This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: aHy6DSVytBSpjehkrJ/BR/+lyTR0nwwK/V3ZmnXON6Y= Subject key identifier: 62:82:8F:27:84:61:29:67:A9:C4:E6:23:0E:E0:47:AA:0A:07:59:0C Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 04 Signing time: Wed 03 Dec 2025 01:21:01 +0000 Manifest this update: Wed 03 Dec 2025 01:21:01 +0000 Manifest next update: Wed 10 Dec 2025 01:21:01 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: xPgioFrMqGIWL2eiHZ8f+WrzQBGN2IrsrREPB2bbuVg=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Dec 3 01:21:01 2025 GMT Not After : Dec 10 01:21:01 2025 GMT Subject: CN=692f907d-e6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:0f:f3:cd:b4:70:55:36:8f:55:27:21:37: 07:ec:83:78:43:b6:03:45:09:e7:ba:e4:9a:38:4f: fe:74:36:b9:e5:32:db:bf:63:39:05:e5:9f:25:83: 2b:c6:e1:93:e7:81:e9:6e:cb:91:a6:f9:3f:bb:d8: d5:b4:88:a4:5c:94:d5:0e:69:58:2e:06:0e:84:ed: 00:68:1d:14:c5:f0:53:d3:96:90:1c:1d:25:fe:37: 2b:47:f9:08:ad:7e:67:0a:bb:7c:e0:7c:06:57:56: e5:2c:69:a7:79:b6:fc:9b:34:4c:66:22:64:42:71: 45:1d:c5:5b:6b:4f:61:69:48:a2:35:d8:30:7e:ef: 4f:15:aa:16:f3:d4:73:4c:c4:4e:31:5e:7c:35:be: c3:53:74:36:c8:7b:19:6e:7b:37:05:f0:36:1b:05: 0c:0d:d1:9f:e8:10:ae:73:3e:19:28:10:a7:75:72: ca:8e:e7:91:8e:d7:dd:b9:f8:20:aa:53:49:9d:3c: d9:28:a7:cb:ff:ba:d1:aa:d5:14:fc:04:a4:46:1b: af:73:d0:1a:eb:58:56:61:b2:b3:c5:5c:90:22:f5: 18:52:72:c6:47:a4:89:b1:b9:1c:22:49:63:ca:ca: 3a:9a:a6:3d:2c:f3:08:3e:a8:cf:ee:0f:aa:4f:52: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:8F:27:84:61:29:67:A9:C4:E6:23:0E:E0:47:AA:0A:07:59:0C X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a8:bf:57:15:53:c6:69:08:20:dc:a7:14:f2:4a:e5:78:a5: e0:71:bd:c6:6f:b7:4a:8a:6c:e6:1f:4a:7f:a9:d0:6b:f9:af: bb:74:73:f6:c0:78:99:f6:b7:85:23:fa:ec:9c:d0:6d:b7:b3: 45:79:2f:c6:23:f4:26:26:f6:3d:b0:17:af:0f:ea:04:9e:95: 30:e1:54:94:dc:97:18:29:9a:01:ba:00:60:b5:91:24:b3:78: 98:f6:af:32:70:d4:30:a2:59:37:34:8b:b9:e8:59:ca:8b:27: 24:b4:75:d8:66:14:e2:ec:bd:0e:4f:80:8c:b3:e2:74:58:84: 2f:52:6e:b5:1e:49:0e:3d:0d:01:59:f4:c4:58:fb:68:a4:57: 9d:31:a9:d9:c6:86:42:66:0b:8a:d2:c1:b7:cb:8f:49:0c:18: 5c:b8:ae:ff:46:7e:43:d1:f3:11:f8:a1:c4:33:b0:d5:21:0f: 20:e0:69:c2:2a:99:14:f6:dc:0d:99:da:8b:d4:65:93:85:3c: 71:c9:e4:6a:a4:f3:9c:44:0f:21:30:85:ee:9d:2b:41:0f:ed: 6f:ee:4d:66:9b:1f:a6:7c:f1:10:3d:67:c8:3f:68:c1:ae:0b: 82:de:57:6c:be:34:4a:68:ed:53:94:4a:a2:d0:c6:a4:8e:ef: 97:85:f4:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNTEyMDMwMTIxMDFaFw0yNTEyMTAwMTIxMDFaMBgxFjAUBgNV BAMTDTY5MmY5MDdkLWU2ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpgw/zzbRwVTaPVSchNwfsg3hDtgNFCee65Jo4T/50NrnlMtu/YzkF5Z8lgyvG 4ZPngeluy5Gm+T+72NW0iKRclNUOaVguBg6E7QBoHRTF8FPTlpAcHSX+NytH+Qit fmcKu3zgfAZXVuUsaad5tvybNExmImRCcUUdxVtrT2FpSKI12DB+708Vqhbz1HNM xE4xXnw1vsNTdDbIexluezcF8DYbBQwN0Z/oEK5zPhkoEKd1csqO55GO1925+CCq U0mdPNkop8v/utGq1RT8BKRGG69z0BrrWFZhsrPFXJAi9RhScsZHpImxuRwiSWPK yjqapj0s8wg+qM/uD6pPUmHNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYoKPJ4Rh KWepxOYjDuBHqgoHWQwwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGov1cVU8ZpCCDcpxTySuV4peBxvcZvt0qKbOYfSn+p0Gv5r7t0c/bA eJn2t4Uj+uyc0G23s0V5L8Yj9CYm9j2wF68P6gSelTDhVJTclxgpmgG6AGC1kSSz eJj2rzJw1DCiWTc0i7noWcqLJyS0ddhmFOLsvQ5PgIyz4nRYhC9SbrUeSQ49DQFZ 9MRY+2ikV50xqdnGhkJmC4rSwbfLj0kMGFy4rv9GfkPR8xH4ocQzsNUhDyDgacIq mRT23A2Z2ovUZZOFPHHJ5Gqk85xEDyEwhe6dK0EP7W/uTWabH6Z88RA9Z8g/aMGu C4LeV2y+NEpo7VOUSqLQxqSO75eF9Bk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:07 2025 by rpki-client