This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: gDa84n7+xge/Yfu8r5OTzw0SuBRLWzQ36J4RgWl+m5w= Subject key identifier: 73:58:99:62:71:B7:44:B2:41:3C:B2:C4:B9:3E:DC:B5:D1:43:21:28 Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 05BC Signing time: Mon 22 Dec 2025 22:14:29 +0000 Manifest this update: Mon 22 Dec 2025 22:14:28 +0000 Manifest next update: Mon 29 Dec 2025 22:14:28 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: DR4UFdbwN8lPYYF6yCKclISjiwdYvwR3/dydzlfYG4I=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Dec 22 22:14:28 2025 GMT Not After : Dec 29 22:14:28 2025 GMT Subject: CN=6949c2c5-b54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:83:8c:ee:cb:f1:07:77:d1:82:96:40:5b: 37:01:54:3c:d5:99:03:9a:0b:05:71:d8:54:a4:31: 1e:c2:9e:90:14:9f:d8:62:75:fd:ee:0d:b8:f8:da: ee:4e:15:02:ee:3e:b0:13:ad:e6:37:82:50:f8:7c: e4:bc:fc:88:c2:93:6d:16:06:cb:23:52:c8:54:ec: b1:51:7a:86:87:0c:d6:a6:ef:de:b5:ae:a7:f1:2e: 8c:a2:87:7a:c0:28:6e:34:cc:4a:ec:0b:a3:e7:95: 10:a0:5f:90:93:b5:f0:99:ba:e4:9a:f6:15:89:17: 86:3a:12:54:aa:0f:ea:35:9a:5d:d5:3f:d6:81:92: e8:99:9d:f1:67:ef:68:b2:85:a4:e4:1f:65:65:9c: 1e:a2:4a:87:a7:cc:4c:0e:12:4a:17:0c:ba:a7:e7: a0:df:49:c1:4f:c1:58:88:67:8e:24:b9:03:25:09: a7:d7:34:63:30:49:ed:88:a6:f1:1f:f7:32:37:6a: 45:5c:6f:23:2b:4b:a0:ec:83:a7:79:4c:19:1a:c2: d5:bb:85:32:9b:98:68:6e:b4:6c:c4:6c:d8:a1:c3: 3a:d8:d0:fa:93:8d:46:77:d9:96:26:9c:7e:91:18: 17:5d:19:88:3c:73:05:d2:67:eb:21:75:8b:b6:15: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:99:62:71:B7:44:B2:41:3C:B2:C4:B9:3E:DC:B5:D1:43:21:28 X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:76:77:e6:d4:59:75:9b:87:6c:1b:5a:ca:c4:7c:13:e5:83: ea:bd:81:31:f4:a7:aa:ab:58:57:1a:97:b4:1c:53:01:96:95: aa:d9:eb:46:13:dd:e8:a4:e1:1c:49:d2:eb:e9:2d:b6:1e:dd: a6:a8:d2:f6:4a:9e:9d:5f:17:20:66:b0:ce:8a:a4:1c:f8:73: 9b:86:1a:db:be:52:b0:d7:b0:59:8f:98:ec:c1:d2:2d:e1:f8: 86:da:b7:bf:1e:fe:5b:84:17:47:6c:6a:46:32:52:0b:9f:40: 29:0c:14:eb:a9:b0:e6:fa:a5:24:17:ee:93:12:b9:7a:30:ed: 6d:71:00:16:11:e5:35:43:5f:1a:9a:dc:13:90:c4:a0:77:22: 61:2a:7d:12:79:c8:a5:21:6e:3c:93:61:23:e9:27:f5:c2:aa: 2b:6d:90:d0:0c:6e:d6:5d:9f:f0:58:5e:dd:19:b6:fe:9c:d8: 3e:5f:db:e4:ef:56:08:21:98:78:78:8f:bc:ff:be:dd:0e:5e: 9b:52:5c:5d:3c:6a:1f:2c:50:6c:89:10:80:40:92:51:65:89: 64:f5:93:9e:38:0d:7a:4a:98:80:76:85:de:71:87:9e:bc:f6: 67:06:d6:b8:64:e3:22:90:dd:34:69:6d:db:10:dd:41:5b:14: a2:c6:88:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUxMjIyMjIxNDI4WhcNMjUxMjI5MjIxNDI4WjAYMRYwFAYD VQQDDA02OTQ5YzJjNS1iNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvaDjO7L8Qd30YKWQFs3AVQ81ZkDmgsFcdhUpDEewp6QFJ/YYnX97g24+Nru ThUC7j6wE63mN4JQ+HzkvPyIwpNtFgbLI1LIVOyxUXqGhwzWpu/eta6n8S6Mood6 wChuNMxK7Auj55UQoF+Qk7XwmbrkmvYViReGOhJUqg/qNZpd1T/WgZLomZ3xZ+9o soWk5B9lZZweokqHp8xMDhJKFwy6p+eg30nBT8FYiGeOJLkDJQmn1zRjMEntiKbx H/cyN2pFXG8jK0ug7IOneUwZGsLVu4Uym5hobrRsxGzYocM62ND6k41Gd9mWJpx+ kRgXXRmIPHMF0mfrIXWLthUW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNYmWJx t0SyQTyyxLk+3LXRQyEoMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOdnfm1Fl1m4dsG1rKxHwT5YPqvYEx9Keqq1hXGpe0HFMBlpWq2etG E93opOEcSdLr6S22Ht2mqNL2Sp6dXxcgZrDOiqQc+HObhhrbvlKw17BZj5jswdIt 4fiG2re/Hv5bhBdHbGpGMlILn0ApDBTrqbDm+qUkF+6TErl6MO1tcQAWEeU1Q18a mtwTkMSgdyJhKn0SecilIW48k2Ej6Sf1wqorbZDQDG7WXZ/wWF7dGbb+nNg+X9vk 71YIIZh4eI+8/77dDl6bUlxdPGofLFBsiRCAQJJRZYlk9ZOeOA16SpiAdoXecYee vPZnBta4ZOMikN00aW3bEN1BWxSixogQ -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:11 2025 by rpki-client