This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: /n4a66AFOEtKIFj8txvqlGYus30NUT5harxzE3PA+Ag= Subject key identifier: 85:46:C8:30:2A:0C:6B:73:AB:6F:D1:4E:D9:91:90:CA:30:09:8C:7F Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 11CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11A1 Signing time: Mon 22 Dec 2025 16:54:20 +0000 Manifest this update: Mon 22 Dec 2025 16:54:19 +0000 Manifest next update: Mon 29 Dec 2025 16:54:19 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: ipoxKGc06P0kt7A8oDim10c6r/7Ly8JW07XlRQrPqaE=) 2: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: wfm1VTy6LW5xxId5H8xuWlZG10UcCf+IbSwW9NUdgtQ=) 3: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: BfQkKYmX6MeIpfh0HN7jI9hAwDBK1E/bNdrXupiROjk=) 4: FB675E140F0311E997412A4EC4F9AE02.roa (hash: DRyXCT+IZvVI03eU0XrQdHjg9ZW57MmLUtw9YMkQ7hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4555 (0x11cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Dec 22 16:54:19 2025 GMT Not After : Dec 29 16:54:19 2025 GMT Subject: CN=694977bb-0621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:10:7c:dc:40:6e:02:00:52:cc:41:b6:f3: 7a:e2:28:8a:5e:2e:70:2c:a6:02:e5:a3:ed:d7:bb: 31:0e:d2:61:c6:44:ef:74:cf:da:2a:fe:1e:95:d9: 2e:76:f7:e9:43:b0:81:e4:30:57:e9:45:41:af:d5: 63:42:33:4a:f4:67:8e:34:60:74:d0:d1:47:31:a0: 66:c3:72:bf:bb:36:d7:c2:fd:68:29:a6:54:18:69: 99:e9:f5:a1:47:1e:49:35:11:cc:c9:0b:82:c9:a7: 83:3d:c0:c7:e8:6b:e6:ff:ae:14:1f:5c:54:94:46: 58:8f:79:77:79:6e:24:f2:20:45:a3:54:f5:f6:48: 11:83:66:06:8b:08:03:82:da:ea:41:ed:a1:9d:b2: 23:ca:d9:4d:32:d3:66:d8:df:5a:01:48:e1:ff:6b: ac:ad:e5:7f:d7:00:3c:5b:ad:c9:b4:8b:54:ae:16: 8b:3f:68:11:7d:3d:c1:39:33:32:39:d5:e5:f2:e3: 40:c2:b0:82:81:58:fc:c0:46:f6:83:7c:26:b7:ae: 17:84:92:bf:b2:27:10:48:59:47:21:71:24:8f:86: 33:ff:d1:6c:e4:ed:eb:ea:b7:64:13:b7:fb:fe:1e: bb:77:3e:d7:a2:81:97:d6:ba:55:d8:f9:b1:4e:83: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:46:C8:30:2A:0C:6B:73:AB:6F:D1:4E:D9:91:90:CA:30:09:8C:7F X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:1e:8b:4e:98:9c:cc:70:67:91:3f:df:43:3e:24:e4:bd: c9:c3:8b:b8:25:37:6a:a9:42:cd:09:61:35:8f:d4:80:96:21: d3:59:86:bb:cc:dc:58:92:e6:08:a4:d0:19:62:0b:3f:ff:90: a0:70:9e:ed:3f:24:a3:62:c9:bf:87:f1:bf:f4:41:09:8b:cb: 5f:64:18:e9:b9:71:b4:57:41:37:1f:83:ab:ec:c8:f6:70:d8: 5a:ab:ee:1f:d5:f4:80:a4:c2:52:b3:b3:65:ad:9b:ff:ad:22: 25:e4:cd:07:a4:58:7f:e8:58:f5:2f:24:b5:13:eb:02:4e:96: ee:23:42:cc:66:a4:d4:d5:fc:9e:5a:ab:88:fe:24:5b:f9:03: 1f:ad:20:ac:7e:61:fa:37:c6:54:d4:3a:ea:0a:91:53:eb:b9: 93:0b:45:67:d0:d3:32:a1:cb:02:3c:19:b8:51:63:0d:94:9a: d5:a5:c6:9d:fa:ca:9f:27:05:81:02:dd:74:f9:98:da:19:80: dc:3e:a9:64:a7:f1:fd:f0:d2:3f:b9:cd:4f:84:f3:b5:11:18: f8:c6:2c:34:94:8c:3e:e4:de:19:c7:e8:c7:63:5d:0a:83:d0: 10:d3:6c:13:9e:bb:8a:4f:66:2c:1b:81:23:98:fd:43:ed:56: 71:fb:8f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUxMjIyMTY1NDE5WhcNMjUxMjI5MTY1NDE5WjAYMRYwFAYD VQQDDA02OTQ5NzdiYi0wNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmIQfNxAbgIAUsxBtvN64iiKXi5wLKYC5aPt17sxDtJhxkTvdM/aKv4eldku dvfpQ7CB5DBX6UVBr9VjQjNK9GeONGB00NFHMaBmw3K/uzbXwv1oKaZUGGmZ6fWh Rx5JNRHMyQuCyaeDPcDH6Gvm/64UH1xUlEZYj3l3eW4k8iBFo1T19kgRg2YGiwgD gtrqQe2hnbIjytlNMtNm2N9aAUjh/2usreV/1wA8W63JtItUrhaLP2gRfT3BOTMy OdXl8uNAwrCCgVj8wEb2g3wmt64XhJK/sicQSFlHIXEkj4Yz/9Fs5O3r6rdkE7f7 /h67dz7XooGX1rpV2PmxToO7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVGyDAq DGtzq2/RTtmRkMowCYx/MB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Bx6LTpiczHBnkT/fQz4k5L3Jw4u4JTdqqULNCWE1j9SAliHTWYa7 zNxYkuYIpNAZYgs//5CgcJ7tPySjYsm/h/G/9EEJi8tfZBjpuXG0V0E3H4Or7Mj2 cNhaq+4f1fSApMJSs7NlrZv/rSIl5M0HpFh/6Fj1LyS1E+sCTpbuI0LMZqTU1fye WquI/iRb+QMfrSCsfmH6N8ZU1DrqCpFT67mTC0Vn0NMyocsCPBm4UWMNlJrVpcad +sqfJwWBAt10+ZjaGYDcPqlkp/H98NI/uc1PhPO1ERj4xiw0lIw+5N4Zx+jHY10K g9AQ02wTnruKT2YsG4EjmP1D7VZx+4+3 -----END CERTIFICATE-----Generated at Tue Dec 23 19:41:58 2025 by rpki-client