This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: 0mr4D5GSYxbcuhgIV2rPYHlwTvS7s7QslHCzsaKxq/I= Subject key identifier: 4F:96:2C:9C:51:8E:E1:F8:79:13:E8:DE:60:EE:38:66:86:D7:BD:C5 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0F9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0F80 Signing time: Sat 20 Dec 2025 17:16:37 +0000 Manifest this update: Sat 20 Dec 2025 17:16:37 +0000 Manifest next update: Sat 27 Dec 2025 17:16:37 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: 4PLbgY/hZzHs0qYwDWQKl7mTSDoSKInm37aeSqVxjtg=) 2: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: xbh5NpVKALglVtZNCUBnPO9evcznNHzqKAZUvaztOkY=) 3: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: 2FUCg0y6j+fzZjDHWeWQ+0mvZPhX1zx72r0IB9sChxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3996 (0xf9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Dec 20 17:16:37 2025 GMT Not After : Dec 27 17:16:37 2025 GMT Subject: CN=6946d9f5-85d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:d6:6a:1d:01:bc:d4:4e:25:ca:71:d9:a1: 0f:cf:f1:da:4f:ca:24:bd:55:a6:46:fa:6b:f3:30: e7:a8:b0:72:84:54:fc:f2:fb:ec:f6:0c:8e:fa:14: c6:05:e3:aa:e0:6e:96:9a:1d:58:56:23:a7:4b:34: e4:de:42:7a:48:f7:f1:c6:de:34:0e:43:2a:ba:9c: c6:1a:93:e0:8e:35:20:1d:a1:3c:35:8a:2f:8c:14: 54:97:22:be:04:50:5f:9d:82:a5:4b:31:d6:2b:88: 1d:97:72:2a:03:d4:5c:de:86:53:d4:25:70:c4:c9: 61:96:f1:65:c5:b3:61:79:d7:9d:dc:31:44:ec:c9: 0b:d1:61:48:48:d7:4f:28:86:fe:60:73:fb:65:97: fd:b9:7f:db:a1:d4:9e:95:0f:a0:e0:1a:46:d4:39: 23:76:32:7f:ac:e7:5b:34:a1:e1:eb:5d:71:dd:8a: ed:90:82:8f:f0:26:db:da:58:66:84:00:fa:03:af: a2:21:d4:c3:0b:40:a6:0e:17:51:5e:e9:40:49:70: 99:18:6b:75:6d:24:a0:99:68:0a:28:3f:97:d9:9c: 81:b5:a9:d8:5f:fd:82:1c:b4:2b:ab:fc:3c:17:02: bd:39:53:b9:c2:2b:30:91:60:c3:c0:3e:40:3d:6b: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:96:2C:9C:51:8E:E1:F8:79:13:E8:DE:60:EE:38:66:86:D7:BD:C5 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:18:b1:93:dd:05:b2:d2:da:cc:92:54:8c:a6:99:84:fd:3e: bf:f8:45:7c:34:f5:df:26:18:37:59:e4:5d:55:56:b5:55:ba: 01:d6:e3:cb:9a:65:eb:0f:94:cf:8c:88:7f:cf:69:2e:02:56: 90:e6:7c:f2:2f:ab:1a:00:14:f1:d0:f1:eb:8a:47:65:f0:e9: b2:d4:2b:23:4d:26:cd:3b:01:6b:fd:6f:81:ca:41:7b:e0:63: 9b:75:bb:3d:fd:32:f9:b3:e5:e9:64:2e:a0:70:83:78:15:2f: 14:58:51:99:e0:6c:c2:4b:2e:98:7e:c3:e5:3b:de:56:de:fd: b6:63:6d:fe:7e:f0:c7:6b:49:dd:43:7e:36:ff:ae:f3:f0:f4: 50:d6:33:8d:6b:37:c8:39:bc:8e:e5:fd:51:70:60:5a:69:68: 79:4a:45:8e:da:73:27:79:60:3d:3e:eb:74:ba:ec:41:31:30: 42:30:9e:16:61:65:dd:af:39:c5:6b:10:8d:52:5d:59:99:57: b8:4f:1b:18:e2:19:e4:e3:9f:2c:53:7e:2e:45:b6:1c:b2:8f: 83:a8:1a:2e:01:95:91:02:2d:91:25:7c:1e:92:94:f5:93:9f: da:c7:de:44:02:2b:6e:a3:87:05:41:01:ec:d7:cb:5a:d3:fb: 6a:38:17:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUxMjIwMTcxNjM3WhcNMjUxMjI3MTcxNjM3WjAYMRYwFAYD VQQDDA02OTQ2ZDlmNS04NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBzWah0BvNROJcpx2aEPz/HaT8okvVWmRvpr8zDnqLByhFT88vvs9gyO+hTG BeOq4G6Wmh1YViOnSzTk3kJ6SPfxxt40DkMqupzGGpPgjjUgHaE8NYovjBRUlyK+ BFBfnYKlSzHWK4gdl3IqA9Rc3oZT1CVwxMlhlvFlxbNheded3DFE7MkL0WFISNdP KIb+YHP7ZZf9uX/bodSelQ+g4BpG1DkjdjJ/rOdbNKHh611x3YrtkIKP8Cbb2lhm hAD6A6+iIdTDC0CmDhdRXulASXCZGGt1bSSgmWgKKD+X2ZyBtanYX/2CHLQrq/w8 FwK9OVO5wiswkWDDwD5APWsdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+WLJxR juH4eRPo3mDuOGaG173FMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGLGT3QWy0trMklSMppmE/T6/+EV8NPXfJhg3WeRdVVa1VboB1uPL mmXrD5TPjIh/z2kuAlaQ5nzyL6saABTx0PHrikdl8Omy1CsjTSbNOwFr/W+BykF7 4GObdbs9/TL5s+XpZC6gcIN4FS8UWFGZ4GzCSy6YfsPlO95W3v22Y23+fvDHa0nd Q342/67z8PRQ1jONazfIObyO5f1RcGBaaWh5SkWO2nMneWA9Put0uuxBMTBCMJ4W YWXdrznFaxCNUl1ZmVe4TxsY4hnk458sU34uRbYcso+DqBouAZWRAi2RJXwekpT1 k5/ax95EAituo4cFQQHs18ta0/tqOBeX -----END CERTIFICATE-----Generated at Mon Dec 22 07:58:47 2025 by rpki-client