This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: 7ieA0zwhP4mCbQK2bKKlUKfFEKrTTfjaX95AOzEOB7Q= Subject key identifier: 63:3B:28:36:58:FF:27:A8:A8:10:9D:C8:A4:ED:D8:B2:ED:9D:4A:79 Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 152D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 19EA Signing time: Mon 22 Dec 2025 16:33:31 +0000 Manifest this update: Mon 22 Dec 2025 16:33:31 +0000 Manifest next update: Mon 29 Dec 2025 16:33:31 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: IgHKsVa1yZWhmhor7bwEMu3V0Vfy3jkv1aH9ylse5IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5421 (0x152d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Dec 22 16:33:31 2025 GMT Not After : Dec 29 16:33:31 2025 GMT Subject: CN=694972db-e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:ce:68:1b:6e:ff:16:fc:41:f4:0a:f3:be: 7a:27:73:db:b3:75:d6:c1:62:5e:64:98:e0:09:c4: 4e:47:c5:90:f9:d3:9c:ad:97:4f:85:39:55:ba:db: 47:33:2d:f3:51:b0:a8:b0:30:9b:03:12:7e:ed:e2: 34:2c:6c:e0:8d:6d:68:41:3a:67:8b:65:68:71:de: 47:28:e9:12:6d:76:29:5c:6d:33:84:b5:23:6e:35: 71:8f:cf:f5:c2:0d:02:f6:ef:06:53:96:0f:3f:87: 95:1a:0f:f6:e0:8f:a3:a7:b1:4d:e9:a3:33:f5:1f: ea:29:b7:24:5a:b0:d3:ec:ae:fc:c8:32:0b:55:a7: 2b:36:24:74:18:59:e5:a2:47:57:0e:7f:71:5e:0b: 34:d8:5a:9b:fe:62:be:94:5c:01:8d:3e:ee:3f:50: 9f:4f:97:14:24:14:a3:6b:d6:b9:b1:31:8a:ac:92: 4a:0f:9d:6f:36:61:ed:bf:ae:cd:47:fb:c9:f9:7b: 5a:1d:77:da:c8:3a:e0:78:19:0d:3d:c6:f5:6a:d8: d3:22:5a:84:9f:90:1d:f0:89:d0:d1:fc:68:63:e8: 8c:08:c7:d2:b1:9d:5e:b2:38:a8:74:21:57:c9:29: 82:1e:dd:eb:4a:4e:62:e2:f5:49:19:db:5c:d3:98: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:28:36:58:FF:27:A8:A8:10:9D:C8:A4:ED:D8:B2:ED:9D:4A:79 X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:72:e4:15:92:72:7f:36:1c:d1:8d:bb:a5:0c:e7:39:cd:58: 70:a2:55:42:90:f7:a8:5f:7f:34:e3:29:03:63:c3:42:5a:a9: d4:ef:88:ce:67:53:1c:55:23:58:ba:4a:48:4c:47:f6:05:5d: e7:c2:36:8b:fa:f4:64:5c:90:ec:43:52:7c:25:d6:ea:d6:64: 47:aa:8d:22:ce:83:a4:07:e2:43:4e:5c:ef:07:c0:23:80:12: ed:99:70:5f:39:98:55:2e:2c:fc:a5:44:4f:ec:27:2a:2c:38: 16:ed:e1:9d:3d:33:50:1e:09:5b:8b:09:28:d2:46:36:32:6c: 21:0e:9a:77:f3:aa:17:d2:d1:29:95:f9:a6:f9:b0:f0:62:6d: b4:e0:ec:25:85:71:da:55:86:c8:18:ca:df:06:56:9b:2b:75: 38:ef:94:2f:db:f7:ea:bd:4d:a6:29:62:f7:0d:56:df:62:34: a0:64:52:52:25:d1:17:7d:9e:83:51:3d:f4:93:18:c3:d7:a4: bd:12:95:c5:52:4f:b9:06:b6:2d:f1:99:1e:23:cf:70:ad:05: 01:c4:03:8e:58:ce:d7:67:81:a2:ea:ed:84:79:b1:e6:fa:91: 0f:60:8e:88:06:90:fb:93:e8:20:44:27:8e:1d:a5:5c:8b:8a: c1:99:5c:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUxMjIyMTYzMzMxWhcNMjUxMjI5MTYzMzMxWjAYMRYwFAYD VQQDDA02OTQ5NzJkYi1lOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTLOaBtu/xb8QfQK8756J3Pbs3XWwWJeZJjgCcROR8WQ+dOcrZdPhTlVuttH My3zUbCosDCbAxJ+7eI0LGzgjW1oQTpni2Vocd5HKOkSbXYpXG0zhLUjbjVxj8/1 wg0C9u8GU5YPP4eVGg/24I+jp7FN6aMz9R/qKbckWrDT7K78yDILVacrNiR0GFnl okdXDn9xXgs02Fqb/mK+lFwBjT7uP1CfT5cUJBSja9a5sTGKrJJKD51vNmHtv67N R/vJ+XtaHXfayDrgeBkNPcb1atjTIlqEn5Ad8InQ0fxoY+iMCMfSsZ1esjiodCFX ySmCHt3rSk5i4vVJGdtc05hhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM7KDZY /yeoqBCdyKTt2LLtnUp5MB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkcuQVknJ/NhzRjbulDOc5zVhwolVCkPeoX3804ykDY8NCWqnU74jO Z1McVSNYukpITEf2BV3nwjaL+vRkXJDsQ1J8Jdbq1mRHqo0izoOkB+JDTlzvB8Aj gBLtmXBfOZhVLiz8pURP7CcqLDgW7eGdPTNQHglbiwko0kY2MmwhDpp386oX0tEp lfmm+bDwYm204OwlhXHaVYbIGMrfBlabK3U475Qv2/fqvU2mKWL3DVbfYjSgZFJS JdEXfZ6DUT30kxjD16S9EpXFUk+5BrYt8ZkeI89wrQUBxAOOWM7XZ4Gi6u2EebHm +pEPYI6IBpD7k+ggRCeOHaVci4rBmVwN -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:18 2025 by rpki-client