This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft File: wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json) Hash identifier: mQvMe+TZnTUiokfo/+tSkW6kPuWUqPIY9Jl44xurb0Y= Subject key identifier: DE:F7:55:E2:F2:EC:42:9C:E0:3F:74:8B:2E:E5:84:70:00:EF:13:C1 Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5 Certificate issuer: /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5 Certificate serial: 3535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft Manifest number: 350C Signing time: Tue 30 Dec 2025 14:26:01 +0000 Manifest this update: Tue 30 Dec 2025 14:26:01 +0000 Manifest next update: Tue 06 Jan 2026 14:26:01 +0000 Files and hashes: 1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: 48meWS+JSxaEe+p/kXSe+AlzDCWBbq1jZKbPFmgd4P4=) 2: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: EtRSxXLr9JBTJCnUooXoQwRCFg8CAJ0u6Dp1S7zs3Tg=) 3: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: EegTeeLlTfEQvKcm3aqYDfh/vKoTkWLQIcSy6ptPChU=) 4: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: 0S/ooPJ2C5kXa2YUe26MqZS0wv4CYq55uodN29fbqkM=) 5: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: 0Vd+S2y27VtxJNaIaSzS26hUg229nb/6aZufw7SyqnQ=) 6: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: utwoHGpdCAj4Fmr//A9NQPq/Muvduh7CzdYTs9q3Yzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13621 (0x3535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5 Validity Not Before: Dec 30 14:26:01 2025 GMT Not After : Jan 6 14:26:01 2026 GMT Subject: CN=6953e0f9-75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:4f:cf:b6:37:02:9f:b1:c3:30:b9:a5:a9: 2d:e2:d0:40:8b:a6:41:4f:af:32:b3:3c:df:27:d4: df:5f:ca:04:c7:a5:8f:77:f5:ab:b6:ee:34:07:b3: 4c:eb:d3:54:03:f1:b8:30:bb:c3:d5:94:f4:67:1d: d2:df:4a:79:13:e7:29:a8:63:35:6e:5b:d0:10:e6: ca:4d:da:14:36:fd:06:ed:06:bd:15:88:5e:71:10: d3:fd:e5:21:ab:59:06:87:24:f7:33:b1:98:c3:14: a8:f4:4c:fb:8d:cb:3c:da:76:76:d6:1d:43:c6:34: 34:65:1a:68:54:3f:52:43:b2:d5:d4:de:f1:a8:16: 02:7c:b2:34:ae:e3:83:de:30:56:e9:64:e7:64:4f: a8:b6:8e:fb:9e:77:dd:65:35:5b:5f:f0:40:97:a4: 43:ba:7e:67:b9:12:0e:53:16:41:83:f9:d3:ff:15: 8a:a2:08:94:f3:ba:ac:7c:33:1b:1c:a4:19:74:79: 15:7b:83:0d:d2:9a:ef:e4:3f:c4:8c:97:88:8a:50: 89:68:7f:9d:c3:62:2c:ec:1a:fb:96:96:28:39:37: 5b:40:36:20:6d:7e:64:6a:23:50:ae:84:fc:5e:8f: e6:1d:47:06:e1:bc:7f:08:73:d7:84:8b:3b:04:fb: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F7:55:E2:F2:EC:42:9C:E0:3F:74:8B:2E:E5:84:70:00:EF:13:C1 