This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: SEeXyIujZ27A5qBubZyC0sCfCznqiq483QSK1uV0P6Y= Subject key identifier: 7B:58:E7:F0:9F:17:6A:D1:CE:76:20:3A:7B:F8:9C:42:53:FC:26:3C Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 1185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 117B Signing time: Mon 22 Dec 2025 16:55:26 +0000 Manifest this update: Mon 22 Dec 2025 16:55:26 +0000 Manifest next update: Mon 29 Dec 2025 16:55:26 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: WeYY4XK6uNdYOZezQb0ooB8TTaKDi15/IGRXq8i9dVs=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: +yvtNS8LKQHKe3DTi4wIovOu3eQ4uVvjs9/gUB2eHD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4485 (0x1185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Dec 22 16:55:26 2025 GMT Not After : Dec 29 16:55:26 2025 GMT Subject: CN=694977fe-3308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:78:b1:cd:53:b9:81:5e:5b:69:65:02:9c: 34:c9:cd:72:4d:bb:48:97:53:8c:7b:ad:0d:9a:bb: a1:3b:74:a4:c9:ee:7c:ca:0c:e5:0c:b9:c9:93:a2: f4:08:84:46:2b:81:9c:95:3f:4f:58:0c:0e:47:a4: 1c:66:f0:df:5f:b8:c2:b3:a8:8a:3e:ee:63:3c:fe: 69:0c:a4:e3:f5:76:5f:b7:81:2a:8e:38:92:5c:bd: 4e:ea:c6:d9:2a:5e:4b:a7:a0:f7:d5:91:83:79:52: 12:04:0a:11:4e:e4:da:24:34:5a:bb:e7:2b:77:1d: d4:75:ac:31:3a:b3:aa:05:bf:89:cf:0a:90:56:d0: 27:42:f1:f6:43:60:f6:dd:53:eb:5f:59:d0:e0:74: 30:bd:dd:03:fb:1c:6c:dd:58:42:c5:b4:15:73:78: 2e:7a:b9:62:e4:06:40:9e:7e:f6:32:17:8e:e3:4b: d6:87:5c:c3:1b:c3:c0:a2:62:63:0c:26:21:4f:3c: fd:39:86:16:67:58:f9:6e:2b:2a:8f:d7:92:fa:f1: 2e:ea:f4:0c:c7:8a:70:73:a4:7e:da:ce:e5:8f:e2: 83:c9:08:17:b9:66:f8:ad:99:3a:84:ca:29:4e:29: bc:c6:08:5d:7c:6d:55:a3:bd:75:05:2f:e9:d9:b7: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:58:E7:F0:9F:17:6A:D1:CE:76:20:3A:7B:F8:9C:42:53:FC:26:3C X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:80:28:90:9e:2e:48:46:64:34:cd:5b:43:d9:b0:0e:d7:aa: 7e:d5:3a:4f:0e:3f:dc:c3:1d:7b:1b:4f:ef:f1:df:af:4c:27: 75:86:19:45:e2:5a:6e:a5:f2:7a:c1:d0:76:75:f3:a2:f3:40: 05:ef:45:9e:b3:d2:cc:2c:85:2e:0c:f8:5a:c2:c0:f0:2a:d9: 18:bd:eb:43:89:74:6c:35:a3:4e:b4:ca:97:5e:3f:ed:e4:45: 6a:9e:b5:39:5a:34:2a:44:77:4e:04:87:68:6a:d7:78:69:e4: 53:d4:ec:a4:0f:62:b0:83:41:41:9b:98:2e:d9:d4:21:f1:fc: 3a:c3:d1:c0:05:64:0b:75:43:22:c3:72:e4:23:ac:77:72:ce: 8e:6f:25:1d:4b:4b:d9:2b:35:3e:ae:07:76:45:45:23:d6:a9: 69:62:26:34:a3:bc:ed:a2:8f:58:80:30:c6:fa:7c:b6:ef:7f: 55:57:bd:b6:df:c0:6e:74:35:17:65:8e:68:47:a4:5f:a1:a1: 52:ed:31:ae:2f:c7:06:7e:3f:6c:8e:a8:25:81:21:dd:08:af: 06:99:3a:f0:47:c0:3b:73:7c:2f:36:61:80:4d:db:a1:63:6a: 5b:17:55:e6:e7:ae:ca:ba:66:fc:14:3e:be:73:37:9e:a0:5a: 47:08:59:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUxMjIyMTY1NTI2WhcNMjUxMjI5MTY1NTI2WjAYMRYwFAYD VQQDDA02OTQ5NzdmZS0zMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUh4sc1TuYFeW2llApw0yc1yTbtIl1OMe60NmruhO3Skye58ygzlDLnJk6L0 CIRGK4GclT9PWAwOR6QcZvDfX7jCs6iKPu5jPP5pDKTj9XZft4EqjjiSXL1O6sbZ Kl5Lp6D31ZGDeVISBAoRTuTaJDRau+crdx3UdawxOrOqBb+JzwqQVtAnQvH2Q2D2 3VPrX1nQ4HQwvd0D+xxs3VhCxbQVc3guerli5AZAnn72MheO40vWh1zDG8PAomJj DCYhTzz9OYYWZ1j5bisqj9eS+vEu6vQMx4pwc6R+2s7lj+KDyQgXuWb4rZk6hMop Tim8xghdfG1Vo711BS/p2bdpnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtY5/Cf F2rRznYgOnv4nEJT/CY8MB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbgCiQni5IRmQ0zVtD2bAO16p+1TpPDj/cwx17G0/v8d+vTCd1hhlF 4lpupfJ6wdB2dfOi80AF70Wes9LMLIUuDPhawsDwKtkYvetDiXRsNaNOtMqXXj/t 5EVqnrU5WjQqRHdOBIdoatd4aeRT1OykD2Kwg0FBm5gu2dQh8fw6w9HABWQLdUMi w3LkI6x3cs6ObyUdS0vZKzU+rgd2RUUj1qlpYiY0o7ztoo9YgDDG+ny2739VV722 38BudDUXZY5oR6RfoaFS7TGuL8cGfj9sjqglgSHdCK8GmTrwR8A7c3wvNmGATduh Y2pbF1Xm567Kumb8FD6+czeeoFpHCFl1 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:24 2025 by rpki-client