This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json) Hash identifier: zBCz+AmCPeK+ak/AEdVyK1C92QNtLTRuEBD7Ia6TyC4= Subject key identifier: 53:B5:AC:F6:80:14:AB:4D:96:9C:B1:4C:5A:02:1B:EA:D6:DC:E9:58 Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft Manifest number: 0932 Signing time: Mon 22 Dec 2025 19:36:15 +0000 Manifest this update: Mon 22 Dec 2025 19:36:14 +0000 Manifest next update: Mon 29 Dec 2025 19:36:14 +0000 Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: 1w5r3gGGCYJHJqv5nuCuRbZpGxKQixhFINcOTRE6Y3Q=) 2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: bY9iBRTWTxnL3x5BGOrTrK8i1l/rZN5Ru7pBpcmVZwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Validity Not Before: Dec 22 19:36:14 2025 GMT Not After : Dec 29 19:36:14 2025 GMT Subject: CN=69499daf-68d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:88:37:f7:ba:1c:19:be:75:da:93:27:84: 1e:96:32:39:0c:83:99:3d:26:2b:45:93:75:b1:ab: 1b:93:d8:f5:cf:33:03:c9:8c:22:80:d3:81:37:eb: cf:98:24:9d:b8:19:e7:70:48:75:b3:80:e1:9d:47: 05:32:62:f0:9c:9f:9c:eb:49:f6:39:f9:d3:3d:23: bc:aa:95:b7:2f:8b:6f:ba:c2:9e:83:8d:e0:2a:e3: fb:38:bf:41:d8:b1:69:ea:8a:4b:e5:31:a2:f4:07: 4c:3b:13:52:d0:99:b7:15:41:46:de:59:be:ba:69: d8:f0:83:fa:29:db:15:8c:b3:0e:97:49:84:ec:69: 5c:cd:fa:41:e5:0b:b4:ac:9e:98:23:43:a5:5a:cc: 2c:a5:09:09:52:23:24:f5:46:ad:a2:06:5d:f8:a5: 90:e5:d0:ce:a4:ba:15:fe:bf:c9:fe:c0:fd:de:50: 76:c4:0f:ef:8e:00:24:dc:88:fd:8a:2a:ba:93:27: 9c:66:52:25:ba:7e:9e:3f:11:ab:58:dd:e8:fb:0c: 6a:25:c3:fc:84:3f:c7:1d:70:43:e7:ec:92:c5:cb: b8:0b:16:e1:7d:3f:ee:61:87:a4:cd:12:28:15:6b: ab:df:f2:df:ce:2d:0e:5b:e5:63:d2:fe:ea:48:1f: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:AC:F6:80:14:AB:4D:96:9C:B1:4C:5A:02:1B:EA:D6:DC:E9:58 X509v3 Authority Key Identifier: keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:72:99:01:34:9b:11:80:27:1d:10:59:4b:6c:ac:73:d7:1e: e8:8d:77:2b:2d:e5:38:76:42:98:7c:32:1b:50:19:3f:26:7a: 1e:2b:85:3c:93:a6:cb:80:8f:e6:66:87:7b:f2:66:14:83:2b: 4c:ab:ed:fd:37:47:d7:b7:3b:bb:0f:0d:6c:da:f9:50:39:f9: 6b:2d:a1:fa:e1:79:7f:81:bd:2c:be:4d:70:27:53:f4:ad:08: 71:59:ea:3b:d1:18:1b:b1:24:a5:6b:b6:7f:67:8e:ed:66:39: 79:d7:4c:d8:a8:d0:43:6e:54:85:42:14:7c:ab:79:b8:a2:f2: 85:60:8a:c8:25:0c:82:cf:e8:dd:9f:28:dd:90:f6:29:ae:09: 98:70:d4:f8:ad:27:39:db:a3:74:3e:3f:04:e9:bf:2e:f6:1f: 46:69:27:3a:a6:7c:06:af:81:05:7e:79:5d:30:ba:e0:8c:6a: 89:ff:08:d0:d9:d9:4e:f1:d0:ba:09:e6:d7:ea:47:43:81:21: 97:4a:2e:d1:7d:08:73:68:6c:4c:f4:58:f2:8e:62:67:7e:75: bf:ed:2a:bf:98:61:73:37:6a:4a:39:f8:4e:a7:e9:cc:82:78: a6:f2:0f:0f:f9:06:84:1c:90:b8:34:42:e9:52:c7:15:04:02: 34:6c:d6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC OTY3MjBBM0MwHhcNMjUxMjIyMTkzNjE0WhcNMjUxMjI5MTkzNjE0WjAYMRYwFAYD VQQDDA02OTQ5OWRhZi02OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv22IN/e6HBm+ddqTJ4QeljI5DIOZPSYrRZN1sasbk9j1zzMDyYwigNOBN+vP mCSduBnncEh1s4DhnUcFMmLwnJ+c60n2OfnTPSO8qpW3L4tvusKeg43gKuP7OL9B 2LFp6opL5TGi9AdMOxNS0Jm3FUFG3lm+umnY8IP6KdsVjLMOl0mE7GlczfpB5Qu0 rJ6YI0OlWswspQkJUiMk9UatogZd+KWQ5dDOpLoV/r/J/sD93lB2xA/vjgAk3Ij9 iiq6kyecZlIlun6ePxGrWN3o+wxqJcP8hD/HHXBD5+ySxcu4CxbhfT/uYYekzRIo FWur3/Lfzi0OW+Vj0v7qSB95lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO1rPaA FKtNlpyxTFoCG+rW3OlYMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr eUZ0NEk5dENiaXE1WnlDancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWcpkBNJsRgCcdEFlLbKxz1x7ojXcrLeU4dkKYfDIbUBk/JnoeK4U8 k6bLgI/mZod78mYUgytMq+39N0fXtzu7Dw1s2vlQOflrLaH64Xl/gb0svk1wJ1P0 rQhxWeo70RgbsSSla7Z/Z47tZjl510zYqNBDblSFQhR8q3m4ovKFYIrIJQyCz+jd nyjdkPYprgmYcNT4rSc526N0Pj8E6b8u9h9GaSc6pnwGr4EFfnldMLrgjGqJ/wjQ 2dlO8dC6CebX6kdDgSGXSi7RfQhzaGxM9FjyjmJnfnW/7Sq/mGFzN2pKOfhOp+nM gnim8g8P+QaEHJC4NELpUscVBAI0bNYU -----END CERTIFICATE-----Generated at Tue Dec 23 11:23:06 2025 by rpki-client