This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: C5F8oph0Vdl7q/yBW2S1JkcMQZP1eyeqdEHWBkoCc2Q= Subject key identifier: 98:3D:C3:53:BD:A2:70:37:39:65:D0:C1:D0:77:6A:AC:A9:67:F6:2F Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 09EE Signing time: Sat 20 Dec 2025 19:22:57 +0000 Manifest this update: Sat 20 Dec 2025 19:22:57 +0000 Manifest next update: Sat 27 Dec 2025 19:22:57 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: 4QJksqrg1BfNErUnco1x4E8ZV3A3CCzqXD3g5I0T7u4=) 2: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 3: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 4: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Dec 20 19:22:57 2025 GMT Not After : Dec 27 19:22:57 2025 GMT Subject: CN=6946f791-689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:88:b2:b5:bb:46:ad:04:65:92:b0:83:66: 0f:04:61:58:16:d0:6d:69:2d:22:3e:79:b9:58:5a: 80:49:b7:f4:35:68:dd:5c:88:62:68:61:a5:ce:d8: ad:6e:19:cb:f2:83:7e:b2:12:9d:bc:13:39:4f:33: 84:98:67:a7:6d:9a:38:aa:fd:54:55:74:8d:a4:22: 59:5b:07:48:d6:2d:bc:1f:2f:83:e8:db:97:5e:a2: 67:75:a8:6e:cd:0c:bb:89:4d:9c:4f:bf:7d:ae:d7: 2f:11:9f:58:4f:af:7d:bf:8d:b9:97:0e:ee:81:c9: de:73:b3:0c:ba:81:06:1b:14:de:bc:0a:23:32:2c: da:68:c0:47:28:d4:69:b3:20:1e:af:4e:eb:4a:54: a8:e6:75:42:fb:8b:a5:49:e4:45:6a:7d:91:39:39: fe:c3:e2:f5:a0:90:cf:a9:de:d0:4d:43:2c:5d:6e: 35:c1:d7:3e:cd:61:14:20:d0:67:c4:c1:f0:60:51: 3d:9a:12:0f:99:04:e7:04:45:bc:87:5b:ae:30:f3: 89:e3:68:37:7e:44:76:c4:cb:bd:b7:45:b4:b9:18: 7c:87:8f:36:41:15:36:4d:90:98:a8:df:9c:0c:9b: 49:8d:c2:8e:f2:37:46:6e:87:76:e7:83:03:28:ba: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:C3:53:BD:A2:70:37:39:65:D0:C1:D0:77:6A:AC:A9:67:F6:2F X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:42:2d:b2:0e:b5:1a:95:98:3c:69:8c:98:90:eb:a4:2e:26: f1:6e:ba:eb:4e:81:05:b2:33:7b:89:eb:be:e6:64:53:2c:e4: 57:20:a4:ff:ca:2a:b4:7d:ad:fc:fb:f9:c8:79:8a:b3:e8:f1: 00:a7:24:1c:27:79:cc:5b:7f:28:03:05:4c:7c:5c:98:f7:d9: b2:ed:5e:6d:ee:0a:06:7b:db:ec:d4:35:5f:22:d2:e1:d8:5d: 59:a0:0c:28:a5:68:75:7b:27:07:bf:97:27:e6:a3:21:8d:82: c1:8c:d4:b3:ae:fd:68:ec:9c:f0:09:83:f3:95:94:5b:92:07: 88:14:c5:f0:40:2e:f2:bc:5c:ce:23:cc:4e:9c:c7:32:62:00: f5:0d:51:dd:63:21:99:b2:fa:43:2c:4d:c9:fb:e0:2b:4c:da: 4e:1d:5a:84:85:e4:9d:e7:d4:04:0b:ae:37:0c:f0:ef:52:56: 84:a4:be:56:60:e5:7e:70:a2:d3:9b:d0:7f:87:e8:9a:21:ba: 45:84:ea:95:64:61:43:3b:e7:73:d2:c7:d6:da:ba:04:26:ce: a5:eb:31:50:7f:cd:f9:dd:d3:c5:59:46:a7:29:1f:3e:84:e7: ee:23:d3:9e:33:a5:9e:5a:c1:99:f7:8a:a0:b1:b3:7e:10:82: 18:bf:38:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUxMjIwMTkyMjU3WhcNMjUxMjI3MTkyMjU3WjAYMRYwFAYD VQQDDA02OTQ2Zjc5MS02ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8GIsrW7Rq0EZZKwg2YPBGFYFtBtaS0iPnm5WFqASbf0NWjdXIhiaGGlztit bhnL8oN+shKdvBM5TzOEmGenbZo4qv1UVXSNpCJZWwdI1i28Hy+D6NuXXqJndahu zQy7iU2cT799rtcvEZ9YT699v425lw7ugcnec7MMuoEGGxTevAojMizaaMBHKNRp syAer07rSlSo5nVC+4ulSeRFan2ROTn+w+L1oJDPqd7QTUMsXW41wdc+zWEUINBn xMHwYFE9mhIPmQTnBEW8h1uuMPOJ42g3fkR2xMu9t0W0uRh8h482QRU2TZCYqN+c DJtJjcKO8jdGbod254MDKLrpCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg9w1O9 onA3OWXQwdB3aqypZ/YvMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjQi2yDrUalZg8aYyYkOukLibxbrrrToEFsjN7ieu+5mRTLORXIKT/ yiq0fa38+/nIeYqz6PEApyQcJ3nMW38oAwVMfFyY99my7V5t7goGe9vs1DVfItLh 2F1ZoAwopWh1eycHv5cn5qMhjYLBjNSzrv1o7JzwCYPzlZRbkgeIFMXwQC7yvFzO I8xOnMcyYgD1DVHdYyGZsvpDLE3J++ArTNpOHVqEheSd59QEC643DPDvUlaEpL5W YOV+cKLTm9B/h+iaIbpFhOqVZGFDO+dz0sfW2roEJs6l6zFQf8353dPFWUanKR8+ hOfuI9OeM6WeWsGZ94qgsbN+EIIYvzjo -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:50 2025 by rpki-client