This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: ng/drAJV+vYg2krJHX33gTrw3zZBvg3+Eispu9rzhgc= Subject key identifier: 32:A3:EC:5B:4D:12:9F:B4:5D:FB:2C:E5:E3:DC:78:CE:88:FC:B2:00 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 13E4 Signing time: Mon 22 Dec 2025 16:40:19 +0000 Manifest this update: Mon 22 Dec 2025 16:40:18 +0000 Manifest next update: Mon 29 Dec 2025 16:40:18 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: mEWrC2bchigPNDDaDXrbMCEFfwagzERE0mt2uAp7Upg=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Dec 22 16:40:18 2025 GMT Not After : Dec 29 16:40:18 2025 GMT Subject: CN=69497473-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:f4:c2:93:9a:74:66:1e:24:38:1a:b9:e2: a3:33:c0:c1:b5:e9:a1:7f:d2:0b:76:d5:4e:69:47: f5:17:c3:4a:4e:ec:b2:4f:4b:3d:e4:93:f4:f6:fc: 61:14:13:82:4e:87:99:e2:e8:b0:b9:fb:52:2d:f8: e6:94:f5:4b:1c:03:bd:11:51:1c:d3:62:cd:cf:88: 4f:09:d0:b5:a1:4f:df:91:8f:27:37:1e:a0:24:08: 45:2f:ce:cf:90:c3:29:d3:15:b7:61:ef:f2:39:62: 1e:79:e1:25:c8:38:a0:b3:a7:14:a7:4b:2a:1e:a4: 35:c9:21:4c:61:24:b8:b1:21:1d:c4:10:0f:52:8b: 3b:80:06:b5:db:b7:16:3d:3c:9d:6c:d2:3f:7f:68: 6d:ca:70:a6:50:56:b9:90:6d:39:69:bb:e8:d0:a1: 46:44:9e:98:94:c1:6a:4f:4f:72:62:3d:65:bb:f3: 2f:58:51:33:0d:69:f0:cf:50:45:92:3b:9c:43:64: 52:6c:a6:36:b2:27:8f:32:5c:c2:8d:42:0c:e1:ee: 75:d2:95:69:eb:5e:b0:de:60:23:fb:e0:5c:2a:02: be:5f:69:30:1e:85:c8:e7:fc:ac:d4:bb:55:7b:9e: f7:4f:e4:2e:21:24:ad:fd:7e:fc:4c:31:f2:f3:a4: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:EC:5B:4D:12:9F:B4:5D:FB:2C:E5:E3:DC:78:CE:88:FC:B2:00 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e4:6a:aa:0d:32:5f:22:9f:e5:1c:a5:75:09:67:a9:37:d3: 81:dc:8f:35:c3:4c:f0:27:af:4b:b2:74:99:f6:b3:39:2c:05: 77:3b:ca:f1:fb:52:7d:c1:19:0b:09:a2:a3:49:e8:3b:ed:91: b8:9b:06:80:79:80:3c:87:f5:cf:07:99:ff:70:eb:81:4e:5c: 4b:cd:bd:9b:b7:00:0b:ad:d2:33:d5:5e:6c:6d:ec:4f:56:a9: a3:2e:bb:9a:42:4e:a4:4c:36:76:87:58:ce:7e:9e:a5:64:10: 76:7c:7c:13:af:cd:9d:3f:01:f3:d1:49:b4:49:c3:73:91:38: c8:c6:dd:a1:8e:be:1b:5a:90:1b:68:55:67:64:25:73:6c:d0: 68:38:b0:94:ce:d7:9a:65:fe:e6:1b:d4:1a:cc:db:b2:bf:e0: a2:e9:43:09:66:09:3a:4f:13:bc:2c:bf:5c:9c:45:58:63:57: 48:18:c7:8d:a5:ab:8a:a8:e1:da:42:ac:15:4a:2d:ac:39:85: 11:f3:64:c0:3a:54:3e:e7:7f:02:a3:81:1b:87:bb:e5:da:0a: 0c:2a:58:73:88:2f:32:6c:bb:1d:d9:11:3a:24:62:a0:0f:a9: fd:18:6c:c2:18:52:59:29:e2:4f:93:79:13:b7:f1:89:3f:4c: 3a:b4:5d:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUxMjIyMTY0MDE4WhcNMjUxMjI5MTY0MDE4WjAYMRYwFAYD VQQDDA02OTQ5NzQ3My1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzef0wpOadGYeJDgaueKjM8DBtemhf9ILdtVOaUf1F8NKTuyyT0s95JP09vxh FBOCToeZ4uiwuftSLfjmlPVLHAO9EVEc02LNz4hPCdC1oU/fkY8nNx6gJAhFL87P kMMp0xW3Ye/yOWIeeeElyDigs6cUp0sqHqQ1ySFMYSS4sSEdxBAPUos7gAa127cW PTydbNI/f2htynCmUFa5kG05abvo0KFGRJ6YlMFqT09yYj1lu/MvWFEzDWnwz1BF kjucQ2RSbKY2siePMlzCjUIM4e510pVp616w3mAj++BcKgK+X2kwHoXI5/ys1LtV e573T+QuISSt/X78TDHy86RPtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKj7FtN Ep+0Xfss5ePceM6I/LIAMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5GqqDTJfIp/lHKV1CWepN9OB3I81w0zwJ69LsnSZ9rM5LAV3O8rx +1J9wRkLCaKjSeg77ZG4mwaAeYA8h/XPB5n/cOuBTlxLzb2btwALrdIz1V5sbexP VqmjLruaQk6kTDZ2h1jOfp6lZBB2fHwTr82dPwHz0Um0ScNzkTjIxt2hjr4bWpAb aFVnZCVzbNBoOLCUzteaZf7mG9QazNuyv+Ci6UMJZgk6TxO8LL9cnEVYY1dIGMeN pauKqOHaQqwVSi2sOYUR82TAOlQ+538Co4Ebh7vl2goMKlhziC8ybLsd2RE6JGKg D6n9GGzCGFJZKeJPk3kTt/GJP0w6tF2/ -----END CERTIFICATE-----Generated at Tue Dec 23 14:34:25 2025 by rpki-client