This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: H8LHwouYrJkgJlHq2QGqbteNOtMp12JmbaxqmaTfRuw= Subject key identifier: 45:A0:07:A6:C5:29:09:6A:DB:7F:B2:FC:B6:D5:11:C5:B7:5B:8D:F1 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 015F Signing time: Tue 23 Dec 2025 02:47:51 +0000 Manifest this update: Tue 23 Dec 2025 02:47:50 +0000 Manifest next update: Tue 30 Dec 2025 02:47:50 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: 4ZO/Uhnuc0KZv+XJhkfsckUjktYPIT+05sVA8QQbOHc=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: vRb+yhb2srl8xWf7no5GmTVIZuGppjwK0W3JgKbtn6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Dec 23 02:47:50 2025 GMT Not After : Dec 30 02:47:50 2025 GMT Subject: CN=694a02d6-51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:1f:3d:74:e1:9e:7e:df:df:30:fc:81:67: bb:00:15:52:5b:78:07:e0:ea:9a:f4:a0:13:50:52: 37:f3:b7:2d:c3:2e:b1:7a:85:f0:57:5e:d3:71:26: ec:69:d1:6d:63:79:89:6e:92:eb:f7:ba:0b:b3:77: a3:24:8f:69:58:65:b7:b8:72:87:ea:ed:2f:35:5e: 45:94:c1:41:8a:3c:f3:16:c3:f2:59:e9:01:b6:bb: 6b:a7:26:53:0a:a7:30:81:35:c2:19:4b:33:b3:22: dd:6c:b5:47:3d:cc:fe:95:cd:8c:4d:88:5d:1c:3a: 03:8b:6e:7c:a8:ab:8b:b4:b9:cb:83:a7:58:33:68: ec:dc:85:2b:93:ae:8d:02:ad:ff:aa:8b:9d:2b:2d: 00:b3:4d:c2:d1:10:bf:c7:d6:61:cf:03:53:9e:fc: e9:97:a8:95:8f:f4:c1:59:95:fb:97:11:66:3e:68: ff:89:5d:63:29:a4:a6:27:7e:3e:2f:b0:d9:73:88: 86:83:59:5a:63:81:06:ba:56:09:e8:96:d8:48:94: 49:db:a6:e7:99:04:ef:12:02:04:1e:6a:f9:79:62: 7c:cb:45:65:fa:95:20:55:16:1d:93:07:72:a5:59: 00:1f:cc:9f:ce:3e:27:17:ac:f7:9a:bb:1f:5f:58: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A0:07:A6:C5:29:09:6A:DB:7F:B2:FC:B6:D5:11:C5:B7:5B:8D:F1 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:06:82:9d:85:ad:bc:0e:af:7c:25:01:54:55:8b:4f:3a: 99:6f:de:37:40:9f:d2:d1:c5:17:34:1d:1f:f6:47:73:b4:e5: 9b:4b:2d:bc:d7:c9:7d:15:00:bd:e6:a6:6d:71:d7:cf:b4:c1: 84:fc:1e:d5:9c:c2:5e:07:85:50:f8:11:3a:3b:10:93:87:f8: 93:23:1b:14:8f:70:7f:c1:ee:b3:df:c8:77:cf:49:e8:6b:6f: 6f:01:ac:34:45:78:68:10:e7:c0:aa:fc:31:11:4f:bd:34:0a: 26:0f:9a:b3:ec:b0:9d:70:84:f5:b1:8d:5e:82:8c:19:bf:08: 67:fa:90:41:f1:d0:45:dc:fd:bb:46:cf:e5:cf:a5:80:88:7c: b2:8d:64:56:9a:30:c6:88:6a:35:c0:fd:52:e5:13:c1:ee:ef: cd:8b:22:16:b3:bc:c0:3f:58:e0:65:83:6f:34:bf:d1:3a:d8: 37:b0:ba:e1:75:de:2f:15:c4:53:38:de:8d:d8:32:f3:9e:03: 84:d5:c0:be:19:5a:e8:6a:c6:31:ce:5c:32:27:d8:59:d3:31: eb:a9:43:b4:f9:72:70:75:54:5e:a6:8b:0b:11:bd:a4:8e:ce: 80:0d:52:ae:24:7d:82:88:4b:2c:6c:33:ac:2f:e2:a7:9e:68: 61:25:27:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUxMjIzMDI0NzUwWhcNMjUxMjMwMDI0NzUwWjAYMRYwFAYD VQQDDA02OTRhMDJkNi01MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0AfPXThnn7f3zD8gWe7ABVSW3gH4Oqa9KATUFI387ctwy6xeoXwV17TcSbs adFtY3mJbpLr97oLs3ejJI9pWGW3uHKH6u0vNV5FlMFBijzzFsPyWekBtrtrpyZT CqcwgTXCGUszsyLdbLVHPcz+lc2MTYhdHDoDi258qKuLtLnLg6dYM2js3IUrk66N Aq3/qoudKy0As03C0RC/x9ZhzwNTnvzpl6iVj/TBWZX7lxFmPmj/iV1jKaSmJ34+ L7DZc4iGg1laY4EGulYJ6JbYSJRJ26bnmQTvEgIEHmr5eWJ8y0Vl+pUgVRYdkwdy pVkAH8yfzj4nF6z3mrsfX1gykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWgB6bF KQlq23+y/LbVEcW3W43xMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxOwaCnYWtvA6vfCUBVFWLTzqZb943QJ/S0cUXNB0f9kdztOWbSy28 18l9FQC95qZtcdfPtMGE/B7VnMJeB4VQ+BE6OxCTh/iTIxsUj3B/we6z38h3z0no a29vAaw0RXhoEOfAqvwxEU+9NAomD5qz7LCdcIT1sY1egowZvwhn+pBB8dBF3P27 Rs/lz6WAiHyyjWRWmjDGiGo1wP1S5RPB7u/NiyIWs7zAP1jgZYNvNL/ROtg3sLrh dd4vFcRTON6N2DLzngOE1cC+GVroasYxzlwyJ9hZ0zHrqUO0+XJwdVReposLEb2k js6ADVKuJH2CiEssbDOsL+KnnmhhJSel -----END CERTIFICATE-----Generated at Thu Dec 25 00:37:54 2025 by rpki-client