This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json) Hash identifier: li++SpUxgUuwJuxkInrtWBiFN9GaZO6rV6JBLX6/Vds= Subject key identifier: 99:95:A1:13:A0:A5:E8:30:BE:36:CE:CF:27:05:97:51:F1:83:45:51 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft Manifest number: 0646 Signing time: Wed 31 Dec 2025 22:21:05 +0000 Manifest this update: Wed 31 Dec 2025 22:21:04 +0000 Manifest next update: Wed 07 Jan 2026 22:21:04 +0000 Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: e1I3k65f9IkwHDcpfW0AKkpd0ydxBA+uc5dLAMA/roM=) 2: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: 691+02/w7Hvvvxts+u+wZs/SnQae95oqmqWQ70mluhE=) 3: B902532EFEA211EDB9013076C4F9AE02.roa (hash: drfPb+wsZvR+2/MNwdz1cNWuRVIEZ+Qx8nSL5NiDabc=) 4: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: lY3WVWAOTyIsAjMp/FETDq12SBCAxXSbP620LU0HkGE=) 5: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: hyqKDl6jtyGKyJAIAa4mx+PngO9SccHqsfXS7jNKJMs=) 6: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: 21tBW1VF1vSpAUMu3v9M3rwY90XGE+/GtmmuaU3EsAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 22:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Dec 31 22:21:04 2025 GMT Not After : Jan 7 22:21:04 2026 GMT Subject: CN=6955a1d1-c78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:95:02:69:88:af:32:4f:ea:1a:27:f5:58: 96:86:08:a7:e5:3a:b1:af:80:83:cd:2e:57:ca:bd: 04:de:a4:ec:09:d8:77:8b:ed:6f:02:2b:1a:d0:2b: 09:5e:d0:b1:3c:1b:9f:1d:c4:62:c6:8a:bb:b3:13: 2c:c0:73:2b:dd:4b:03:16:4f:77:ad:e4:20:e6:e5: e0:e2:b9:cf:70:71:7b:3a:16:e9:0c:8a:f5:85:8c: 51:d4:15:be:ea:90:87:9c:41:94:bf:ce:b8:e6:d8: 68:87:ad:03:d3:fc:28:b2:ee:f2:65:06:6d:e5:72: f1:c8:99:41:b5:f2:dc:94:ff:49:fe:a0:ec:d0:85: a6:c2:57:f2:15:d9:23:e2:49:4d:7b:07:12:53:41: 9a:4d:79:da:f1:fa:44:37:e5:67:79:d7:49:7a:e8: 18:ba:09:91:5b:05:f6:12:39:f7:ba:ac:59:49:c0: fd:fb:5a:30:6e:a8:69:2d:f8:2b:6c:21:57:9a:53: 58:69:8c:af:bc:62:4e:27:ba:57:83:af:52:49:9c: 86:72:28:2b:5b:56:ed:0e:ce:74:f5:d3:95:5e:48: b8:d5:df:04:e9:dc:f5:cf:4a:6b:ba:b3:69:1e:18: e2:80:b6:38:25:7c:d1:dc:3f:7f:64:e8:8b:4c:5a: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:A1:13:A0:A5:E8:30:BE:36:CE:CF:27:05:97:51:F1:83:45:51 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:44:e1:7b:25:45:c5:40:e8:f5:8d:29:3a:47:65:c9:0e: ff:e0:94:ba:9f:18:be:32:e2:21:3d:37:01:ea:ae:c3:62:f3: 25:dc:40:10:e2:39:01:16:07:8c:43:1c:37:0e:0b:94:a5:8d: 0e:d5:59:77:f2:d4:f5:d2:5b:28:69:69:27:af:e6:d0:51:3e: b7:6e:ff:1d:54:cc:8b:c2:5a:58:3d:93:15:5d:49:38:ac:49: 0b:35:74:41:ea:3a:89:de:1e:fa:9b:55:fb:2e:b5:de:03:28: 0d:5e:87:5c:88:9f:0a:cd:eb:64:e4:79:52:ce:5b:12:96:d3: 1d:1e:93:1b:0b:57:98:5f:56:d3:ff:dd:14:f3:fd:ff:00:ba: 1f:11:1b:3e:bb:8d:42:5a:d8:e4:18:d5:46:d2:12:60:d2:92: d2:d4:6e:6b:c4:16:bd:cb:6a:aa:ce:dd:70:f5:60:a5:16:ad: ad:40:a3:f3:f6:17:b6:be:04:fa:fb:71:88:fa:aa:bc:6f:7f: 3f:a0:08:6a:a4:72:64:74:c6:60:a8:a6:a5:e1:da:76:fc:1e: a4:0f:6b:61:d1:ba:65:1b:d1:19:ad:e1:58:c0:51:69:a7:f0: 43:05:81:99:cf:3d:6c:9a:44:0c:9f:3b:d6:c1:ae:f3:9d:42: a2:40:2e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUxMjMxMjIyMTA0WhcNMjYwMTA3MjIyMTA0WjAYMRYwFAYD VQQDDA02OTU1YTFkMS1jNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkyVAmmIrzJP6hon9ViWhgin5Tqxr4CDzS5Xyr0E3qTsCdh3i+1vAisa0CsJ XtCxPBufHcRixoq7sxMswHMr3UsDFk93reQg5uXg4rnPcHF7OhbpDIr1hYxR1BW+ 6pCHnEGUv8645thoh60D0/wosu7yZQZt5XLxyJlBtfLclP9J/qDs0IWmwlfyFdkj 4klNewcSU0GaTXna8fpEN+VneddJeugYugmRWwX2Ejn3uqxZScD9+1owbqhpLfgr bCFXmlNYaYyvvGJOJ7pXg69SSZyGcigrW1btDs509dOVXki41d8E6dz1z0prurNp HhjigLY4JXzR3D9/ZOiLTFrlXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmVoROg pegwvjbOzycFl1Hxg0VRMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDNGMy9CMjU0NDgxQUNBMzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXky ejJWdkpyZ29MX3VlWXZrMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABY0TheyVFxUDo9Y0pOkdlyQ7/4JS6nxi+MuIhPTcB6q7DYvMl3EAQ 4jkBFgeMQxw3DguUpY0O1Vl38tT10lsoaWknr+bQUT63bv8dVMyLwlpYPZMVXUk4 rEkLNXRB6jqJ3h76m1X7LrXeAygNXodciJ8Kzetk5HlSzlsSltMdHpMbC1eYX1bT /90U8/3/ALofERs+u41CWtjkGNVG0hJg0pLS1G5rxBa9y2qqzt1w9WClFq2tQKPz 9he2vgT6+3GI+qq8b38/oAhqpHJkdMZgqKal4dp2/B6kD2th0bplG9EZreFYwFFp p/BDBYGZzz1smkQMnzvWwa7znUKiQC4f -----END CERTIFICATE-----Generated at Thu Jan 1 12:30:39 2026 by rpki-client