This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: oaLPWrnz2yqg43THNNhyUZ4FZgR07WGdTt4v27fodgc= Subject key identifier: 9C:30:1B:F7:08:F9:FB:FB:D1:63:89:A9:79:4E:DF:79:1C:32:1D:08 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 019F Signing time: Tue 09 Dec 2025 01:34:52 +0000 Manifest this update: Tue 09 Dec 2025 01:34:51 +0000 Manifest next update: Tue 16 Dec 2025 01:34:51 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: GewwesS2JTucuuPmuct9YE1T0/kZLf61rvSyvHCGCMo=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 01:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Dec 9 01:34:51 2025 GMT Not After : Dec 16 01:34:51 2025 GMT Subject: CN=69377cbb-a2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:1b:73:bf:c7:df:99:31:c6:d3:63:fd:8e: 39:45:52:f9:c8:97:65:3e:28:b9:7c:0b:20:fb:c2: 6b:a9:da:97:d3:2d:d8:69:d0:70:8b:be:62:ae:df: f3:3d:f9:05:96:11:e2:18:81:a5:ee:e3:2b:95:02: e6:83:cd:fb:25:56:37:65:0a:fa:80:2c:99:bd:08: a7:66:d7:d2:ec:ef:93:16:67:d6:42:8f:94:23:f4: f4:f9:4d:b0:eb:99:5a:e1:d5:ef:91:a3:42:15:1f: ef:ea:d2:f9:08:fc:99:4d:88:ce:d8:85:f5:7e:69: b5:01:c0:5e:2c:24:4c:72:f1:91:f1:a2:20:05:0b: f7:db:dd:17:4b:11:a9:86:15:92:02:bd:e2:b6:c7: 05:d5:f6:0e:1e:c9:2d:43:d4:d2:11:27:6e:de:c3: 31:ce:80:97:25:af:8e:1a:87:f7:0f:9c:40:79:d1: e0:03:f0:0f:0f:ad:55:04:f4:dd:f2:2b:45:53:6f: 92:11:92:33:84:5b:bd:42:3e:77:ff:36:78:ba:c6: eb:6f:ee:04:56:e0:6d:b0:6e:79:0b:47:cc:c1:c0: d8:0a:00:17:a5:17:9a:e5:bd:6e:5b:5a:f6:8a:50: 77:5e:7f:6d:43:02:5b:b7:9a:e9:71:de:8a:50:2a: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:30:1B:F7:08:F9:FB:FB:D1:63:89:A9:79:4E:DF:79:1C:32:1D:08 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:b4:a8:4e:a1:f3:55:83:b6:d1:69:a5:af:bf:48:a3:d8: 44:4a:8b:3b:31:c3:99:2d:c6:32:75:2d:58:7d:1f:06:1a:69: 3b:ed:33:1e:84:01:4b:22:f5:5d:fc:52:40:7b:e0:3c:ed:0e: 06:df:14:b4:01:b1:e3:a2:fd:82:46:06:64:8e:c9:43:2c:bc: 20:28:64:e8:f2:df:77:7f:8c:0f:3f:85:ab:18:45:f5:66:3c: 0c:fd:6c:4c:8d:6d:01:68:7b:46:53:21:5a:c7:f6:72:1e:a2: 4c:0a:35:de:fb:dc:cd:df:49:df:77:c3:08:6d:f9:e5:95:d5: d6:63:f7:db:ec:19:b7:7e:79:dd:49:60:d4:dc:f5:c6:d6:a4: e9:68:2c:a0:85:d9:df:3f:d2:d9:0b:8f:78:95:87:ea:aa:0c: b0:e7:f5:f0:72:28:1e:66:9e:5e:96:bb:2f:7b:14:b5:42:b1: 12:8d:19:52:57:d4:6c:bb:7e:2f:af:72:5b:bc:1a:91:3d:c6: 4b:95:5f:4a:a5:16:f7:01:31:61:eb:22:9e:85:45:1b:4d:08: 54:e5:bd:b9:2d:03:ae:b2:dc:2d:d8:db:e9:77:48:b1:88:be: 89:45:20:0b:9c:11:a8:8b:00:da:8a:12:d3:ba:23:a5:f8:82: d2:67:ff:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUxMjA5MDEzNDUxWhcNMjUxMjE2MDEzNDUxWjAYMRYwFAYD VQQDEw02OTM3N2NiYi1hMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPQbc7/H35kxxtNj/Y45RVL5yJdlPii5fAsg+8JrqdqX0y3YadBwi75irt/z PfkFlhHiGIGl7uMrlQLmg837JVY3ZQr6gCyZvQinZtfS7O+TFmfWQo+UI/T0+U2w 65la4dXvkaNCFR/v6tL5CPyZTYjO2IX1fmm1AcBeLCRMcvGR8aIgBQv3290XSxGp hhWSAr3itscF1fYOHsktQ9TSESdu3sMxzoCXJa+OGof3D5xAedHgA/APD61VBPTd 8itFU2+SEZIzhFu9Qj53/zZ4usbrb+4EVuBtsG55C0fMwcDYCgAXpRea5b1uW1r2 ilB3Xn9tQwJbt5rpcd6KUCp/fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwwG/cI +fv70WOJqXlO33kcMh0IMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHL7SoTqHzVYO20Wmlr79Io9hESos7McOZLcYydS1YfR8GGmk77TMe hAFLIvVd/FJAe+A87Q4G3xS0AbHjov2CRgZkjslDLLwgKGTo8t93f4wPP4WrGEX1 ZjwM/WxMjW0BaHtGUyFax/ZyHqJMCjXe+9zN30nfd8MIbfnlldXWY/fb7Bm3fnnd SWDU3PXG1qTpaCyghdnfP9LZC494lYfqqgyw5/XwcigeZp5elrsvexS1QrESjRlS V9Rsu34vr3JbvBqRPcZLlV9KpRb3ATFh6yKehUUbTQhU5b25LQOustwt2Nvpd0ix iL6JRSALnBGoiwDaihLTuiOl+ILSZ/8D -----END CERTIFICATE-----Generated at Thu Dec 11 19:02:11 2025 by rpki-client