This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: y8IE7HBRJ9qUbOTlElPJld+ha/hc+5pD8XLr/yC86O4= Subject key identifier: 8F:64:9C:0A:F3:C3:C9:29:85:05:3A:03:F2:B6:80:9C:09:36:92:E2 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0CB1 Signing time: Thu 18 Dec 2025 18:01:12 +0000 Manifest this update: Thu 18 Dec 2025 18:01:12 +0000 Manifest next update: Thu 25 Dec 2025 18:01:12 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: JajpWaKKh6NZvUz+ZbXW/kwweWgvrT2i6DhO28BxtcQ=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: Dec 18 18:01:12 2025 GMT Not After : Dec 25 18:01:12 2025 GMT Subject: CN=69444168-8a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:fa:a3:34:04:76:84:6f:bd:4f:0f:2a:f3: 87:d2:80:75:23:bb:2c:d0:0d:d0:32:6e:ef:b5:da: ce:3c:ae:8a:3f:f1:2b:da:91:20:e3:db:2b:28:bd: a9:58:85:8f:e5:d8:c8:ee:e8:da:c4:f3:47:b3:84: b0:aa:91:99:00:80:6d:50:bc:15:15:9a:dc:86:4f: 9d:4a:42:1e:70:02:a4:00:1e:50:29:1f:9b:2a:4d: ad:9a:50:c8:3a:4d:6a:80:0c:02:0d:2b:d3:a8:ef: 39:09:53:f1:37:ef:85:5e:ef:0e:56:89:52:fa:b4: 26:62:33:75:f8:65:4d:e8:ea:e1:2d:5c:ef:f0:0a: 2e:10:0b:bb:9f:98:b9:c6:f2:1a:7b:3d:f4:c4:54: 65:0a:2c:72:0a:7f:da:a0:52:1f:0b:97:cf:02:e2: 29:0f:1a:68:35:66:c9:94:78:e1:83:a7:5c:92:42: c0:cb:b7:5e:33:a3:7f:0b:6b:38:7b:dc:28:58:1e: e3:73:4a:f0:d1:c7:b0:41:14:f9:fa:e8:af:2a:1d: fb:20:82:12:31:4d:1c:0f:7b:be:d3:18:07:07:47: 03:47:48:60:64:31:63:21:c8:64:a3:f3:44:af:6e: 5c:b2:3f:11:9c:4b:9f:8d:d9:01:29:81:e3:9c:93: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:9C:0A:F3:C3:C9:29:85:05:3A:03:F2:B6:80:9C:09:36:92:E2 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:4c:ad:bb:4d:63:a0:ee:13:3b:b6:f6:0c:94:e9:49:63:cd: 51:ad:bd:97:f0:46:5f:39:a4:e6:b6:7f:88:bf:ea:cc:a4:a2: 50:3f:78:b9:7e:5c:9c:b7:64:cd:1a:75:00:3e:68:b6:32:8f: 91:47:83:4b:24:ce:f1:59:bd:fb:be:94:51:0d:e7:e4:72:c6: 79:95:24:65:17:21:02:c3:d9:9f:46:06:39:f0:c0:cd:d9:8c: 13:45:b5:0a:eb:c9:ea:2d:57:7d:c9:63:0a:7c:fc:00:3e:1b: 39:b9:fd:d7:eb:b1:fc:b7:a6:f3:2a:1c:e1:a9:59:4c:53:50: 25:c7:8e:10:4a:bd:c8:bb:39:99:2f:65:21:dc:e5:6a:9a:fb: 86:7a:fe:b0:50:19:1b:e2:b4:61:a8:e7:c1:f7:56:eb:ff:97: af:1c:ea:87:fc:fb:5d:ee:4b:83:8b:a3:aa:8c:b2:69:08:93: cf:d0:c4:ab:70:0f:06:1f:b7:43:35:69:00:26:e6:af:84:04: 92:0e:a1:be:ea:dd:c2:f8:72:4d:f9:f9:d7:e3:c4:a6:d0:e6: f8:5d:ea:9e:57:c6:55:21:42:ef:38:57:4e:cf:33:ff:f7:dd: 40:aa:cb:51:07:63:8d:a3:06:e9:31:00:e4:10:b0:91:47:59: 42:ab:1b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjUxMjE4MTgwMTEyWhcNMjUxMjI1MTgwMTEyWjAYMRYwFAYD VQQDDA02OTQ0NDE2OC04YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XD6ozQEdoRvvU8PKvOH0oB1I7ss0A3QMm7vtdrOPK6KP/Er2pEg49srKL2p WIWP5djI7ujaxPNHs4SwqpGZAIBtULwVFZrchk+dSkIecAKkAB5QKR+bKk2tmlDI Ok1qgAwCDSvTqO85CVPxN++FXu8OVolS+rQmYjN1+GVN6OrhLVzv8AouEAu7n5i5 xvIaez30xFRlCixyCn/aoFIfC5fPAuIpDxpoNWbJlHjhg6dckkLAy7deM6N/C2s4 e9woWB7jc0rw0cewQRT5+uivKh37IIISMU0cD3u+0xgHB0cDR0hgZDFjIchko/NE r25csj8RnEufjdkBKYHjnJPV2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9knArz w8kphQU6A/K2gJwJNpLiMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7TK27TWOg7hM7tvYMlOlJY81Rrb2X8EZfOaTmtn+Iv+rMpKJQP3i5 flyct2TNGnUAPmi2Mo+RR4NLJM7xWb37vpRRDefkcsZ5lSRlFyECw9mfRgY58MDN 2YwTRbUK68nqLVd9yWMKfPwAPhs5uf3X67H8t6bzKhzhqVlMU1Alx44QSr3IuzmZ L2Uh3OVqmvuGev6wUBkb4rRhqOfB91br/5evHOqH/Ptd7kuDi6OqjLJpCJPP0MSr cA8GH7dDNWkAJuavhASSDqG+6t3C+HJN+fnX48Sm0Ob4XeqeV8ZVIULvOFdOzzP/ 991AqstRB2ONowbpMQDkELCRR1lCqxtf -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:02 2025 by rpki-client