This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: GE4j4ukEUZiDmZZazGAma132CaoxkGWm0fkBbMd/paM= Subject key identifier: CA:73:62:B5:19:60:70:C4:34:5C:45:2A:51:27:D1:C2:6E:C4:B9:0F Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 0205 Signing time: Tue 23 Dec 2025 01:23:57 +0000 Manifest this update: Tue 23 Dec 2025 01:23:56 +0000 Manifest next update: Tue 30 Dec 2025 01:23:56 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: eAdvIKPC4pwZXnA/tq87AwIWOk9GDdLpANOX+6Y+3Ck=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: c6BodR5dfNjZNrckNbO0cz92rFo/n6093hWBqJQxy5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Dec 23 01:23:56 2025 GMT Not After : Dec 30 01:23:56 2025 GMT Subject: CN=6949ef2c-7354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:38:ff:59:be:43:4d:e3:88:3b:ff:78:f5: 5f:59:ca:b9:d8:6f:08:7c:58:b4:6b:47:27:c0:55: b7:7d:d8:2d:13:9c:71:f6:59:1d:69:0e:e5:5b:c0: 54:34:51:56:15:83:c6:b3:38:97:04:c6:cb:4b:97: bf:3d:4a:eb:1f:4a:d0:71:76:82:da:e5:e1:38:4c: 6a:a7:e0:15:bc:50:95:44:ef:35:b2:e3:90:f4:7d: 4d:02:44:73:ef:90:2e:67:cb:a0:34:79:d8:15:f1: 47:0a:d4:3d:9d:e7:20:ec:cc:1e:7d:97:3d:af:1e: 9f:1f:59:73:86:de:de:50:e9:ec:0a:5c:f7:d7:03: 13:f8:96:ab:62:0a:aa:17:1e:09:52:27:01:76:a5: cc:50:32:36:72:72:11:e7:b4:b7:93:e7:90:80:da: c7:f3:f2:a3:96:84:82:3c:5a:0b:ee:f8:4f:12:18: 61:68:f4:c4:f8:ab:8a:45:75:cb:ae:72:36:02:b5: f9:9f:05:43:c4:7e:0d:6e:50:5e:83:0d:2e:07:f0: 9f:53:eb:fd:65:9b:b2:cd:cb:2f:71:0d:fc:51:33: 9c:91:08:b9:65:3c:e5:50:e6:49:a8:7c:e7:de:b1: c2:a9:b4:26:da:2f:50:36:12:13:52:b7:97:a9:56: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:62:B5:19:60:70:C4:34:5C:45:2A:51:27:D1:C2:6E:C4:B9:0F X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:8f:71:61:a2:11:78:83:4c:36:4e:dd:8c:9c:14:7c:5b: 98:06:4e:fc:4d:c6:2c:75:37:6e:20:c1:69:b1:a9:04:e6:4e: 73:de:c9:68:2e:03:bb:aa:fb:26:1f:7e:76:a7:12:4d:74:15: 91:56:72:6d:f0:3d:0e:2b:fe:64:5d:07:61:13:cc:54:d8:7f: 39:f5:fb:66:49:ca:28:3d:12:2c:1d:9b:94:c6:73:de:2d:32: 5a:4a:32:5d:0c:79:4e:15:ec:53:7a:4e:44:dc:9f:21:8a:20: e3:9b:d6:6c:a7:6d:8c:08:22:4f:7a:f0:d9:eb:b3:66:db:75: 3d:ca:9d:b5:0d:10:3b:42:ce:f2:4d:25:96:18:8a:98:d9:37: 05:7c:92:b0:bf:89:03:c6:da:a5:5c:4d:30:92:52:68:af:18: 4b:c9:fc:50:1e:24:7d:09:6a:e2:14:18:6f:8e:89:14:c9:75: 52:e8:8b:47:76:72:76:00:63:06:78:ca:ac:11:ca:c2:3c:e8: fb:7e:d9:ef:47:d3:71:71:81:2d:7d:5f:9f:24:29:8d:cc:f7: e0:b9:59:38:36:33:b8:b0:23:c9:7b:a5:4e:51:51:82:4b:6b: 9d:db:7f:ce:ba:fa:36:de:e4:9f:05:fe:fd:d6:3b:d1:6e:02: 01:6c:e1:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUxMjIzMDEyMzU2WhcNMjUxMjMwMDEyMzU2WjAYMRYwFAYD VQQDDA02OTQ5ZWYyYy03MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Os4/1m+Q03jiDv/ePVfWcq52G8IfFi0a0cnwFW3fdgtE5xx9lkdaQ7lW8BU NFFWFYPGsziXBMbLS5e/PUrrH0rQcXaC2uXhOExqp+AVvFCVRO81suOQ9H1NAkRz 75AuZ8ugNHnYFfFHCtQ9necg7MwefZc9rx6fH1lzht7eUOnsClz31wMT+JarYgqq Fx4JUicBdqXMUDI2cnIR57S3k+eQgNrH8/KjloSCPFoL7vhPEhhhaPTE+KuKRXXL rnI2ArX5nwVDxH4NblBegw0uB/CfU+v9ZZuyzcsvcQ38UTOckQi5ZTzlUOZJqHzn 3rHCqbQm2i9QNhITUreXqVbcewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpzYrUZ YHDENFxFKlEn0cJuxLkPMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2049xYaIReINMNk7djJwUfFuYBk78TcYsdTduIMFpsakE5k5z3slo LgO7qvsmH352pxJNdBWRVnJt8D0OK/5kXQdhE8xU2H859ftmScooPRIsHZuUxnPe LTJaSjJdDHlOFexTek5E3J8hiiDjm9Zsp22MCCJPevDZ67Nm23U9yp21DRA7Qs7y TSWWGIqY2TcFfJKwv4kDxtqlXE0wklJorxhLyfxQHiR9CWriFBhvjokUyXVS6ItH dnJ2AGMGeMqsEcrCPOj7ftnvR9NxcYEtfV+fJCmNzPfguVk4NjO4sCPJe6VOUVGC S2ud23/Ouvo23uSfBf791jvRbgIBbOFH -----END CERTIFICATE-----Generated at Wed Dec 24 04:21:58 2025 by rpki-client