This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: flxvKHcH01OlJcNhbZz/DWgHk3Q9EaX3dGedYZ2JVU0= Subject key identifier: 2A:EF:E2:8D:0E:91:4B:4C:A9:41:CB:6F:F0:18:E7:40:2F:35:80:CD Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 13DD Signing time: Mon 08 Dec 2025 16:41:36 +0000 Manifest this update: Mon 08 Dec 2025 16:41:36 +0000 Manifest next update: Mon 15 Dec 2025 16:41:35 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: ktW6z8lsNNAKWLy/1rUfL6WlL20uGE+7uMlIvhx5G7k=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5118 (0x13fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Dec 8 16:41:36 2025 GMT Not After : Dec 15 16:41:35 2025 GMT Subject: CN=6936ffc0-2436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:c4:1b:22:6e:fc:de:b8:d1:74:6d:43:f2: 11:01:61:5e:2e:14:1e:97:9c:7c:d4:fe:f3:69:45: d8:ef:a9:6d:9d:e4:d1:50:14:07:3f:f2:76:c0:0a: 19:72:b0:ca:e9:35:ef:1c:77:46:b3:e8:61:ba:77: ae:ca:66:54:58:71:f9:47:eb:d5:25:48:e6:61:4e: 38:68:7f:70:81:c3:c6:af:86:ae:78:8f:e0:d4:ff: e5:bf:17:be:66:0f:38:be:44:fd:17:5f:4a:53:c4: 56:ab:f5:e2:d9:a7:55:34:b7:2c:2b:5d:a6:dd:5a: fa:a0:3c:3d:c9:96:8c:37:e0:9c:38:59:eb:a7:1b: 9d:41:f5:19:23:da:90:18:e6:39:51:ea:3f:78:6d: 7d:4b:c6:82:bd:35:80:0a:93:cc:c9:4a:2d:90:9c: 4c:9f:07:86:d1:ae:d7:a1:f1:cd:df:ab:48:f3:fa: fb:f0:6a:b0:03:8d:c5:1a:ce:1f:fb:78:18:76:2b: e6:2e:56:46:8b:d0:cb:9c:87:aa:e4:f6:71:6f:8a: f4:b2:48:69:f4:22:80:2a:48:f0:25:c6:f3:8b:c2: 28:5e:16:be:3f:1c:28:4a:be:33:5a:1f:54:90:6f: 4d:6f:2d:95:6f:e4:82:c0:c2:23:85:5f:c5:5a:e3: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:E2:8D:0E:91:4B:4C:A9:41:CB:6F:F0:18:E7:40:2F:35:80:CD X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2e:20:0a:fb:5d:f4:2d:b8:4b:28:67:c4:90:94:ac:9f:d1: f7:2b:7c:97:85:6c:7a:26:9b:d7:4b:78:af:0f:07:ee:01:1a: 8f:cc:8c:7b:56:b5:6d:8c:b6:45:a2:52:9a:27:8c:ed:8b:e9: fb:c0:78:05:b4:4b:db:3f:4b:f4:56:d4:41:19:e0:61:b6:36: 46:83:ed:af:16:e9:16:1d:7a:e4:96:5a:29:8c:f9:9b:e9:99: 4a:80:3d:29:82:5d:d1:f7:1c:43:35:06:25:fe:86:ba:9f:b8: 19:86:f9:d8:e1:0e:59:61:00:76:72:f8:3c:71:3a:ec:83:2f: 38:aa:de:33:ca:91:12:7d:fa:38:92:1e:95:ab:fa:f3:65:3a: 0f:53:e5:de:c9:d1:e0:8f:58:06:f3:d0:98:a8:7e:75:a8:b0: 54:a2:e3:ea:a6:ef:5f:63:3a:4e:08:df:ef:30:13:ec:e9:6d: 38:dd:c6:db:89:2a:76:30:a3:23:c8:2d:4b:55:b2:9e:d3:fa: 76:9f:23:9e:5d:1d:e0:b7:d0:53:07:a1:50:17:1d:43:c3:c9: a1:3f:b0:87:14:b6:11:23:09:87:33:4c:ff:59:57:46:fe:68: 60:ff:fd:b0:4f:81:7a:9e:fc:ac:25:0b:39:4a:1e:7a:71:52: 6a:00:5d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUxMjA4MTY0MTM2WhcNMjUxMjE1MTY0MTM1WjAYMRYwFAYD VQQDEw02OTM2ZmZjMC0yNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zjEGyJu/N640XRtQ/IRAWFeLhQel5x81P7zaUXY76ltneTRUBQHP/J2wAoZ crDK6TXvHHdGs+hhuneuymZUWHH5R+vVJUjmYU44aH9wgcPGr4aueI/g1P/lvxe+ Zg84vkT9F19KU8RWq/Xi2adVNLcsK12m3Vr6oDw9yZaMN+CcOFnrpxudQfUZI9qQ GOY5Ueo/eG19S8aCvTWACpPMyUotkJxMnweG0a7XofHN36tI8/r78GqwA43FGs4f +3gYdivmLlZGi9DLnIeq5PZxb4r0skhp9CKAKkjwJcbzi8IoXha+PxwoSr4zWh9U kG9Nby2Vb+SCwMIjhV/FWuMA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrv4o0O kUtMqUHLb/AY50AvNYDNMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFLiAK+130LbhLKGfEkJSsn9H3K3yXhWx6JpvXS3ivDwfuARqPzIx7 VrVtjLZFolKaJ4zti+n7wHgFtEvbP0v0VtRBGeBhtjZGg+2vFukWHXrkllopjPmb 6ZlKgD0pgl3R9xxDNQYl/oa6n7gZhvnY4Q5ZYQB2cvg8cTrsgy84qt4zypESffo4 kh6Vq/rzZToPU+XeydHgj1gG89CYqH51qLBUouPqpu9fYzpOCN/vMBPs6W043cbb iSp2MKMjyC1LVbKe0/p2nyOeXR3gt9BTB6FQFx1Dw8mhP7CHFLYRIwmHM0z/WVdG /mhg//2wT4F6nvysJQs5Sh56cVJqAF1Q -----END CERTIFICATE-----Generated at Wed Dec 10 04:59:37 2025 by rpki-client