X509v3 Authority Key Identifier: keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5d:9d:a3:4c:f9:a4:05:12:a3:3d:55:c7:54:6f:b9:63:e6: b2:5a:3a:19:86:ab:6b:60:eb:0b:e5:8e:37:0e:a3:9c:e4:62: ed:27:4e:f0:36:52:34:09:42:f8:a9:d3:e8:3e:15:14:03:e0: 14:7a:5d:5f:eb:dd:8e:6d:5e:bc:0b:47:59:c4:46:81:79:bd: 68:b1:10:16:6f:cc:e4:84:57:d6:fb:7f:8e:83:df:91:17:d8: 01:46:fe:6a:9e:5f:59:bf:7c:e2:2a:8c:c5:53:8e:8b:c7:b8: 07:53:51:ee:ec:d8:2b:55:f4:31:c0:fd:0a:6e:15:97:9a:3b: 9a:28:0f:8d:b2:99:b0:e2:63:8f:45:0e:32:ca:8e:15:e2:77: c3:f3:83:c8:34:d9:e6:70:3a:49:15:6f:76:b0:8b:2c:c9:d0: 7c:51:14:ae:ea:46:d4:2f:20:76:54:8b:d1:d7:84:98:b9:0e: 9d:9a:c7:e2:cf:82:05:47:4a:c9:3b:ca:d6:b0:17:bf:f7:31: 3c:2b:2a:c7:85:c0:ec:1d:95:3c:97:9c:a0:cd:45:05:fc:24: c1:dc:9e:0d:23:a5:69:ca:48:84:2c:13:cb:cf:0b:e1:80:42: e6:f7:45:5b:f1:84:58:ca:67:1a:ef:39:1b:c5:52:db:0a:19: ad:6a:af:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5QkUxMTAvBgNVBAUTKEMzMTYzMTk1ODVFRTJDRjI0N0I1MzUwMzcxNDY3REMy NjlEQzlDRTUwHhcNMjUxMjMwMTQyNjAxWhcNMjYwMTA2MTQyNjAxWjAYMRYwFAYD VQQDDA02OTUzZTBmOS03NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rhPz7Y3Ap+xwzC5pakt4tBAi6ZBT68yszzfJ9TfX8oEx6WPd/Wrtu40B7NM 69NUA/G4MLvD1ZT0Zx3S30p5E+cpqGM1blvQEObKTdoUNv0G7Qa9FYhecRDT/eUh q1kGhyT3M7GYwxSo9Ez7jcs82nZ21h1DxjQ0ZRpoVD9SQ7LV1N7xqBYCfLI0ruOD 3jBW6WTnZE+oto77nnfdZTVbX/BAl6RDun5nuRIOUxZBg/nT/xWKogiU87qsfDMb HKQZdHkVe4MN0prv5D/EjJeIilCJaH+dw2Is7Br7lpYoOTdbQDYgbX5kaiNQroT8 Xo/mHUcG4bx/CHPXhIs7BPtbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN73VeLy 7EKc4D90iy7lhHAA7xPBMB8GA1UdIwQYMBaAFMMWMZWF7izyR7U1A3FGfcJp3Jzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlCRS83NTI5OTFDNjFE ODUxMUUyOTM4NjFCREMwOEIwMkNEMi93eFl4bFlYdUxQSkh0VFVEY1VaOXdtbmNu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4WXhsWVh1TFBKSHRUVURjVVo5d21uY25PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlCRS83NTI5OTFDNjFEODUxMUUyOTM4NjFCREMwOEIwMkNEMi93eFl4bFlYdUxQ Skh0VFVEY1VaOXdtbmNuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKXZ2jTPmkBRKjPVXHVG+5Y+ayWjoZhqtrYOsL5Y43DqOc5GLtJ07w NlI0CUL4qdPoPhUUA+AUel1f692ObV68C0dZxEaBeb1osRAWb8zkhFfW+3+Og9+R F9gBRv5qnl9Zv3ziKozFU46Lx7gHU1Hu7NgrVfQxwP0KbhWXmjuaKA+Nspmw4mOP RQ4yyo4V4nfD84PINNnmcDpJFW92sIssydB8URSu6kbULyB2VIvR14SYuQ6dmsfi z4IFR0rJO8rWsBe/9zE8KyrHhcDsHZU8l5ygzUUF/CTB3J4NI6VpykiELBPLzwvh gELm90Vb8YRYymca7zkbxVLbChmtaq8q -----END CERTIFICATE-----Generated at Wed Dec 31 08:00:07 2025 by rpki-client