This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: J2kFpDsY/8bCxrAulNoq1q2Hi+CN2kxxJzyezylnEDg= Subject key identifier: 63:9D:25:ED:A0:B0:DA:9C:55:17:19:48:3E:35:FE:A5:66:05:78:49 Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 63 Signing time: Fri 19 Dec 2025 06:01:39 +0000 Manifest this update: Fri 19 Dec 2025 06:01:39 +0000 Manifest next update: Fri 26 Dec 2025 06:01:39 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: orp//xZSnO+eLgPuMNyzebfiOfqsRpUGhO6mwDl4RZQ=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Dec 19 06:01:39 2025 GMT Not After : Dec 26 06:01:39 2025 GMT Subject: CN=6944ea43-1475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:45:8e:ee:ef:e0:d1:d6:65:0b:3a:b6:15: 31:c5:df:66:c0:05:3e:af:c7:c7:3e:89:ca:b6:05: 19:dd:53:5e:6f:7c:27:eb:d3:9f:51:b0:ca:99:84: 72:be:96:48:76:f3:96:dc:0a:7f:5d:77:a4:58:9b: 9f:8a:2c:e9:32:bf:aa:d2:48:a5:e4:e3:5c:22:8a: 4e:8d:a3:8c:41:40:94:14:c6:2e:71:2d:4e:d7:0c: 96:f5:11:6c:0f:34:69:62:f2:fb:78:ae:44:3d:4a: 32:2d:2c:9b:e5:79:e0:46:f2:82:b6:b6:a5:23:79: 42:32:15:75:6b:10:4f:88:76:80:f9:7a:7f:4b:e1: 2f:bc:bf:84:01:bd:4a:8c:bd:55:46:e6:e2:59:a2: 0a:1e:64:ef:68:be:1b:a1:82:e6:11:37:15:bf:d1: 80:01:d5:5c:bf:c0:f9:42:fa:f1:7f:33:64:fb:aa: e7:3e:79:99:4c:01:21:8e:d5:b9:ba:50:0a:7b:3f: cf:40:ec:e8:7f:6b:5d:1d:7a:5b:72:9e:49:8d:34: cf:a8:65:69:c3:21:32:65:4c:0b:ac:8c:47:6a:c8: c4:e2:26:1a:ee:aa:71:00:1a:ed:54:4c:e4:61:1d: 62:ef:93:f4:14:c2:a4:05:af:65:94:cf:8b:e5:4d: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9D:25:ED:A0:B0:DA:9C:55:17:19:48:3E:35:FE:A5:66:05:78:49 X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:34:b5:93:04:67:f5:53:f5:71:33:6f:d9:08:2b:db:79:8a: fb:ce:93:34:12:6c:2d:00:06:45:c4:6c:75:76:5a:53:ac:85: 1a:9f:fb:3e:2e:c4:96:03:90:7d:f3:d4:0a:34:45:61:ea:ee: e8:21:cb:a6:38:4f:91:0a:8a:a6:f1:d1:0a:dd:f5:09:e1:ea: 61:5c:17:57:8a:cf:3b:9f:5c:ba:95:0f:51:56:2e:3b:06:09: e4:7e:0e:43:18:59:b2:78:f3:52:c3:91:44:5f:47:9a:d6:3f: 75:99:89:44:00:19:d1:f2:48:fb:f8:0a:88:c8:b0:7a:e1:a9: b8:e1:44:23:7b:a4:e3:ec:23:44:03:6b:23:d0:c9:fe:ff:2c: 4b:63:70:54:df:93:19:7f:3b:9e:5e:50:87:44:e2:ba:ee:6d: e5:e3:16:12:c9:f7:23:6f:05:cf:a1:1d:5e:3a:08:7b:9a:30: f7:43:5c:f4:69:d7:ba:4b:60:30:3f:af:b4:0e:59:93:4a:0d: 5d:2a:c0:25:40:10:62:12:db:2a:d5:b2:33:d2:23:5c:94:37: 31:1c:02:96:59:3b:be:35:48:76:aa:82:eb:a8:af:0b:83:5a: c6:cb:03:5d:2d:8d:85:c7:3f:36:19:32:78:b1:72:8e:45:57: 52:a4:11:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTEyMTkwNjAxMzlaFw0yNTEyMjYwNjAxMzlaMBgxFjAUBgNV BAMMDTY5NDRlYTQzLTE0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd3UWO7u/g0dZlCzq2FTHF32bABT6vx8c+icq2BRndU15vfCfr059RsMqZhHK+ lkh285bcCn9dd6RYm5+KLOkyv6rSSKXk41wiik6No4xBQJQUxi5xLU7XDJb1EWwP NGli8vt4rkQ9SjItLJvleeBG8oK2tqUjeUIyFXVrEE+IdoD5en9L4S+8v4QBvUqM vVVG5uJZogoeZO9ovhuhguYRNxW/0YAB1Vy/wPlC+vF/M2T7quc+eZlMASGO1bm6 UAp7P89A7Oh/a10deltynkmNNM+oZWnDITJlTAusjEdqyMTiJhruqnEAGu1UTORh HWLvk/QUwqQFr2WUz4vlTUEFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY50l7aCw 2pxVFxlIPjX+pWYFeEkwHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF00tZMEZ/VT9XEzb9kIK9t5ivvOkzQSbC0ABkXEbHV2WlOshRqf+z4u xJYDkH3z1Ao0RWHq7ughy6Y4T5EKiqbx0Qrd9Qnh6mFcF1eKzzufXLqVD1FWLjsG CeR+DkMYWbJ481LDkURfR5rWP3WZiUQAGdHySPv4CojIsHrhqbjhRCN7pOPsI0QD ayPQyf7/LEtjcFTfkxl/O55eUIdE4rrubeXjFhLJ9yNvBc+hHV46CHuaMPdDXPRp 17pLYDA/r7QOWZNKDV0qwCVAEGIS2yrVsjPSI1yUNzEcApZZO741SHaqguuorwuD WsbLA10tjYXHPzYZMnixco5FV1KkEd8= -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:29 2025 by rpki-client