This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json) Hash identifier: 6TBEbXRIMkbIAiGOMJ9rf1koUbZtOPXWptDGBqbvrS8= Subject key identifier: DD:C5:B8:6A:7F:DB:06:B7:65:5B:1E:71:73:68:2C:C9:4D:5D:0A:AE Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:03:16 +0000 Manifest this update: Fri 19 Dec 2025 07:03:16 +0000 Manifest next update: Fri 26 Dec 2025 07:03:16 +0000 Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: 2eaYgzYFwsRw1lBdbIDNT7Rt9hvu87n0pIsJYlAD31c=) 2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: aGikAw6ur9giQIjk2K9axRh3pUr3t4JrL5PiXk6nBCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Validity Not Before: Dec 19 07:03:16 2025 GMT Not After : Dec 26 07:03:16 2025 GMT Subject: CN=6944f8b4-8cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:92:df:d5:03:cd:f9:40:70:69:ef:45:7f: e0:a3:f6:48:30:73:63:bc:26:6f:1e:1b:31:30:ff: 75:fc:4a:98:47:a2:86:f2:35:3f:7d:31:19:72:e8: e8:92:24:5b:f4:ef:ba:d6:7b:8e:0e:c6:b1:af:27: 07:e6:28:6e:73:77:16:e8:f0:1d:fc:b6:e6:25:08: 9c:62:01:df:86:d2:be:c1:5a:cc:8f:63:21:9f:26: 8d:72:be:8b:24:a7:44:a5:c5:05:ed:01:e1:7f:2f: 47:90:1f:12:0c:ba:1c:3b:2a:89:27:1b:d7:59:7a: 69:b9:a6:c7:6e:22:82:2f:19:a2:2c:ce:0f:09:95: df:86:fe:0e:c4:49:6c:13:92:a5:91:25:a6:2e:c8: ba:dc:56:7f:09:2d:9c:e5:d4:26:1b:36:d3:e7:b8: 0d:b6:ec:01:2a:c8:b1:4f:cc:3b:33:aa:23:b7:32: f4:b0:35:f4:87:1e:a4:f3:44:4d:5c:db:41:aa:e1: cb:c6:c5:4d:4c:04:d4:00:21:f0:0f:45:68:e9:48: d4:79:e0:5b:b5:37:b8:c2:de:b5:4f:63:fa:89:68: 37:e9:67:21:9e:03:68:a5:40:f6:d8:12:6b:af:0f: 1c:6a:46:d7:7d:42:b2:e8:9b:a7:df:23:70:ed:9a: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:B8:6A:7F:DB:06:B7:65:5B:1E:71:73:68:2C:C9:4D:5D:0A:AE X509v3 Authority Key Identifier: keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:62:04:e7:84:a0:c6:ff:d2:c7:e6:dd:ea:0e:44:89:06:6a: f0:bc:f6:0b:97:52:85:d6:85:55:7e:6b:7d:2d:ec:cd:20:24: 6b:af:a8:a5:cd:bd:9b:72:11:b6:d8:b2:a4:f3:1a:b0:07:9e: f4:36:e5:83:c2:84:3d:58:fc:0f:bc:fc:bd:e9:cc:ce:26:cc: e3:be:f0:cd:e0:1c:a5:d1:8e:57:54:03:a4:39:b6:bf:4a:2b: 3e:8b:71:8d:47:00:fd:32:fd:e8:53:2e:a8:b6:1a:a2:dd:ab: 5b:9d:e2:6f:70:25:ea:32:d7:74:38:7e:f3:b3:2d:08:29:9e: 01:2e:eb:a7:6e:07:25:30:20:3c:4e:0b:29:bf:2c:55:12:16: a0:56:37:8b:44:88:24:f4:49:3f:a0:50:c3:29:4c:b4:50:5d: e2:a3:56:ef:bd:07:e7:1a:74:0d:77:92:fb:ed:08:33:10:01: c5:80:be:b1:3c:a8:82:cc:44:0b:e3:5a:34:a1:47:10:76:8b: a2:5b:fc:5b:71:c2:20:e3:02:69:db:2a:ab:6e:00:72:4e:0f: 08:41:ee:f8:09:32:aa:1e:bc:19:19:29:92:0f:64:37:9c:fb: 08:63:8a:a1:87:54:82:3b:1a:ca:3b:37:a9:75:87:55:2e:13: 0b:c8:ab:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF M0JGRDQ1RjAeFw0yNTEyMTkwNzAzMTZaFw0yNTEyMjYwNzAzMTZaMBgxFjAUBgNV BAMMDTY5NDRmOGI0LThjYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCO+JLf1QPN+UBwae9Ff+Cj9kgwc2O8Jm8eGzEw/3X8SphHoobyNT99MRly6OiS JFv077rWe44OxrGvJwfmKG5zdxbo8B38tuYlCJxiAd+G0r7BWsyPYyGfJo1yvosk p0SlxQXtAeF/L0eQHxIMuhw7KoknG9dZemm5psduIoIvGaIszg8Jld+G/g7ESWwT kqWRJaYuyLrcVn8JLZzl1CYbNtPnuA227AEqyLFPzDszqiO3MvSwNfSHHqTzRE1c 20Gq4cvGxU1MBNQAIfAPRWjpSNR54Fu1N7jC3rVPY/qJaDfpZyGeA2ilQPbYEmuv DxxqRtd9QrLom6ffI3Dtmuu3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3cW4an/b BrdlWx5xc2gsyU1dCq4wHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OTQ2L0I2NzEwMTMwREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVH LU9aMDd4NzRxNC1PXzFGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJiBOeEoMb/0sfm3eoORIkGavC89guXUoXWhVV+a30t7M0gJGuvqKXN vZtyEbbYsqTzGrAHnvQ25YPChD1Y/A+8/L3pzM4mzOO+8M3gHKXRjldUA6Q5tr9K Kz6LcY1HAP0y/ehTLqi2GqLdq1ud4m9wJeoy13Q4fvOzLQgpngEu66duByUwIDxO Cym/LFUSFqBWN4tEiCT0ST+gUMMpTLRQXeKjVu+9B+cadA13kvvtCDMQAcWAvrE8 qILMRAvjWjShRxB2i6Jb/FtxwiDjAmnbKqtuAHJODwhB7vgJMqoevBkZKZIPZDec +whjiqGHVII7Gso7N6l1h1UuEwvIq5Q= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:57 2025 by rpki-client