This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: yp2fwo98PZVp/+GF2sm37AL/tmch5eVqKIT2hiYzJos= Subject key identifier: 17:26:74:C0:FB:FC:9F:B5:C0:E3:1F:A6:2B:9F:4A:9C:93:05:9C:CD Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: 0109 Signing time: Fri 19 Dec 2025 04:07:47 +0000 Manifest this update: Fri 19 Dec 2025 04:07:46 +0000 Manifest next update: Fri 26 Dec 2025 04:07:46 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: U5Xl2waw1QPvIFg3dV0ONN4lh5f855/qxc0lY31i9lE=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Dec 19 04:07:46 2025 GMT Not After : Dec 26 04:07:46 2025 GMT Subject: CN=6944cf93-842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8d:62:4b:be:38:4e:ce:84:32:ea:85:54:34: 3e:3f:8b:2a:e7:9d:66:d3:08:62:88:7a:3e:ac:df: 24:35:87:11:1b:db:13:b3:0a:79:d6:76:09:2e:5f: 72:87:44:fa:1d:ae:de:e7:7a:77:49:ed:7b:3a:f3: f4:c0:9f:8a:b7:fc:a9:be:c8:03:4e:e5:49:33:4f: 6f:af:3c:da:f8:4f:d2:45:c6:2b:de:44:4f:b5:03: 5b:57:d1:c0:aa:86:ba:4f:f5:3a:d0:d1:da:35:7b: 73:ba:4f:72:bd:a9:58:c0:cb:28:e4:15:7a:1e:81: cd:e2:a9:15:3b:91:32:57:c4:6d:5b:d0:f4:30:5a: 8f:fe:88:d1:b8:f2:78:cb:50:0c:9d:54:a9:1c:b2: 8e:50:ca:be:96:75:c2:48:1c:7b:23:cc:20:c8:d8: 97:cf:76:4b:12:65:33:56:f2:73:bf:17:33:b3:c2: c7:dc:06:c9:5b:8b:5f:24:a3:ac:0a:dc:f1:74:b0: 61:41:85:a0:93:01:57:df:78:eb:95:4d:e7:67:02: 14:e2:b3:48:9c:f8:83:c6:23:76:9d:84:fd:e5:d2: e7:b1:29:7b:9a:ff:07:4e:b8:e3:ec:1b:57:0e:e4: af:f8:2e:16:82:14:c2:de:35:b2:81:5d:99:67:29: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:74:C0:FB:FC:9F:B5:C0:E3:1F:A6:2B:9F:4A:9C:93:05:9C:CD X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:47:bf:2c:c7:14:c3:40:99:bd:b2:fb:ce:75:03:3b:c8:0b: 6b:51:98:d2:c1:fb:78:60:76:28:5d:a2:a5:60:ff:1d:93:8a: f5:80:fb:2e:e0:5c:dd:da:18:b4:d3:51:1f:d1:fb:b8:8d:04: cb:ea:ec:14:76:21:e0:da:29:16:2a:c6:ba:12:52:98:76:31: 1d:8d:1e:a6:8f:a3:b8:40:aa:67:3b:5e:05:18:d2:16:2e:2e: 87:3f:30:18:16:d6:08:91:af:13:fd:d3:d8:42:52:8c:3c:67: 7a:e5:b3:18:52:53:63:97:71:13:94:73:51:2d:4d:64:42:0a: b7:bc:4a:49:25:08:4a:89:bb:b4:96:4f:d7:1a:da:21:b4:24: be:7c:f1:54:62:fc:d7:14:6e:b0:9e:cd:b9:b4:0d:3d:5b:dd: 58:4f:c3:43:b8:1e:04:81:d8:8e:3a:ea:24:e1:fc:f4:f8:e2: ae:00:05:ea:46:65:b5:b4:cd:39:b9:18:1b:88:9d:f3:1c:b9: c5:97:86:c4:f7:0d:23:4f:4c:6d:e3:9d:ef:ab:cf:ea:28:68: 16:c8:d9:05:c0:6f:eb:67:b2:fc:6b:e1:a8:d8:b4:7d:d3:aa: 60:da:71:60:8f:8b:9e:a6:e5:72:89:fc:8e:46:86:3a:7b:5f: d6:9e:31:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUxMjE5MDQwNzQ2WhcNMjUxMjI2MDQwNzQ2WjAYMRYwFAYD VQQDDA02OTQ0Y2Y5My04NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjI1iS744Ts6EMuqFVDQ+P4sq551m0whiiHo+rN8kNYcRG9sTswp51nYJLl9y h0T6Ha7e53p3Se17OvP0wJ+Kt/ypvsgDTuVJM09vrzza+E/SRcYr3kRPtQNbV9HA qoa6T/U60NHaNXtzuk9yvalYwMso5BV6HoHN4qkVO5EyV8RtW9D0MFqP/ojRuPJ4 y1AMnVSpHLKOUMq+lnXCSBx7I8wgyNiXz3ZLEmUzVvJzvxczs8LH3AbJW4tfJKOs CtzxdLBhQYWgkwFX33jrlU3nZwIU4rNInPiDxiN2nYT95dLnsSl7mv8HTrjj7BtX DuSv+C4WghTC3jWygV2ZZykyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcmdMD7 /J+1wOMfpiufSpyTBZzNMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0R78sxxTDQJm9svvOdQM7yAtrUZjSwft4YHYoXaKlYP8dk4r1gPsu 4Fzd2hi001Ef0fu4jQTL6uwUdiHg2ikWKsa6ElKYdjEdjR6mj6O4QKpnO14FGNIW Li6HPzAYFtYIka8T/dPYQlKMPGd65bMYUlNjl3ETlHNRLU1kQgq3vEpJJQhKibu0 lk/XGtohtCS+fPFUYvzXFG6wns25tA09W91YT8NDuB4EgdiOOuok4fz0+OKuAAXq RmW1tM05uRgbiJ3zHLnFl4bE9w0jT0xt453vq8/qKGgWyNkFwG/rZ7L8a+Go2LR9 06pg2nFgj4uepuVyifyORoY6e1/WnjGi -----END CERTIFICATE-----Generated at Sun Dec 21 01:20:09 2025 by rpki-client