This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: rkRj2KPdt1EQPQzAUl2AFMMTvGXSJ5EE5yCvymUEp4E= Subject key identifier: FF:7D:BB:C6:E1:C1:03:2C:E4:42:12:1E:F5:BF:77:11:8B:6B:C3:EE Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 020A Signing time: Tue 23 Dec 2025 01:21:10 +0000 Manifest this update: Tue 23 Dec 2025 01:21:10 +0000 Manifest next update: Tue 30 Dec 2025 01:21:10 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: IUjawlGD1OLCu2e3TeFNd8Xu7244/jgc8KQifSnBV3I=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Dec 23 01:21:10 2025 GMT Not After : Dec 30 01:21:10 2025 GMT Subject: CN=6949ee86-8a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:08:0e:ae:ad:bf:9d:bd:ec:cd:cb:0c:69: c5:77:bb:80:ed:0e:e8:16:85:8e:d1:3b:db:10:77: a7:ac:14:24:40:7d:ed:e3:75:65:bb:3e:73:0d:58: 9f:c5:bb:2d:19:0c:9c:d5:c6:55:34:60:de:95:82: 84:6d:20:b2:31:3c:4b:48:85:43:de:c8:e1:fb:33: b3:df:96:b1:2b:8b:8b:af:08:da:e2:60:ee:de:b6: 4d:45:24:2e:d9:b2:a2:95:6a:e2:e4:77:0c:e3:fe: 56:d6:d0:60:44:94:7d:a2:16:c9:42:af:93:f8:1e: 7c:71:bc:35:e2:61:99:3c:4e:8a:75:db:c8:8c:cc: aa:b5:1c:8a:7b:79:60:36:5a:b0:9f:36:d2:95:4a: 91:37:c7:31:08:91:cc:c7:0b:6d:c7:16:0c:78:55: dc:a4:62:7c:bd:bb:38:42:ee:e6:9e:89:55:66:e5: 97:38:b5:50:4c:db:ef:e0:b4:48:21:ce:b6:4d:c0: a7:c9:15:34:18:cb:ba:a9:55:1b:43:58:cb:64:d3: 78:a6:9a:49:78:86:8d:24:db:14:6c:6a:c5:ff:f2: 93:6d:ca:27:b3:2f:c9:46:e5:d8:ac:42:1c:4b:a0: 14:f6:18:14:5a:2b:b3:ed:b3:ea:0b:03:f9:83:a2: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7D:BB:C6:E1:C1:03:2C:E4:42:12:1E:F5:BF:77:11:8B:6B:C3:EE X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:37:db:ac:ed:af:4c:86:7c:fa:6f:ad:57:92:f7:04:32: 82:4b:fb:ad:89:4d:c8:c8:c9:b7:83:bd:ba:a6:c0:62:de:3d: cb:96:bc:b2:60:79:c0:57:e8:c9:8c:94:07:34:b3:63:f1:da: ee:c7:da:ff:0c:9a:42:26:95:2d:c4:b6:f0:55:8b:4a:b0:e8: ce:14:19:ac:fc:5e:38:ba:c5:f7:54:58:f3:bc:b0:23:ec:d8: ba:19:97:dc:aa:d4:80:3e:f9:7a:f8:99:7a:ed:b6:49:6c:c8: ba:e9:c7:16:29:cc:bc:51:37:c1:c8:4a:84:7f:28:73:e7:49: ee:b0:dc:3e:bd:56:6c:1f:25:1e:3c:84:19:4f:91:ad:4e:8e: 81:23:65:ad:7e:34:55:8f:e5:78:ed:51:83:5a:39:24:7c:36: 8b:8d:4c:f6:c3:fb:9f:fd:ea:7e:8d:0f:ee:c4:77:00:44:4b: 9e:bd:ce:61:20:99:2f:e5:25:2a:4c:22:ea:ce:8c:38:9b:34: 57:64:44:6e:5b:94:00:f7:db:28:75:18:2b:00:cd:7a:6f:e6: 33:81:08:36:fb:9d:1a:8e:52:10:7d:71:3a:46:21:d6:98:7f: d6:18:54:9d:f7:0f:4e:a9:34:b6:06:b4:69:36:f5:1f:fd:6f: 36:b0:6a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUxMjIzMDEyMTEwWhcNMjUxMjMwMDEyMTEwWjAYMRYwFAYD VQQDDA02OTQ5ZWU4Ni04YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4q4IDq6tv5297M3LDGnFd7uA7Q7oFoWO0TvbEHenrBQkQH3t43Vluz5zDVif xbstGQyc1cZVNGDelYKEbSCyMTxLSIVD3sjh+zOz35axK4uLrwja4mDu3rZNRSQu 2bKilWri5HcM4/5W1tBgRJR9ohbJQq+T+B58cbw14mGZPE6KddvIjMyqtRyKe3lg NlqwnzbSlUqRN8cxCJHMxwttxxYMeFXcpGJ8vbs4Qu7mnolVZuWXOLVQTNvv4LRI Ic62TcCnyRU0GMu6qVUbQ1jLZNN4pppJeIaNJNsUbGrF//KTbconsy/JRuXYrEIc S6AU9hgUWiuz7bPqCwP5g6JOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP99u8bh wQMs5EISHvW/dxGLa8PuMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwoTfbrO2vTIZ8+m+tV5L3BDKCS/utiU3IyMm3g726psBi3j3Llryy YHnAV+jJjJQHNLNj8drux9r/DJpCJpUtxLbwVYtKsOjOFBms/F44usX3VFjzvLAj 7Ni6GZfcqtSAPvl6+Jl67bZJbMi66ccWKcy8UTfByEqEfyhz50nusNw+vVZsHyUe PIQZT5GtTo6BI2WtfjRVj+V47VGDWjkkfDaLjUz2w/uf/ep+jQ/uxHcAREuevc5h IJkv5SUqTCLqzow4mzRXZERuW5QA99sodRgrAM16b+YzgQg2+50ajlIQfXE6RiHW mH/WGFSd9w9OqTS2BrRpNvUf/W82sGo0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:40 2025 by rpki-client