This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: Rp4ZNNR23+DWBydAVB+2wApTrxQGF/SvnCEhLQ8GCR8= Subject key identifier: 7F:A5:97:66:26:0D:01:5F:9D:5E:EE:91:B0:C3:AB:A9:80:E5:E7:AA Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 05FE Signing time: Mon 22 Dec 2025 22:03:47 +0000 Manifest this update: Mon 22 Dec 2025 22:03:47 +0000 Manifest next update: Mon 29 Dec 2025 22:03:47 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: IQ5Xu05YZdzNmryW+RpgKUWQWvrY7v5VVzwAJ49UV2w=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Dec 22 22:03:47 2025 GMT Not After : Dec 29 22:03:47 2025 GMT Subject: CN=6949c043-1c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:06:77:ef:46:b7:e0:8b:9e:4a:d3:7e:ae: 7c:d3:53:48:d6:43:dd:97:cb:79:2a:9d:5b:b0:38: 11:fc:a1:5c:16:37:aa:a3:dd:b4:52:f6:73:3e:e9: 61:4d:e1:79:64:aa:d5:17:a5:e0:b9:f3:cb:ef:39: f2:1d:b3:1f:ff:8d:a4:90:a3:b0:8f:74:fb:cb:6a: 5a:d4:23:cc:18:58:d3:5d:3f:92:e2:50:3d:e5:9e: 41:69:d7:e5:2c:d5:e2:a4:fa:51:45:68:17:fa:65: 73:3e:41:42:8d:58:37:80:9d:c4:23:ec:30:a1:56: e9:8f:6b:49:30:a1:d9:a6:f2:d3:72:84:4f:c2:c4: 14:69:eb:04:6e:a9:4d:4c:8f:c6:85:64:a1:a1:17: 88:71:17:57:59:f5:a7:37:92:41:d5:c0:01:00:ee: fb:54:f4:e0:4c:d6:61:57:43:fc:7e:25:1a:29:15: cc:4e:d3:69:d7:c7:20:5c:5e:8d:a2:e8:95:27:4e: 70:ac:a6:cd:28:f0:1a:5d:2d:16:e3:de:fc:f9:14: b0:62:89:bc:33:c9:b3:fd:1d:8c:f0:a0:79:9a:71: 74:02:b6:a6:30:8e:86:38:42:c2:07:b2:91:51:20: 4e:d2:3f:e2:d4:4d:29:bf:04:16:b4:61:47:68:1a: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A5:97:66:26:0D:01:5F:9D:5E:EE:91:B0:C3:AB:A9:80:E5:E7:AA X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:43:8e:d8:c8:af:2e:e7:cc:fc:c1:34:3e:fd:2f:b7:67:cd: f9:33:3c:19:0f:0a:8b:be:ad:1a:80:fd:1f:9f:24:85:b9:75: 3c:8d:51:75:17:04:79:27:ef:c2:8a:52:71:ca:b4:84:da:73: b9:58:3e:3d:97:c8:64:92:6d:8f:ad:4d:33:cb:2f:db:cb:5a: 50:17:9b:85:7d:2e:f8:99:04:0b:90:06:59:ec:c8:d6:1e:89: d3:57:d3:cb:2b:62:8f:7f:4f:1e:89:31:bb:54:da:34:8b:07: a5:9b:72:14:02:db:bd:53:7f:ef:4e:d3:68:07:a1:7e:b7:f3: cb:f3:2b:fa:f0:d3:17:e9:48:38:1a:6e:c0:6f:1b:a3:05:82: b4:a6:78:ef:0f:6a:29:30:93:d6:45:c3:88:a3:b7:4b:7d:0b: 99:40:94:40:87:cb:76:6c:23:52:0f:91:7c:15:13:89:c8:9c: bf:04:ef:fb:a8:66:6e:02:4a:0f:fa:fa:af:34:06:3c:91:7a: 8a:98:e0:68:48:c1:a4:da:f0:c6:ac:16:bf:ef:ab:fa:d3:c0: 6b:a8:99:c9:f2:b2:b3:12:e4:41:4a:38:80:f5:ed:54:07:64: de:fa:f3:75:b4:2b:87:6c:57:ee:ef:b7:38:1b:f0:f1:21:28: cf:9b:79:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUxMjIyMjIwMzQ3WhcNMjUxMjI5MjIwMzQ3WjAYMRYwFAYD VQQDDA02OTQ5YzA0My0xYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGQGd+9Gt+CLnkrTfq5801NI1kPdl8t5Kp1bsDgR/KFcFjeqo920UvZzPulh TeF5ZKrVF6XgufPL7znyHbMf/42kkKOwj3T7y2pa1CPMGFjTXT+S4lA95Z5Badfl LNXipPpRRWgX+mVzPkFCjVg3gJ3EI+wwoVbpj2tJMKHZpvLTcoRPwsQUaesEbqlN TI/GhWShoReIcRdXWfWnN5JB1cABAO77VPTgTNZhV0P8fiUaKRXMTtNp18cgXF6N ouiVJ05wrKbNKPAaXS0W4978+RSwYom8M8mz/R2M8KB5mnF0AramMI6GOELCB7KR USBO0j/i1E0pvwQWtGFHaBqUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+ll2Ym DQFfnV7ukbDDq6mA5eeqMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwQ47YyK8u58z8wTQ+/S+3Z835MzwZDwqLvq0agP0fnySFuXU8jVF1 FwR5J+/CilJxyrSE2nO5WD49l8hkkm2PrU0zyy/by1pQF5uFfS74mQQLkAZZ7MjW HonTV9PLK2KPf08eiTG7VNo0iwelm3IUAtu9U3/vTtNoB6F+t/PL8yv68NMX6Ug4 Gm7AbxujBYK0pnjvD2opMJPWRcOIo7dLfQuZQJRAh8t2bCNSD5F8FROJyJy/BO/7 qGZuAkoP+vqvNAY8kXqKmOBoSMGk2vDGrBa/76v608BrqJnJ8rKzEuRBSjiA9e1U B2Te+vN1tCuHbFfu77c4G/DxISjPm3mo -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:22 2025 by rpki-client