This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: Wot1Z8lqsrCRqFPUm2QT9QaLXw0FtFLGZs/C+kmZCcE= Subject key identifier: 0D:4C:ED:16:15:1A:87:48:B4:A5:7A:E7:15:06:52:3D:5E:AA:F1:61 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0262 Signing time: Tue 23 Dec 2025 00:41:15 +0000 Manifest this update: Tue 23 Dec 2025 00:41:14 +0000 Manifest next update: Tue 30 Dec 2025 00:41:14 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: 8fllXvQZPbUl+vUM1YIK1w9wvQ4TvWHPa0fNL6B30vg=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Dec 23 00:41:14 2025 GMT Not After : Dec 30 00:41:14 2025 GMT Subject: CN=6949e52b-b289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:d4:41:f4:da:74:ea:1a:b4:92:67:86:19: 4d:7c:ed:67:a5:bd:cc:10:1d:47:fd:78:b1:46:ea: 7a:1f:38:04:5b:3e:bf:e3:c6:2a:f0:9f:50:06:73: 51:cf:56:b7:f8:57:2c:f1:54:5b:54:45:ed:0e:33: 7d:ad:7d:99:73:17:6c:15:1e:ad:39:f6:68:e0:4a: c4:14:d2:e0:54:55:9a:01:0a:75:86:d0:d4:ae:3c: 81:0c:fb:a9:96:3d:41:1b:4d:33:7a:7e:29:47:67: ac:4e:08:0f:72:46:f9:01:18:d1:8d:cc:ef:b1:19: 8e:a0:76:da:1b:ee:e0:8d:95:b3:94:a5:66:cf:83: 8f:1c:77:63:23:64:f0:38:ef:38:3a:cc:9a:fa:13: 00:15:e6:8f:ee:c2:a1:c7:88:93:97:cc:12:2f:5a: 35:8c:c7:6e:44:e9:f8:09:5d:47:1c:02:ad:2a:04: 2d:30:77:e0:4a:64:f5:30:1e:af:f9:97:b3:cb:83: f6:f4:21:71:0b:57:2c:37:1d:33:95:c1:6b:ad:b6: 20:99:26:7b:b5:31:fe:24:bb:14:dd:37:7b:c9:09: 4f:b2:e0:a1:d7:9e:40:30:20:a2:68:53:5f:08:26: 29:e3:da:86:9c:dc:2c:ad:c7:64:4f:a1:08:c1:f6: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:ED:16:15:1A:87:48:B4:A5:7A:E7:15:06:52:3D:5E:AA:F1:61 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:12:12:7c:9a:b1:b3:8e:4a:df:85:64:d4:87:35:27:d2:77: 60:18:20:5e:44:8b:f9:9a:39:c9:f8:37:0f:14:d3:e5:7c:10: 8a:54:b8:2f:2d:99:08:03:c0:ef:8c:fb:24:de:aa:41:9d:4a: d7:7d:46:e0:07:e5:5a:d9:03:86:c7:46:1e:71:d2:20:4e:31: bd:40:a1:8d:c5:68:52:3f:b6:fc:c0:58:d5:1f:08:31:c4:1b: 29:f3:1e:60:aa:12:da:ba:2e:49:5e:fd:fb:66:b9:92:99:83: 97:21:86:b6:20:71:12:f8:d0:ab:8d:58:db:3a:4d:77:bb:3f: 3a:84:da:c3:79:c0:7d:59:21:68:6c:5b:39:03:f4:01:9f:47: 7e:33:e3:88:11:08:0a:26:14:34:98:ae:28:c7:eb:1c:69:98: 0c:05:3d:4b:e0:cd:f3:23:69:7d:48:29:d0:d4:f6:b5:f4:db: 78:8d:38:9b:71:33:8b:af:df:fd:88:d5:c8:0a:82:61:dc:cc: ad:51:74:63:65:3f:8c:20:d2:e8:f5:38:2a:a7:24:c3:23:c1: 99:8a:80:19:51:6a:49:81:ab:7f:8e:f2:e2:fb:78:a6:7d:28: 46:64:04:9e:c2:3a:52:73:f8:2f:78:9f:4a:0a:ae:eb:ba:90: a2:2c:09:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUxMjIzMDA0MTE0WhcNMjUxMjMwMDA0MTE0WjAYMRYwFAYD VQQDDA02OTQ5ZTUyYi1iMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhiHUQfTadOoatJJnhhlNfO1npb3MEB1H/XixRup6HzgEWz6/48Yq8J9QBnNR z1a3+Fcs8VRbVEXtDjN9rX2ZcxdsFR6tOfZo4ErEFNLgVFWaAQp1htDUrjyBDPup lj1BG00zen4pR2esTggPckb5ARjRjczvsRmOoHbaG+7gjZWzlKVmz4OPHHdjI2Tw OO84Osya+hMAFeaP7sKhx4iTl8wSL1o1jMduROn4CV1HHAKtKgQtMHfgSmT1MB6v +Zezy4P29CFxC1csNx0zlcFrrbYgmSZ7tTH+JLsU3Td7yQlPsuCh155AMCCiaFNf CCYp49qGnNwsrcdkT6EIwfafewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1M7RYV GodItKV65xUGUj1eqvFhMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrEhJ8mrGzjkrfhWTUhzUn0ndgGCBeRIv5mjnJ+DcPFNPlfBCKVLgv LZkIA8DvjPsk3qpBnUrXfUbgB+Va2QOGx0YecdIgTjG9QKGNxWhSP7b8wFjVHwgx xBsp8x5gqhLaui5JXv37ZrmSmYOXIYa2IHES+NCrjVjbOk13uz86hNrDecB9WSFo bFs5A/QBn0d+M+OIEQgKJhQ0mK4ox+scaZgMBT1L4M3zI2l9SCnQ1Pa19Nt4jTib cTOLr9/9iNXICoJh3MytUXRjZT+MINLo9TgqpyTDI8GZioAZUWpJgat/jvLi+3im fShGZASewjpSc/gveJ9KCq7rupCiLAnB -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client