This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: payjherNCZcnR8XR43hgYeN971bSsMWHN2qtJu592ro= Subject key identifier: 43:76:FF:39:C6:C5:F9:83:B0:38:D2:14:7B:54:49:B6:50:5D:FD:8D Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 08CB Signing time: Mon 22 Dec 2025 19:48:39 +0000 Manifest this update: Mon 22 Dec 2025 19:48:38 +0000 Manifest next update: Mon 29 Dec 2025 19:48:38 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: HYaQw4YsOHNOCV7dlf0TjOndrSgFN9HNz9lU6Zu6NIw=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Dec 22 19:48:38 2025 GMT Not After : Dec 29 19:48:38 2025 GMT Subject: CN=6949a097-8cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:8a:70:5b:ec:95:b5:d2:13:6b:88:9b:6b: 3c:2e:1a:e7:86:07:88:52:31:b4:e7:ab:2d:e3:bb: 2c:ab:d4:3c:1d:33:4c:b9:f5:10:8b:97:52:ea:65: 39:29:ba:60:16:82:f6:3d:bf:d9:65:f7:cf:68:7f: 17:7b:c1:8e:bf:21:16:8a:04:13:b1:e6:b2:65:43: ce:a6:ed:57:f2:34:f1:65:ac:09:b9:cc:3f:df:d6: 2c:0a:3e:06:87:60:bd:57:55:74:e4:61:e7:67:a3: b9:86:58:aa:98:4a:ee:80:a2:0c:39:7f:36:db:e4: bd:fd:a6:9b:bc:f0:43:75:6c:66:6f:a8:46:cf:6f: eb:37:61:68:20:a2:5d:95:b6:e3:8c:f4:ed:72:a7: c7:16:49:68:fa:00:a9:e8:cf:8b:35:e7:94:fd:4f: e7:2d:3a:cf:eb:c8:00:3c:f2:67:70:bb:b8:46:33: 12:0f:16:b8:16:70:4d:fa:1f:e9:ca:71:90:3d:0a: de:48:9b:bf:2f:f6:ea:01:43:1c:06:4a:32:c9:20: 29:ab:74:3f:15:7a:95:7a:3a:3b:ee:bb:1f:04:ed: b7:f6:12:e1:63:73:80:15:7b:31:b6:e6:c5:0b:64: c6:08:86:6d:79:86:f6:e8:ad:ae:f6:a6:6b:fa:c1: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:FF:39:C6:C5:F9:83:B0:38:D2:14:7B:54:49:B6:50:5D:FD:8D X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:12:d7:9e:cb:0a:e6:74:64:0f:88:bc:52:74:56:04:b1:32: 18:04:e5:6f:55:04:bd:47:f7:e6:c1:fc:d9:eb:0f:42:32:6e: 86:ad:17:25:a3:c0:07:5b:fa:45:73:c2:b4:43:d8:e8:a1:c6: 25:7b:00:f1:33:81:9d:58:cd:96:96:d4:ed:ec:5e:d0:f7:1a: b8:9c:09:bc:da:62:02:67:a9:3e:6c:fa:dd:70:87:63:97:a6: 7f:d0:90:a1:96:22:e0:2d:b7:16:15:cd:3d:c0:2a:62:04:29: 06:96:e6:6c:7a:1d:bd:b2:1c:89:3a:af:da:19:cc:6d:83:c5: a3:83:da:30:6a:2f:01:73:22:53:25:65:ee:43:47:f5:6d:00: c2:32:24:f5:31:1d:62:be:b5:bb:fa:70:63:0b:84:81:3b:cf: 76:92:a9:3d:3a:11:e1:2e:0f:dd:1c:85:45:e4:48:c0:05:15: 96:79:a0:c4:15:eb:cc:dc:9a:f7:ad:d7:c5:a5:24:e2:ff:ca: 6a:da:83:5b:bf:47:da:a5:06:5d:46:37:ba:27:cc:69:8a:23: 20:d3:f6:7e:c5:ee:13:7d:04:65:4d:9a:b2:37:15:22:1a:b4: 56:70:9c:52:de:f5:85:0c:8c:fd:7b:22:03:55:6d:9d:d6:7d: d1:2f:22:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUxMjIyMTk0ODM4WhcNMjUxMjI5MTk0ODM4WjAYMRYwFAYD VQQDDA02OTQ5YTA5Ny04Y2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKeKcFvslbXSE2uIm2s8LhrnhgeIUjG056st47ssq9Q8HTNMufUQi5dS6mU5 KbpgFoL2Pb/ZZffPaH8Xe8GOvyEWigQTseayZUPOpu1X8jTxZawJucw/39YsCj4G h2C9V1V05GHnZ6O5hliqmErugKIMOX822+S9/aabvPBDdWxmb6hGz2/rN2FoIKJd lbbjjPTtcqfHFklo+gCp6M+LNeeU/U/nLTrP68gAPPJncLu4RjMSDxa4FnBN+h/p ynGQPQreSJu/L/bqAUMcBkoyySApq3Q/FXqVejo77rsfBO239hLhY3OAFXsxtubF C2TGCIZteYb26K2u9qZr+sFEEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN2/znG xfmDsDjSFHtUSbZQXf2NMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvEteeywrmdGQPiLxSdFYEsTIYBOVvVQS9R/fmwfzZ6w9CMm6GrRcl o8AHW/pFc8K0Q9joocYlewDxM4GdWM2WltTt7F7Q9xq4nAm82mICZ6k+bPrdcIdj l6Z/0JChliLgLbcWFc09wCpiBCkGluZseh29shyJOq/aGcxtg8Wjg9owai8BcyJT JWXuQ0f1bQDCMiT1MR1ivrW7+nBjC4SBO892kqk9OhHhLg/dHIVF5EjABRWWeaDE FevM3Jr3rdfFpSTi/8pq2oNbv0fapQZdRje6J8xpiiMg0/Z+xe4TfQRlTZqyNxUi GrRWcJxS3vWFDIz9eyIDVW2d1n3RLyLu -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:57 2025 by rpki-client