This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: 0+GN4PZHP062P9j+zVOIlkx6CJkSaEZewfNG8uhRbhs= Subject key identifier: 3B:07:19:4E:15:6C:D8:3A:29:9A:12:1A:7B:B3:13:1F:44:4C:93:C4 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 09E7 Signing time: Sat 06 Dec 2025 19:08:52 +0000 Manifest this update: Sat 06 Dec 2025 19:08:52 +0000 Manifest next update: Sat 13 Dec 2025 19:08:52 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: yQ5yXL2GPUcMeq0y+ACCTIUjKNngkyF2ggZY8CqcsVQ=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Dec 6 19:08:52 2025 GMT Not After : Dec 13 19:08:52 2025 GMT Subject: CN=69347f44-3506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:e7:f7:88:6c:56:fe:11:52:46:89:2b:b9: 97:fd:bf:13:41:9b:2d:41:98:ce:18:cb:32:c3:de: a3:26:d1:f8:33:19:94:b5:59:99:91:25:2a:c1:82: bd:08:54:8d:8b:aa:ef:e9:e8:eb:58:2b:75:d4:44: f8:45:52:12:56:bf:c8:a6:ec:fb:dc:e5:7c:1c:63: cf:15:7d:78:20:ee:80:a7:34:8c:7a:4a:a8:34:b4: 30:f9:9a:29:3f:04:19:a9:43:6e:df:0b:f4:c8:a9: b7:46:49:ff:e2:21:93:7b:4b:80:00:d0:c0:0e:eb: 38:1b:db:e3:8b:6c:53:fd:73:1c:df:e6:90:45:8b: 3a:1f:c8:59:59:d3:18:75:4b:95:25:d1:29:f9:0c: b6:91:a1:56:4d:bb:be:2d:d7:22:51:58:d6:09:a3: cf:3f:ad:03:85:f7:8a:6a:11:da:03:d7:f2:f6:7f: 61:4b:c5:a0:34:e9:f0:0d:ec:86:fb:c0:9f:83:81: ed:31:e6:57:ba:31:93:6c:af:85:a4:0d:74:67:2a: d0:47:f9:b2:73:21:b3:e3:db:4e:7f:3c:72:5a:f6: 35:f5:19:90:ed:c1:c8:b8:85:c1:83:6a:4a:53:79: d8:60:be:fb:52:35:f4:5e:64:08:3f:5b:63:c7:8e: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:19:4E:15:6C:D8:3A:29:9A:12:1A:7B:B3:13:1F:44:4C:93:C4 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b8:88:54:af:3d:15:a8:5c:ca:a9:46:af:13:c2:fd:62:b3: 1f:cb:87:5c:2b:b4:80:89:5b:ab:09:52:8a:67:70:92:ae:78: 2d:db:8a:f2:72:ca:05:db:fd:fd:49:88:ac:d7:87:10:03:1c: d4:06:74:38:37:00:b9:31:51:5b:90:3f:25:94:0d:03:16:a7: cf:94:fe:bf:59:b1:44:d3:3a:16:8f:7f:93:32:18:cc:c3:2e: 97:85:bb:f7:a3:98:da:9a:e2:24:2e:c3:7d:a1:00:5d:3d:2f: 4a:08:23:c0:34:46:ca:de:39:30:7e:cd:ee:7a:af:20:3e:ce: be:84:b4:db:ff:5e:1e:66:e3:a0:83:30:75:9d:c3:80:10:07: b5:d7:7c:f9:1e:b0:77:96:b6:d0:21:3b:29:68:e3:28:cf:ad: 94:ec:17:9d:c9:23:32:2c:d4:31:18:b5:a7:a2:70:6f:a3:39: 32:1e:10:33:15:ac:92:2a:bf:df:a5:d6:93:d7:5c:69:4f:f8: f5:63:03:d4:3b:40:78:88:a6:a7:f5:2a:ef:85:3d:ee:70:fa: 36:0b:33:9d:04:bd:54:d6:4b:d4:89:35:3c:09:b5:69:a2:a8: d6:ad:c0:ca:ae:37:d0:48:f1:e6:f3:bf:6c:00:23:fd:2e:29: da:41:2c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUxMjA2MTkwODUyWhcNMjUxMjEzMTkwODUyWjAYMRYwFAYD VQQDEw02OTM0N2Y0NC0zNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRjn94hsVv4RUkaJK7mX/b8TQZstQZjOGMsyw96jJtH4MxmUtVmZkSUqwYK9 CFSNi6rv6ejrWCt11ET4RVISVr/Ipuz73OV8HGPPFX14IO6ApzSMekqoNLQw+Zop PwQZqUNu3wv0yKm3Rkn/4iGTe0uAANDADus4G9vji2xT/XMc3+aQRYs6H8hZWdMY dUuVJdEp+Qy2kaFWTbu+LdciUVjWCaPPP60DhfeKahHaA9fy9n9hS8WgNOnwDeyG +8Cfg4HtMeZXujGTbK+FpA10ZyrQR/mycyGz49tOfzxyWvY19RmQ7cHIuIXBg2pK U3nYYL77UjX0XmQIP1tjx46ZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsHGU4V bNg6KZoSGnuzEx9ETJPEMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWuIhUrz0VqFzKqUavE8L9YrMfy4dcK7SAiVurCVKKZ3CSrngt24ry csoF2/39SYis14cQAxzUBnQ4NwC5MVFbkD8llA0DFqfPlP6/WbFE0zoWj3+TMhjM wy6Xhbv3o5jamuIkLsN9oQBdPS9KCCPANEbK3jkwfs3ueq8gPs6+hLTb/14eZuOg gzB1ncOAEAe113z5HrB3lrbQITspaOMoz62U7BedySMyLNQxGLWnonBvozkyHhAz FaySKr/fpdaT11xpT/j1YwPUO0B4iKan9SrvhT3ucPo2CzOdBL1U1kvUiTU8CbVp oqjWrcDKrjfQSPHm879sACP9LinaQSyz -----END CERTIFICATE-----Generated at Mon Dec 8 06:01:44 2025 by rpki-client