This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: 7YLd5p0ibSzkZ3yzKU/CAcGytGUqE4meFF8L+/WRt0g= Subject key identifier: FE:F7:5E:D2:13:4E:80:62:BB:67:55:39:76:57:72:F2:38:17:26:78 Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1CCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1CBE Signing time: Mon 22 Dec 2025 15:57:10 +0000 Manifest this update: Mon 22 Dec 2025 15:57:09 +0000 Manifest next update: Mon 29 Dec 2025 15:57:09 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: fDA+43tWKa4cU+XBCdcFnzae1wqHR8Btss4eBDSRW5Q=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7372 (0x1ccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Dec 22 15:57:09 2025 GMT Not After : Dec 29 15:57:09 2025 GMT Subject: CN=69496a56-cd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:ef:69:f6:9b:ef:58:ba:e9:8b:52:54:40: b6:42:b4:ed:c6:85:08:66:3f:7f:cc:5e:98:d6:65: 24:3b:92:6d:95:17:bc:94:bb:ee:95:c5:27:67:b6: ee:2e:08:d9:59:29:70:ba:f1:7c:e4:9f:f3:ec:af: f5:ae:41:8e:43:17:cd:b7:2a:f7:06:4c:1a:8f:69: ee:4a:b4:b0:2f:17:ce:c2:73:6c:cd:11:c2:15:eb: 7e:cb:a5:b2:92:d3:3c:8d:02:16:28:f7:7f:86:a5: ca:62:09:9d:e3:6f:58:fd:89:1d:c4:e4:c1:ae:eb: 66:21:48:d1:c0:d1:92:74:42:5b:b3:43:42:60:7b: dd:b8:dd:de:cc:3b:b2:79:c4:59:45:0d:b2:96:3e: c4:e6:ab:b2:38:65:44:41:7c:e1:da:ba:d5:59:c7: 8d:5d:a6:80:de:3e:de:da:74:98:d2:cd:a9:b1:34: ce:b8:70:8a:9a:ac:67:a4:e4:14:a8:fe:d5:de:2a: 09:04:03:00:8c:08:f4:10:9d:46:28:b2:f4:17:65: f6:4d:3e:d0:7f:45:4d:cd:97:8a:c7:bb:48:ae:15: 06:1b:a9:a5:c6:09:50:e9:7f:78:21:fe:19:f3:90: fc:31:42:26:dd:3c:5c:7e:d9:94:ac:0b:c8:e7:95: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F7:5E:D2:13:4E:80:62:BB:67:55:39:76:57:72:F2:38:17:26:78 X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:12:25:8c:32:d9:29:00:73:34:30:68:b9:a3:3c:ae:af:19: bd:89:61:42:2e:59:2d:90:6e:3d:f7:bd:7a:4a:1a:83:a3:12: a2:be:c5:b4:0f:05:5e:a7:8e:49:5e:8d:70:17:2b:21:df:44: 47:1d:80:f6:a1:09:48:f6:90:a4:54:be:c1:24:7c:e9:a9:85: 55:07:48:85:fd:a3:4b:a8:6f:5d:7e:6b:94:5e:69:e7:c2:bc: 49:6c:98:e5:f2:a9:28:6a:dc:06:3e:e8:d2:92:b5:d5:4c:d1: e8:46:73:3e:8b:95:fe:bf:d8:93:90:cc:ed:94:ff:2a:7d:e1: 1c:d0:2b:f5:2c:db:9e:01:69:a2:55:e0:fb:04:87:0e:95:2d: ac:5f:ee:bf:ee:49:42:ab:c1:d7:dd:93:20:51:65:24:41:bf: 52:2b:9f:18:0f:99:3c:b6:a9:ac:d5:e3:67:e3:d8:bb:a1:aa: 87:c9:ba:f1:47:2a:d3:ec:0a:27:a5:55:c0:4d:a2:2e:26:3e: a1:b4:cb:a3:c0:f1:25:32:31:bc:1c:3f:70:e3:6c:17:74:b6: d0:e2:de:ba:f9:a4:6e:05:0b:7c:52:5e:57:ed:9e:bb:4b:4c: e7:01:cb:fd:09:bf:c4:91:70:dd:69:07:f0:8f:57:88:8e:62: 66:0a:94:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUxMjIyMTU1NzA5WhcNMjUxMjI5MTU1NzA5WjAYMRYwFAYD VQQDDA02OTQ5NmE1Ni1jZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzjvafab71i66YtSVEC2QrTtxoUIZj9/zF6Y1mUkO5JtlRe8lLvulcUnZ7bu LgjZWSlwuvF85J/z7K/1rkGOQxfNtyr3Bkwaj2nuSrSwLxfOwnNszRHCFet+y6Wy ktM8jQIWKPd/hqXKYgmd429Y/YkdxOTBrutmIUjRwNGSdEJbs0NCYHvduN3ezDuy ecRZRQ2ylj7E5quyOGVEQXzh2rrVWceNXaaA3j7e2nSY0s2psTTOuHCKmqxnpOQU qP7V3ioJBAMAjAj0EJ1GKLL0F2X2TT7Qf0VNzZeKx7tIrhUGG6mlxglQ6X94If4Z 85D8MUIm3TxcftmUrAvI55VAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP73XtIT ToBiu2dVOXZXcvI4FyZ4MB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5EiWMMtkpAHM0MGi5ozyurxm9iWFCLlktkG499716ShqDoxKivsW0 DwVep45JXo1wFysh30RHHYD2oQlI9pCkVL7BJHzpqYVVB0iF/aNLqG9dfmuUXmnn wrxJbJjl8qkoatwGPujSkrXVTNHoRnM+i5X+v9iTkMztlP8qfeEc0Cv1LNueAWmi VeD7BIcOlS2sX+6/7klCq8HX3ZMgUWUkQb9SK58YD5k8tqms1eNn49i7oaqHybrx RyrT7AonpVXATaIuJj6htMujwPElMjG8HD9w42wXdLbQ4t66+aRuBQt8Ul5X7Z67 S0znAcv9Cb/EkXDdaQfwj1eIjmJmCpSl -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:38 2025 by rpki-client