This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: lE3cLme3po2gxwUcpwaRFCQ9fcxps7Yi1lJsTo1RQSU= Subject key identifier: 43:2A:89:19:03:FB:01:AD:79:58:D3:0B:E6:62:43:4F:82:30:AF:13 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: F6 Signing time: Tue 23 Dec 2025 04:13:25 +0000 Manifest this update: Tue 23 Dec 2025 04:13:25 +0000 Manifest next update: Tue 30 Dec 2025 04:13:25 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: YcJL24yMenJ1xTDrXMqJkwKvgkSlVW3NAxlZGelsmbU=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: S//h0FvEyaMaAGxiOxnAlzaIIXmPhHgkfb3U/Ur0Y5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Dec 23 04:13:25 2025 GMT Not After : Dec 30 04:13:25 2025 GMT Subject: CN=694a16e5-66d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:ed:14:8f:51:ce:6b:dd:80:93:f6:b3:be: 5b:dd:5d:87:e8:79:c7:f8:cb:1b:17:ef:c8:8a:06: 95:8b:3a:6c:e2:23:41:6c:4d:61:21:84:bc:59:76: 60:32:3f:0f:72:37:70:66:03:b8:d0:64:13:f3:e5: bc:0f:3f:e9:ba:fa:b7:4a:a4:b8:0e:ea:b3:64:aa: b2:59:cb:6a:8e:80:bd:3d:45:29:44:51:1d:81:3e: ad:fe:df:11:24:bb:ce:78:ab:97:3b:eb:99:89:92: b4:e4:99:a1:27:c4:cc:17:49:40:e2:a6:7e:98:1b: cf:cf:4d:76:52:1e:9d:6a:88:93:49:33:eb:9c:32: c6:39:8a:96:4c:13:bc:6e:88:d8:64:cc:06:45:09: 18:aa:06:a0:0a:95:19:f3:77:e6:9a:53:0c:77:c0: 5d:da:89:d6:f7:f0:96:02:a0:09:b6:56:4d:e3:f3: 7d:7b:1c:6b:1a:3f:9b:35:2f:9d:9a:3f:d1:8a:93: f7:27:7a:8c:2e:2c:de:77:28:a0:ec:c9:4e:7f:91: 01:90:28:2e:22:6a:4d:c8:d9:65:42:54:49:c8:65: 82:aa:af:5b:70:71:c6:e4:3d:45:29:a4:03:80:1e: a2:47:67:f1:0b:87:ac:75:f7:c4:69:d2:8b:37:69: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:89:19:03:FB:01:AD:79:58:D3:0B:E6:62:43:4F:82:30:AF:13 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d5:01:b8:87:47:0b:93:7d:7c:78:8f:81:44:cc:e2:37:4f: 2f:9c:97:7c:8f:a0:47:ac:51:e7:9d:0f:05:e6:22:5d:57:f2: 5a:c8:9b:27:ad:3c:5b:23:e8:4b:8b:bc:b1:40:a6:42:ca:32: 2d:95:3d:37:e2:49:cb:e6:82:af:b0:2a:ec:07:3f:28:e5:3e: c3:12:57:0f:7f:38:3c:a9:56:dc:81:68:a7:f1:9c:26:15:4e: 50:61:18:50:a7:0a:6f:9b:8e:88:d9:96:81:1b:ed:06:84:57: 78:ad:a0:38:8c:ea:8a:a4:cc:2a:d0:5c:47:13:93:4d:d8:cf: 26:4f:5b:48:50:45:1b:ba:29:ef:86:21:bb:38:0c:43:19:88: 6e:9e:88:27:80:fe:ba:5c:af:ec:4c:2e:e7:eb:a9:6c:64:2e: ff:21:88:71:dc:30:c5:ed:c4:51:c0:6a:70:f1:eb:a6:93:1b: d0:1f:c0:46:1e:23:4e:94:bc:50:76:45:85:7c:01:d0:8a:d9: e2:84:fd:0d:b1:c7:50:e8:58:63:ae:7d:c2:ec:c6:44:ad:d1: 60:35:9d:f4:c3:71:8c:6a:98:0c:12:45:0e:e3:a4:1c:87:64: de:37:82:ca:e9:f5:6f:1e:80:cf:85:64:44:e5:24:14:b9:a6: a4:2b:ae:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUxMjIzMDQxMzI1WhcNMjUxMjMwMDQxMzI1WjAYMRYwFAYD VQQDDA02OTRhMTZlNS02NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkftFI9RzmvdgJP2s75b3V2H6HnH+MsbF+/IigaVizps4iNBbE1hIYS8WXZg Mj8PcjdwZgO40GQT8+W8Dz/puvq3SqS4DuqzZKqyWctqjoC9PUUpRFEdgT6t/t8R JLvOeKuXO+uZiZK05JmhJ8TMF0lA4qZ+mBvPz012Uh6daoiTSTPrnDLGOYqWTBO8 bojYZMwGRQkYqgagCpUZ83fmmlMMd8Bd2onW9/CWAqAJtlZN4/N9exxrGj+bNS+d mj/RipP3J3qMLizedyig7MlOf5EBkCguImpNyNllQlRJyGWCqq9bcHHG5D1FKaQD gB6iR2fxC4esdffEadKLN2kIjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMqiRkD +wGteVjTC+ZiQ0+CMK8TMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR1QG4h0cLk318eI+BRMziN08vnJd8j6BHrFHnnQ8F5iJdV/JayJsn rTxbI+hLi7yxQKZCyjItlT034knL5oKvsCrsBz8o5T7DElcPfzg8qVbcgWin8Zwm FU5QYRhQpwpvm46I2ZaBG+0GhFd4raA4jOqKpMwq0FxHE5NN2M8mT1tIUEUbuinv hiG7OAxDGYhunogngP66XK/sTC7n66lsZC7/IYhx3DDF7cRRwGpw8eumkxvQH8BG HiNOlLxQdkWFfAHQitnihP0NscdQ6Fhjrn3C7MZErdFgNZ30w3GMapgMEkUO46Qc h2TeN4LK6fVvHoDPhWRE5SQUuaakK64+ -----END CERTIFICATE-----Generated at Wed Dec 24 12:37:43 2025 by rpki-client