDVR0jBBgwFoAUS1wWI/uzPZaiQas12w8L3rXDnLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENjE0LzFERjA3NUUyQkVE QzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5M QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzF3V0lfdXpQWmFpUWFzMTJ3OEwzclhEbkxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE NjE0LzFERjA3NUUyQkVEQzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFph aVFhczEydzhMM3JYRG5MQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqAoyA1seMmcd4GBBL7LHfNAawpChyFGpUloQ/lzkQ4cmrUHJo7jWGp bieaMxgeje/DO5IQbEPmJ3J/iWkUBehoKg29BeWTksrnpWVndXxALE8Uuk69lAlL Xz2mg1RPWsRRLDpfZBlodHxUyze6voVt7P0bZaqeq4KWYI+0k1iB/yyvSpnMf6na Bv+B1Z7LWGPVMsaFfRm4o6tAvVero8YrZ0YO0Vl+6QWTYSMbGZclaeIbujEPapx8 aIQ2CgvUJjBlA9szGKoBugHKajqI4ogQYZ5evYL3Kct+T2DXi+CiioJZU2jBengy E3BZoXokZEgvp5wzG4at6nNWhHo9Dak= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client