This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: BAitoTb75ddSsr7X2oa0MaIukGaz42FTp1lzUMblbYU= Subject key identifier: 9D:A7:41:FC:E5:2D:1E:75:F0:B0:A3:BE:84:D4:8D:7F:9F:21:4E:9D Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 061A Signing time: Mon 22 Dec 2025 21:59:22 +0000 Manifest this update: Mon 22 Dec 2025 21:59:22 +0000 Manifest next update: Mon 29 Dec 2025 21:59:22 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: p9YR6Ijd0ORxV1b2+Lbh6Aafoeep4mpUBuedV+EVOP8=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: S5y137jYfy0MIB/O4qGenQWe0yCgY06a7wP6x5FBr7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Dec 22 21:59:22 2025 GMT Not After : Dec 29 21:59:22 2025 GMT Subject: CN=6949bf3a-9a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:7e:cb:ae:93:6e:2e:e0:88:1c:2e:ed:ea: 05:ce:53:6a:3f:12:01:14:75:7a:4d:d2:40:7a:42: c2:01:2f:9e:19:de:16:41:4e:77:2f:c4:04:a8:16: e8:59:aa:04:d0:83:16:09:28:49:d1:a1:e7:5e:6c: f4:12:8b:d7:3d:44:93:43:5f:03:bc:95:48:d4:30: b6:2e:b0:46:5f:81:58:71:d4:bd:38:d8:d9:04:b4: b8:00:64:40:cb:7a:72:ed:f2:6b:4b:b5:80:e7:5d: c5:29:bc:08:a7:0d:89:b4:50:f5:c8:6d:8e:05:d5: 01:5e:28:d9:a7:f4:ab:ff:56:ac:3e:87:57:18:ea: 6e:3d:41:01:43:f5:5d:d5:97:57:50:da:e2:8b:5b: 24:8c:21:20:9a:79:e2:36:9f:0e:11:dc:88:a6:18: 38:cb:2a:e5:5c:82:1b:65:35:b9:a5:56:37:6e:16: b0:30:42:fc:fa:9d:7a:75:15:a7:6f:5f:34:90:4d: ce:d4:db:81:55:d7:fb:76:50:52:35:9d:f1:df:7a: c6:93:4f:05:4d:56:1e:97:7d:fc:8d:63:79:8c:7f: 78:17:ca:3a:38:0c:50:44:9f:40:6c:fe:ca:c0:c0: 3b:c9:c0:bc:21:29:e0:ab:17:28:1d:c1:57:b5:f6: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A7:41:FC:E5:2D:1E:75:F0:B0:A3:BE:84:D4:8D:7F:9F:21:4E:9D X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:5a:15:ae:1b:ea:7f:f0:0f:ea:1a:b7:d8:a3:13:9d:78: 25:a5:cb:a1:01:09:d9:42:ff:c3:d9:c2:e0:c6:a0:21:06:e3: d0:f4:74:e8:34:89:48:ff:52:e9:d8:43:36:50:a1:12:f8:80: 28:55:5a:ec:fc:c3:a4:0c:06:e5:43:ef:66:65:92:68:17:21: 1b:a3:4b:4b:53:b8:f3:7c:55:3d:8e:0f:fd:d7:d1:96:e5:a9: 54:e8:9e:dd:c9:8f:49:0d:ac:39:a4:1b:33:b9:d4:38:22:8d: 26:3a:d4:cf:e4:a0:e2:74:d7:64:8e:a7:31:23:25:b8:24:62: c0:42:81:45:ad:af:6b:26:8f:5d:dc:9d:a3:b7:f7:90:30:31: f2:77:40:c6:db:04:fa:3c:04:c1:fc:19:09:6e:cf:5c:44:f5: eb:44:21:2f:5b:bc:4f:fb:07:14:ee:fc:1e:ea:7a:42:33:27: 1b:56:be:87:e6:f1:39:fc:be:7c:35:36:d7:1a:ab:5b:f0:ac: 62:38:41:4c:eb:d3:cf:7c:51:c6:22:16:46:7b:38:ed:43:ec: de:ef:22:73:cb:fc:99:c9:7c:d3:e4:c9:ff:41:47:47:c5:84: 4e:7b:4d:42:0f:59:31:e5:27:87:96:10:fd:3e:5f:82:51:52: 07:91:89:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUxMjIyMjE1OTIyWhcNMjUxMjI5MjE1OTIyWjAYMRYwFAYD VQQDDA02OTQ5YmYzYS05YTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV9+y66Tbi7giBwu7eoFzlNqPxIBFHV6TdJAekLCAS+eGd4WQU53L8QEqBbo WaoE0IMWCShJ0aHnXmz0EovXPUSTQ18DvJVI1DC2LrBGX4FYcdS9ONjZBLS4AGRA y3py7fJrS7WA513FKbwIpw2JtFD1yG2OBdUBXijZp/Sr/1asPodXGOpuPUEBQ/Vd 1ZdXUNrii1skjCEgmnniNp8OEdyIphg4yyrlXIIbZTW5pVY3bhawMEL8+p16dRWn b180kE3O1NuBVdf7dlBSNZ3x33rGk08FTVYel338jWN5jH94F8o6OAxQRJ9AbP7K wMA7ycC8ISngqxcoHcFXtfaewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2nQfzl LR518LCjvoTUjX+fIU6dMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/FoVrhvqf/AP6hq32KMTnXglpcuhAQnZQv/D2cLgxqAhBuPQ9HTo NIlI/1Lp2EM2UKES+IAoVVrs/MOkDAblQ+9mZZJoFyEbo0tLU7jzfFU9jg/919GW 5alU6J7dyY9JDaw5pBszudQ4Io0mOtTP5KDidNdkjqcxIyW4JGLAQoFFra9rJo9d 3J2jt/eQMDHyd0DG2wT6PATB/BkJbs9cRPXrRCEvW7xP+wcU7vwe6npCMycbVr6H 5vE5/L58NTbXGqtb8KxiOEFM69PPfFHGIhZGezjtQ+ze7yJzy/yZyXzT5Mn/QUdH xYROe01CD1kx5SeHlhD9Pl+CUVIHkYlj -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:29 2025 by rpki-client