This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: jibVj45LGVCYd4YnZmlBHprzQOQaW+RVr1pWDV+mAVs= Subject key identifier: 2C:50:B6:DC:AD:74:FE:5D:D4:45:93:12:B4:0E:E7:FD:7F:22:AD:6D Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0682 Signing time: Thu 18 Dec 2025 21:54:39 +0000 Manifest this update: Thu 18 Dec 2025 21:54:38 +0000 Manifest next update: Thu 25 Dec 2025 21:54:38 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: 0odf3JQT0ZwOj8TAyVvOfoAfl0tv9ZVZ9PPRvfgVpnQ=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: XMGvyfsQwK+pnHEVDwFM8GXYoyCJLTHsKywLmoRsvnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Dec 18 21:54:38 2025 GMT Not After : Dec 25 21:54:38 2025 GMT Subject: CN=6944781f-7e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b6:2e:84:d5:25:5e:57:cb:d2:a1:82:af:be: b1:ab:e4:d1:2c:7f:02:b3:0d:30:3f:94:a2:be:b7: 29:29:06:d4:19:ab:9f:62:d7:d4:6f:e3:3d:4c:b3: 0f:c3:2b:4b:22:9d:7d:96:64:aa:62:5d:ba:d4:61: d1:6e:6f:ab:8e:c7:0b:43:2d:01:c3:a6:5c:9b:98: b6:18:6c:04:76:ef:e2:f8:8b:00:88:2a:3b:e8:eb: 5c:d2:75:2b:3c:c9:cb:ae:18:bc:11:d6:4e:19:ad: 71:13:c7:c0:78:c6:d2:c0:7b:ae:49:3b:65:58:72: 40:3d:73:26:ce:17:b6:f5:d9:68:a8:94:7d:f9:85: e6:3a:16:54:da:ae:e7:03:d6:d0:dd:56:85:f0:70: 55:87:07:07:13:97:27:68:88:da:5d:54:b0:1b:31: 9f:70:5e:11:cb:2f:f5:13:2a:ca:e6:a1:e2:eb:55: 35:1f:59:97:10:0a:98:06:44:1c:e2:9c:10:74:9b: 89:8b:66:7c:cf:85:ee:40:f9:02:8b:7b:f2:7c:fe: dd:5b:05:62:c5:d4:10:dd:25:df:56:85:ad:aa:5b: 6a:ba:d3:21:b1:c6:15:01:f6:5d:26:74:d3:cd:c1: 01:19:05:cb:0a:a0:2b:97:51:d9:06:f1:b7:3d:b1: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:50:B6:DC:AD:74:FE:5D:D4:45:93:12:B4:0E:E7:FD:7F:22:AD:6D X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:aa:65:bd:2c:87:e5:02:90:dc:57:31:16:d0:fd:34:ad:b8: 02:ff:12:1d:b5:a3:c8:61:1f:74:98:c7:a2:a7:fe:81:b0:f2: a7:c0:23:6a:0b:88:82:2c:5d:ad:59:e8:c6:07:ff:ec:ea:cb: 60:75:5f:53:36:39:08:17:b8:98:c4:68:17:2e:aa:e3:bd:51: 49:27:eb:8c:b5:bb:71:d9:52:d5:fb:34:8c:cb:de:ca:18:52: 40:d6:b8:84:2a:62:ee:86:34:53:07:c8:c6:63:03:ef:00:e7: 0f:65:d8:46:72:fe:60:43:90:a2:ac:e9:6c:8c:75:56:ef:20: dd:31:65:41:bb:83:32:37:1c:9d:88:2d:c9:b9:1b:aa:d8:fa: 2e:e5:bc:91:ae:e1:f4:fb:8b:e6:e7:1c:95:2e:fe:99:c8:ee: 77:fa:ec:1d:eb:c8:96:3c:5d:f0:7f:52:cc:3e:14:6a:82:34: ce:44:c2:e7:a8:65:93:61:ea:fd:50:c3:fd:8f:76:d5:26:1d: c0:a3:40:1b:73:84:3e:0a:5a:00:84:b7:ce:f1:b1:7e:d1:5c: 6a:d9:bb:39:cc:c6:9c:cb:d6:03:6f:b1:c4:fe:f4:1a:eb:15: 31:47:eb:9c:92:d7:45:c1:f4:5e:23:3b:b3:f1:e4:b6:3a:ae: f8:2e:3d:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUxMjE4MjE1NDM4WhcNMjUxMjI1MjE1NDM4WjAYMRYwFAYD VQQDDA02OTQ0NzgxZi03ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bYuhNUlXlfL0qGCr76xq+TRLH8Csw0wP5SivrcpKQbUGaufYtfUb+M9TLMP wytLIp19lmSqYl261GHRbm+rjscLQy0Bw6Zcm5i2GGwEdu/i+IsAiCo76Otc0nUr PMnLrhi8EdZOGa1xE8fAeMbSwHuuSTtlWHJAPXMmzhe29dloqJR9+YXmOhZU2q7n A9bQ3VaF8HBVhwcHE5cnaIjaXVSwGzGfcF4Ryy/1EyrK5qHi61U1H1mXEAqYBkQc 4pwQdJuJi2Z8z4XuQPkCi3vyfP7dWwVixdQQ3SXfVoWtqltqutMhscYVAfZdJnTT zcEBGQXLCqArl1HZBvG3PbE5oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxQttyt dP5d1EWTErQO5/1/Iq1tMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuqmW9LIflApDcVzEW0P00rbgC/xIdtaPIYR90mMeip/6BsPKnwCNq C4iCLF2tWejGB//s6stgdV9TNjkIF7iYxGgXLqrjvVFJJ+uMtbtx2VLV+zSMy97K GFJA1riEKmLuhjRTB8jGYwPvAOcPZdhGcv5gQ5CirOlsjHVW7yDdMWVBu4MyNxyd iC3JuRuq2Pou5byRruH0+4vm5xyVLv6ZyO53+uwd68iWPF3wf1LMPhRqgjTORMLn qGWTYer9UMP9j3bVJh3Ao0Abc4Q+CloAhLfO8bF+0Vxq2bs5zMacy9YDb7HE/vQa 6xUxR+ucktdFwfReIzuz8eS2Oq74Lj2q -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:44 2025 by rpki-client