This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: K3bkNSKul2jOVaQNLUEgbRW94k6d7DYIQOARY1CJ8r4= Subject key identifier: D3:E2:36:60:3B:16:7C:2F:9F:14:4C:65:DE:EC:CE:A4:57:B2:80:AD Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 05C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 05BB Signing time: Mon 22 Dec 2025 22:14:48 +0000 Manifest this update: Mon 22 Dec 2025 22:14:47 +0000 Manifest next update: Mon 29 Dec 2025 22:14:47 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: DG0k9CsNU4FyRB2LeLAhxbq/31QcMfaIPE58GVPd+Gk=) 2: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: mLPy6bt3CbNAncCWplQO85aBCAGnfrSY9rHYwr8JJfA=) 3: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: Ut3CDtCW4yFtzwlmPVnhZOKBuebePtbtjUycMS+MqHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1476 (0x5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Validity Not Before: Dec 22 22:14:47 2025 GMT Not After : Dec 29 22:14:47 2025 GMT Subject: CN=6949c2d8-86a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:a1:e8:b6:26:b6:98:bb:ca:5f:ff:97:e0: 0f:b9:05:48:d4:2f:0e:79:90:de:98:22:1c:2a:af: 6b:8f:c0:6b:cb:9a:1f:f1:e0:d4:1e:ec:9e:0c:36: 54:b7:10:2e:d0:4e:54:82:41:6d:79:59:66:3e:e1: 7b:46:44:1a:37:ca:a6:eb:85:28:1f:0e:a8:f4:c6: ae:c0:e7:fb:f3:6e:79:03:d2:48:b6:92:c0:02:7e: f1:50:d0:77:45:e7:27:33:59:20:47:4e:df:69:ee: 28:70:3b:a6:82:f4:9a:5a:87:4f:36:d3:d8:b1:8c: 0e:59:2b:95:26:21:5d:a1:02:b7:b1:84:70:53:cd: 62:d3:2c:e4:55:46:bb:34:d3:66:72:3c:18:99:d0: 19:d2:b1:6c:36:cf:f0:f4:cd:5b:dd:72:50:c5:32: 43:c8:c0:2c:12:10:e2:55:68:3e:18:09:49:81:4e: b6:12:32:77:79:82:7c:32:10:1e:70:0b:f8:f4:ee: 94:aa:31:65:ee:da:f7:80:c2:17:d6:7a:c5:5e:a4: 8b:5d:2e:78:e1:a5:35:12:12:fc:3f:37:8c:2f:a4: 13:06:d1:b4:18:95:8b:07:e7:3f:99:ba:b1:46:fa: 86:29:c8:fc:fa:04:fe:8b:9e:66:48:5d:68:df:af: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:36:60:3B:16:7C:2F:9F:14:4C:65:DE:EC:CE:A4:57:B2:80:AD X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3c:09:97:09:bd:97:a0:66:7b:f1:be:cb:7c:55:c3:70:68: 3e:23:5b:5d:f7:eb:7a:7c:4a:39:78:fa:af:bb:cb:d8:8b:a2: 9b:ee:60:2f:32:54:c8:df:51:a1:52:58:bb:a9:cf:74:56:e6: df:cb:20:8a:2d:00:6d:61:cb:c5:a3:d6:68:ed:6e:7c:79:7a: a7:41:7d:be:de:9b:ab:7b:cc:1f:cf:f0:2d:03:2e:8a:f4:42: 31:3f:ec:6d:28:89:4b:fc:97:e1:a7:68:8e:ce:57:f2:29:bd: cf:ba:44:b3:a3:bf:bb:18:1e:7a:23:93:27:35:e2:d8:d2:89: 42:a1:10:82:a2:82:6d:02:78:cf:5c:df:32:30:4d:f5:30:40: 04:e6:89:2d:da:bc:35:f2:97:51:f1:1e:96:6d:27:24:b8:f1: e1:b2:a8:4f:a9:fa:84:60:db:17:66:90:5f:6d:38:c3:29:09: 35:b3:58:a7:2a:ca:a8:14:34:f0:e5:5a:44:66:54:8a:3c:53: 08:c1:1f:ee:55:45:c9:bd:db:ed:80:0b:b5:1a:3b:18:07:97: d2:98:db:17:fa:a7:06:3a:d1:10:d5:8b:5e:d9:00:1d:69:3b: 22:bc:c5:18:77:eb:54:e1:46:d7:2c:d8:14:4c:3b:86:4c:a2: 30:5f:e1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjUxMjIyMjIxNDQ3WhcNMjUxMjI5MjIxNDQ3WjAYMRYwFAYD VQQDDA02OTQ5YzJkOC04NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34Ch6LYmtpi7yl//l+APuQVI1C8OeZDemCIcKq9rj8Bry5of8eDUHuyeDDZU txAu0E5UgkFteVlmPuF7RkQaN8qm64UoHw6o9MauwOf78255A9JItpLAAn7xUNB3 RecnM1kgR07fae4ocDumgvSaWodPNtPYsYwOWSuVJiFdoQK3sYRwU81i0yzkVUa7 NNNmcjwYmdAZ0rFsNs/w9M1b3XJQxTJDyMAsEhDiVWg+GAlJgU62EjJ3eYJ8MhAe cAv49O6UqjFl7tr3gMIX1nrFXqSLXS544aU1EhL8PzeML6QTBtG0GJWLB+c/mbqx RvqGKcj8+gT+i55mSF1o36/d3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPiNmA7 FnwvnxRMZd7szqRXsoCtMB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7PAmXCb2XoGZ78b7LfFXDcGg+I1td9+t6fEo5ePqvu8vYi6Kb7mAv MlTI31GhUli7qc90VubfyyCKLQBtYcvFo9Zo7W58eXqnQX2+3pure8wfz/AtAy6K 9EIxP+xtKIlL/Jfhp2iOzlfyKb3PukSzo7+7GB56I5MnNeLY0olCoRCCooJtAnjP XN8yME31MEAE5okt2rw18pdR8R6WbSckuPHhsqhPqfqEYNsXZpBfbTjDKQk1s1in KsqoFDTw5VpEZlSKPFMIwR/uVUXJvdvtgAu1GjsYB5fSmNsX+qcGOtEQ1Yte2QAd aTsivMUYd+tU4UbXLNgUTDuGTKIwX+FB -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:49 2025 by rpki-client