This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: brwLuFvXxoSzsdq7U9l4nylnSU0UwBsBNi+RfpdjUzw= Subject key identifier: 24:A8:13:20:CB:5F:7E:D3:0E:CA:C0:E2:2A:4C:33:D7:0C:34:20:BA Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 1403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 13E2 Signing time: Thu 18 Dec 2025 16:48:56 +0000 Manifest this update: Thu 18 Dec 2025 16:48:56 +0000 Manifest next update: Thu 25 Dec 2025 16:48:56 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: OelaHf5ewtnbE4k91wHTJA5J76m8RDzZS4lPB5zIoaI=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5123 (0x1403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Dec 18 16:48:56 2025 GMT Not After : Dec 25 16:48:56 2025 GMT Subject: CN=69443078-d9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:ec:4c:d9:62:79:59:88:db:c0:7e:ba:23: b3:17:ed:c7:7e:77:ee:b3:33:5d:2d:62:f0:e5:50: 4c:43:a2:5a:6a:32:45:1f:05:39:17:43:eb:20:b9: f8:df:f0:76:dd:5e:0b:2f:39:99:a2:2c:d7:3e:89: d9:ea:18:e8:1d:95:5b:3b:eb:ae:4e:07:86:2b:25: 60:4d:55:fe:b7:f3:3f:c9:ac:d5:7e:63:51:1b:7f: e0:9d:1b:f0:e6:61:c7:fa:cd:85:ca:1c:20:5e:4d: 0a:5a:4f:fe:b2:26:ae:5a:e7:64:19:91:e0:9a:33: a5:a2:06:c8:04:42:32:41:cf:ae:c5:aa:c4:5a:c8: 92:29:cc:84:ce:99:2c:f3:f1:86:c5:f9:a5:27:1e: e4:c6:98:e7:c7:1c:37:3a:f8:f5:67:c9:57:7a:f9: c5:8d:5f:bf:94:21:4c:89:20:8c:ad:1b:7d:9d:db: b7:04:32:2c:ac:a5:f4:75:9d:a1:2a:78:b4:70:aa: b9:f0:11:18:88:b1:d3:85:63:30:39:5a:00:5c:b2: 33:27:3b:15:42:bb:9c:31:a9:52:ca:c6:eb:3c:b1: c5:bc:06:b6:e9:da:ce:44:c2:1a:09:7e:a9:7f:11: bb:3e:a3:a1:b4:66:df:b7:ce:6a:45:03:b9:2e:98: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:13:20:CB:5F:7E:D3:0E:CA:C0:E2:2A:4C:33:D7:0C:34:20:BA X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:db:c3:5f:ac:17:55:3b:c1:f9:b0:4a:11:58:9e:ce:04:3b: 37:68:d1:fc:57:8f:95:b6:d0:78:fc:7d:fc:4d:01:22:61:b3: c0:ee:ad:26:48:30:64:b0:f0:c1:58:e4:66:69:4b:1a:f6:5d: 68:52:48:04:e0:2f:91:20:15:c0:e3:ca:14:81:ae:1d:5e:0c: 3f:1f:47:dc:28:bb:21:85:18:02:e8:4c:13:12:c9:b3:e6:5b: 1a:7c:29:8e:cc:b5:79:81:54:3b:b0:01:2b:e0:54:c6:af:00: e4:7a:7a:bb:9f:a3:ec:97:5c:49:1d:c7:9a:53:87:d8:cf:c3: 11:5b:91:27:43:4b:64:42:c8:39:bb:b7:c1:c1:3e:c9:aa:a4: 89:dc:27:2a:5b:20:3d:79:9f:ec:bb:6b:fd:9d:6a:72:a2:8b: 5a:6c:79:88:38:d7:93:6b:80:fb:94:a8:a9:c6:33:f1:c2:6a: e1:27:eb:0b:f3:0c:be:11:f0:bb:af:00:4b:c7:9f:75:b7:49: fd:4a:2d:cc:d8:c9:24:7a:d5:2e:dd:a6:ec:5d:f5:25:e7:b9: e7:ed:af:1b:a2:e0:18:86:dc:59:ef:e1:99:99:8a:4c:9f:97: 54:af:8d:8d:60:c1:49:26:b9:47:b6:9c:fc:ac:69:27:75:a3: 29:dd:90:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUxMjE4MTY0ODU2WhcNMjUxMjI1MTY0ODU2WjAYMRYwFAYD VQQDDA02OTQ0MzA3OC1kOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wnsTNlieVmI28B+uiOzF+3HfnfuszNdLWLw5VBMQ6JaajJFHwU5F0PrILn4 3/B23V4LLzmZoizXPonZ6hjoHZVbO+uuTgeGKyVgTVX+t/M/yazVfmNRG3/gnRvw 5mHH+s2FyhwgXk0KWk/+siauWudkGZHgmjOlogbIBEIyQc+uxarEWsiSKcyEzpks 8/GGxfmlJx7kxpjnxxw3Ovj1Z8lXevnFjV+/lCFMiSCMrRt9ndu3BDIsrKX0dZ2h Kni0cKq58BEYiLHThWMwOVoAXLIzJzsVQrucMalSysbrPLHFvAa26drORMIaCX6p fxG7PqOhtGbft85qRQO5LpivmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSoEyDL X37TDsrA4ipMM9cMNCC6MB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL28NfrBdVO8H5sEoRWJ7OBDs3aNH8V4+VttB4/H38TQEiYbPA7q0m SDBksPDBWORmaUsa9l1oUkgE4C+RIBXA48oUga4dXgw/H0fcKLshhRgC6EwTEsmz 5lsafCmOzLV5gVQ7sAEr4FTGrwDkenq7n6Psl1xJHceaU4fYz8MRW5EnQ0tkQsg5 u7fBwT7JqqSJ3CcqWyA9eZ/su2v9nWpyootabHmIONeTa4D7lKipxjPxwmrhJ+sL 8wy+EfC7rwBLx591t0n9Si3M2MkketUu3absXfUl57nn7a8bouAYhtxZ7+GZmYpM n5dUr42NYMFJJrlHtpz8rGkndaMp3ZAu -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:27 2025 by rpki-client