This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: 71eaBsFlya5vSrzMr3V5+b9XKHnqy0TQTo/sH7PD5QY= Subject key identifier: D6:13:47:16:58:E4:93:1E:AC:E5:64:A3:E5:39:C0:C2:79:8A:0B:10 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B63 Signing time: Mon 22 Dec 2025 18:40:38 +0000 Manifest this update: Mon 22 Dec 2025 18:40:37 +0000 Manifest next update: Mon 29 Dec 2025 18:40:37 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: 3PSwQUqzQF+CxaxqOPiKw3DXNY29NfjuWscaZ1dtthc=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Dec 22 18:40:37 2025 GMT Not After : Dec 29 18:40:37 2025 GMT Subject: CN=694990a6-2c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:2b:3e:e2:27:6a:54:26:bf:49:0e:fd:98: 1c:f8:25:6b:c4:e8:d6:d7:95:58:8e:ec:af:32:41: a6:00:06:5d:14:bf:c7:61:a9:b0:77:9f:b6:6a:eb: 4e:39:cd:9a:6a:9c:5c:37:2f:57:01:01:ad:28:0f: b9:30:62:25:43:7d:cf:6b:8b:21:2e:71:25:3e:10: 80:10:28:2a:39:a3:60:ce:51:1d:87:d3:2e:be:de: fe:3d:94:5c:19:32:38:3e:72:be:46:a5:bb:5b:ff: b6:dc:eb:52:ab:5e:67:d0:0e:c9:73:9b:c2:8f:9b: 3e:94:75:ac:6c:39:7c:24:31:ec:7c:76:3c:44:d2: ca:f2:08:84:95:e8:f3:eb:a6:fe:63:8f:a2:ed:2f: d4:f4:20:5f:ba:6d:39:14:04:b5:94:5a:3a:aa:86: 9e:7f:c2:c4:7d:a9:36:7c:50:57:ba:a4:28:e1:af: 23:6a:68:ca:c8:6d:e3:8e:8f:4d:3e:bb:95:ce:34: cc:b3:65:80:19:ec:e1:a2:bd:09:c6:58:36:0a:5b: 0b:64:a6:fb:4f:24:2c:38:7c:d1:ac:ae:c6:18:49: bd:ae:de:0f:6d:c4:1c:b9:b5:4c:e9:9b:12:ea:a1: d1:51:ff:3e:d8:f6:20:6c:af:ac:b7:1e:13:4d:6a: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:13:47:16:58:E4:93:1E:AC:E5:64:A3:E5:39:C0:C2:79:8A:0B:10 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:40:b2:b3:73:4e:6d:0d:31:dc:b3:13:ed:0c:94:fa:d1:98: 8e:1d:74:43:54:54:5a:c5:f6:66:c4:43:bc:e6:ad:37:81:8b: ee:eb:04:35:f6:ff:1e:bd:22:f2:bd:02:85:e2:96:89:4a:72: 26:6d:70:c5:70:81:60:5c:38:c8:b3:fa:26:01:87:31:29:4f: 64:9c:db:86:5d:64:7a:c0:bc:5b:45:d6:7f:f7:a7:f0:89:0c: c4:30:32:8c:ea:06:35:69:e4:01:7a:56:6b:d9:62:1a:9b:e6: e3:0a:c2:57:48:59:75:74:a2:03:4e:32:cd:f1:3f:cb:b4:68: c9:3b:ae:e3:de:7a:81:b2:6c:c5:fd:32:cd:70:91:08:d2:74: ca:18:6d:7b:60:ab:6a:5d:bd:4e:f1:46:5a:22:30:eb:8b:fd: 83:bc:24:c1:a8:53:0a:b8:3b:81:67:61:34:4a:41:1a:61:f6: 05:48:f9:b6:03:94:7d:21:3d:cd:52:4a:29:c9:75:37:10:8b: ff:0c:34:26:48:91:f4:07:9f:30:1d:ac:59:35:c8:e8:13:33: 4f:64:15:19:5b:57:9f:42:d6:08:42:39:05:f0:46:0f:4d:f9: 72:a3:a2:38:76:6a:2f:17:bf:0a:5d:0d:12:da:b4:38:09:72: 61:d9:eb:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUxMjIyMTg0MDM3WhcNMjUxMjI5MTg0MDM3WjAYMRYwFAYD VQQDDA02OTQ5OTBhNi0yYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAIrPuInalQmv0kO/Zgc+CVrxOjW15VYjuyvMkGmAAZdFL/HYamwd5+2autO Oc2aapxcNy9XAQGtKA+5MGIlQ33Pa4shLnElPhCAECgqOaNgzlEdh9Muvt7+PZRc GTI4PnK+RqW7W/+23OtSq15n0A7Jc5vCj5s+lHWsbDl8JDHsfHY8RNLK8giElejz 66b+Y4+i7S/U9CBfum05FAS1lFo6qoaef8LEfak2fFBXuqQo4a8jamjKyG3jjo9N PruVzjTMs2WAGezhor0Jxlg2ClsLZKb7TyQsOHzRrK7GGEm9rt4PbcQcubVM6ZsS 6qHRUf8+2PYgbK+stx4TTWrgDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYTRxZY 5JMerOVko+U5wMJ5igsQMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZQLKzc05tDTHcsxPtDJT60ZiOHXRDVFRaxfZmxEO85q03gYvu6wQ1 9v8evSLyvQKF4paJSnImbXDFcIFgXDjIs/omAYcxKU9knNuGXWR6wLxbRdZ/96fw iQzEMDKM6gY1aeQBelZr2WIam+bjCsJXSFl1dKIDTjLN8T/LtGjJO67j3nqBsmzF /TLNcJEI0nTKGG17YKtqXb1O8UZaIjDri/2DvCTBqFMKuDuBZ2E0SkEaYfYFSPm2 A5R9IT3NUkopyXU3EIv/DDQmSJH0B58wHaxZNcjoEzNPZBUZW1efQtYIQjkF8EYP Tflyo6I4dmovF78KXQ0S2rQ4CXJh2euy -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:27 2025 by rpki-client