This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: 42SVLD5X7DXSlh1/Rg+uuLpTDhKYLQynQUtUHpsI3/0= Subject key identifier: BF:86:F6:F1:23:53:0A:E0:8E:7A:3E:1B:BB:B3:29:1D:B7:47:44:2D Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 098B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 0973 Signing time: Sun 14 Dec 2025 19:33:23 +0000 Manifest this update: Sun 14 Dec 2025 19:33:23 +0000 Manifest next update: Sun 21 Dec 2025 19:33:23 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: lcq6mQimbsGu/3t1tAHaYAlGzNUiDVPSp24shJy1Wbs=) 2: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 3: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) 4: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 5: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 6: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Dec 14 19:33:23 2025 GMT Not After : Dec 21 19:33:23 2025 GMT Subject: CN=693f1103-b296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:75:79:d6:6f:86:73:22:7d:73:fb:1e:51: 1f:52:08:81:b1:53:4d:c1:da:1d:71:4f:8a:55:5f: 0b:55:d8:ce:63:02:48:48:52:3e:08:cd:fc:49:2a: 92:28:34:41:f7:9e:80:a3:6b:cc:b2:d6:f1:c9:9b: 94:72:73:e9:94:21:f8:04:83:dc:b9:ab:6d:23:ca: c8:17:8a:ee:85:05:41:9f:7c:8e:ff:52:cc:91:df: 25:30:0a:e5:06:54:ba:be:3d:da:4f:0d:e0:d9:80: 34:bf:9b:e3:23:a0:74:73:55:3f:89:ae:6d:97:b7: bc:d5:18:1d:21:bc:9f:a0:2d:75:1e:1d:1b:78:5e: 15:55:00:c1:4f:bd:12:3e:57:95:c8:57:ce:bc:26: 88:e2:63:28:c4:65:f8:18:1d:d4:1f:07:80:13:ae: 98:6e:dc:8e:6f:b9:0b:ce:df:0e:9b:f8:7a:28:21: 10:84:81:ad:05:af:1b:4f:5d:41:56:f0:40:00:ba: 42:55:66:1a:2c:bc:bb:b4:a5:db:8d:03:2a:ab:74: e1:53:35:47:9e:98:80:b6:8d:2c:18:46:75:33:42: 7d:69:71:91:b3:b1:b1:b9:07:92:73:69:48:85:0e: c8:ce:5e:04:a3:b3:6d:c4:1b:06:e8:1e:ae:01:92: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:86:F6:F1:23:53:0A:E0:8E:7A:3E:1B:BB:B3:29:1D:B7:47:44:2D X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6a:dc:86:17:94:9d:63:fb:28:a5:dc:f2:6e:70:a3:ca:cd: d2:d5:f8:16:78:70:31:16:36:41:ab:2b:c4:9e:16:d3:9c:ea: d4:e8:44:8c:4b:11:56:eb:04:ad:11:ea:bc:e8:9b:d2:83:81: 10:f0:df:2b:1c:40:58:dc:ec:db:5a:0e:66:fa:21:28:fc:93: 6f:8d:f9:cd:86:39:15:8a:55:2b:a1:1c:d3:dc:47:6b:f7:f0: bc:2d:8c:3f:c7:2f:c4:28:ab:f7:de:b8:47:f2:af:e3:d6:4c: dd:e3:15:4f:ea:01:6d:88:ac:52:76:28:3d:39:11:a8:2b:d4: 91:4c:c7:f5:3c:cd:7f:7f:c7:ed:84:3b:11:c6:d0:52:07:05: cd:d6:97:2a:60:34:41:d5:38:ba:73:97:8c:ea:f3:95:d7:8a: 2c:c4:ed:d9:58:13:fe:4d:a6:3f:11:de:bb:81:43:77:1c:e2: ae:7f:c0:d7:de:c5:29:6e:67:61:bc:54:5a:4e:53:01:90:ab: 0f:ae:3e:10:d2:d5:a2:5d:ee:84:59:15:89:17:ff:eb:5c:8e: 3f:44:82:cf:c7:09:d0:48:b2:25:75:2e:f5:96:0c:0e:3e:10: 3f:32:0b:60:54:48:44:3e:93:18:f1:22:b6:46:ce:c3:76:ce: 43:0a:e5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUxMjE0MTkzMzIzWhcNMjUxMjIxMTkzMzIzWjAYMRYwFAYD VQQDDA02OTNmMTEwMy1iMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC11edZvhnMifXP7HlEfUgiBsVNNwdodcU+KVV8LVdjOYwJISFI+CM38SSqS KDRB956Ao2vMstbxyZuUcnPplCH4BIPcuattI8rIF4ruhQVBn3yO/1LMkd8lMArl BlS6vj3aTw3g2YA0v5vjI6B0c1U/ia5tl7e81RgdIbyfoC11Hh0beF4VVQDBT70S PleVyFfOvCaI4mMoxGX4GB3UHweAE66YbtyOb7kLzt8Om/h6KCEQhIGtBa8bT11B VvBAALpCVWYaLLy7tKXbjQMqq3ThUzVHnpiAto0sGEZ1M0J9aXGRs7GxuQeSc2lI hQ7Izl4Eo7NtxBsG6B6uAZIj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+G9vEj Uwrgjno+G7uzKR23R0QtMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSatyGF5SdY/sopdzybnCjys3S1fgWeHAxFjZBqyvEnhbTnOrU6ESM SxFW6wStEeq86JvSg4EQ8N8rHEBY3OzbWg5m+iEo/JNvjfnNhjkVilUroRzT3Edr 9/C8LYw/xy/EKKv33rhH8q/j1kzd4xVP6gFtiKxSdig9ORGoK9SRTMf1PM1/f8ft hDsRxtBSBwXN1pcqYDRB1Ti6c5eM6vOV14osxO3ZWBP+TaY/Ed67gUN3HOKuf8DX 3sUpbmdhvFRaTlMBkKsPrj4Q0tWiXe6EWRWJF//rXI4/RILPxwnQSLIldS71lgwO PhA/MgtgVEhEPpMY8SK2Rs7Dds5DCuU7 -----END CERTIFICATE-----Generated at Tue Dec 16 10:43:01 2025 by rpki-client