This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: CeVGbQwdqMfQpXKwxbxKzLhKLpIUq40GT6k51mKzxik= Subject key identifier: 7B:C8:89:C4:F2:CB:73:13:40:E2:F6:21:BC:10:58:5A:30:9A:78:AA Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01FE Signing time: Tue 23 Dec 2025 01:29:30 +0000 Manifest this update: Tue 23 Dec 2025 01:29:29 +0000 Manifest next update: Tue 30 Dec 2025 01:29:29 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: YjZv8mC+dfMmhflXpCrYq2QUnH7hRiY6JP64IpWWgcU=) 2: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 3: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Dec 23 01:29:29 2025 GMT Not After : Dec 30 01:29:29 2025 GMT Subject: CN=6949f07a-f6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:97:22:f2:01:f2:d8:cd:7a:66:10:1b:16: 7a:f0:4e:0f:9c:01:6c:31:6c:7f:19:77:46:4f:0d: c2:cd:cc:12:9c:01:b1:a5:21:12:a4:0a:82:99:f4: a4:cc:d6:39:8f:4e:4b:e6:1c:6e:75:80:d0:89:d2: c4:91:31:af:e1:46:a5:42:31:69:98:7a:88:2c:08: ae:51:eb:de:e4:fc:08:16:67:c0:1d:63:f7:5b:e2: 36:82:f1:d3:21:30:bd:39:46:50:25:11:85:e9:92: 7e:e3:cd:a1:dd:75:a3:2b:2e:3b:f0:43:33:60:33: 42:f8:82:57:df:e4:8a:52:0f:9b:ad:ca:75:da:ab: f4:20:56:85:e6:75:8d:48:72:ce:e7:26:95:cf:10: 72:cb:b3:e3:e0:ae:df:41:6d:0a:2f:ce:b6:9c:3f: 6d:c1:bd:0a:3f:e2:6a:07:05:b2:29:7f:ff:65:63: 12:5c:ef:df:11:94:a6:0b:0c:ae:13:f9:b9:9b:31: 12:86:bf:64:f6:1f:d5:0c:71:27:a8:95:0e:b6:c5: f5:0a:d1:f9:df:be:cd:85:1e:4b:0d:d7:8b:b2:7c: df:3e:74:a1:4b:f0:c6:aa:e4:d1:8d:55:9e:98:37: 68:2c:88:54:96:e2:35:39:b2:71:29:b6:64:d9:fd: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C8:89:C4:F2:CB:73:13:40:E2:F6:21:BC:10:58:5A:30:9A:78:AA X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5e:3a:38:dc:94:f4:f3:7f:c3:e5:eb:0e:d8:2d:62:51:eb: 82:86:45:bf:12:2f:e8:13:90:a4:ae:d8:98:54:86:fa:a4:8c: 2c:02:0a:42:39:66:fb:c9:b6:70:3a:f4:99:97:20:50:1c:9f: 2c:8d:b3:ec:ce:7f:d1:3b:8b:ff:34:84:19:a6:28:c9:f6:df: 42:36:56:dd:2d:39:17:ef:1a:da:ea:dd:4f:f9:39:b2:18:6b: 12:64:3e:94:52:71:06:5b:d9:78:47:95:aa:4c:c8:83:5b:7b: 04:9a:bb:1f:01:ef:e1:68:aa:05:5a:7e:eb:d7:f7:96:df:97: f9:5f:ef:9f:2b:76:63:bd:d8:53:32:e2:56:40:d8:60:e0:09: 09:14:93:4b:16:ca:4e:3d:a2:c9:3c:67:18:e3:67:4c:6d:0e: ca:16:dd:cd:3b:c9:0c:27:a4:b1:b6:83:84:b1:c2:fd:ae:43: be:87:f3:bd:03:a1:a2:6e:72:f9:7b:b6:bd:bd:56:0d:81:a5: 55:0e:bc:ab:dc:22:c8:77:54:d3:e0:6e:27:8c:25:e1:9f:d4: b4:da:c5:7a:d5:4f:6a:cb:86:1c:e9:4f:f6:19:29:fe:41:6e: 39:9b:8f:4d:d3:48:0e:f3:12:75:62:68:6d:f1:40:87:92:bf: a8:cb:07:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUxMjIzMDEyOTI5WhcNMjUxMjMwMDEyOTI5WjAYMRYwFAYD VQQDDA02OTQ5ZjA3YS1mNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjV2XIvIB8tjNemYQGxZ68E4PnAFsMWx/GXdGTw3CzcwSnAGxpSESpAqCmfSk zNY5j05L5hxudYDQidLEkTGv4UalQjFpmHqILAiuUeve5PwIFmfAHWP3W+I2gvHT ITC9OUZQJRGF6ZJ+482h3XWjKy478EMzYDNC+IJX3+SKUg+brcp12qv0IFaF5nWN SHLO5yaVzxByy7Pj4K7fQW0KL862nD9twb0KP+JqBwWyKX//ZWMSXO/fEZSmCwyu E/m5mzEShr9k9h/VDHEnqJUOtsX1CtH5377NhR5LDdeLsnzfPnShS/DGquTRjVWe mDdoLIhUluI1ObJxKbZk2f1u2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvIicTy y3MTQOL2IbwQWFowmniqMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzXjo43JT083/D5esO2C1iUeuChkW/Ei/oE5CkrtiYVIb6pIwsAgpC OWb7ybZwOvSZlyBQHJ8sjbPszn/RO4v/NIQZpijJ9t9CNlbdLTkX7xra6t1P+Tmy GGsSZD6UUnEGW9l4R5WqTMiDW3sEmrsfAe/haKoFWn7r1/eW35f5X++fK3ZjvdhT MuJWQNhg4AkJFJNLFspOPaLJPGcY42dMbQ7KFt3NO8kMJ6SxtoOEscL9rkO+h/O9 A6GibnL5e7a9vVYNgaVVDryr3CLId1TT4G4njCXhn9S02sV61U9qy4Yc6U/2GSn+ QW45m49N00gO8xJ1Ymht8UCHkr+oywdi -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:21 2025 by rpki-client