This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: Li5rZWDsLwI82Twy3KWtEX7WyvTTXiLS8AvBqka6ESo= Subject key identifier: 06:25:39:8A:92:F4:FC:2F:3E:2B:28:63:F8:DC:98:FD:06:EC:5A:E1 Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 0982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 0AF2 Signing time: Tue 30 Dec 2025 19:37:31 +0000 Manifest this update: Tue 30 Dec 2025 19:37:31 +0000 Manifest next update: Tue 06 Jan 2026 19:37:31 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: T/3htPXbMLrd5jxoSoVeikDNqghib/+RyTKQ3kqh9gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 19:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: Dec 30 19:37:31 2025 GMT Not After : Jan 6 19:37:31 2026 GMT Subject: CN=695429fb-cb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:b9:ed:03:bb:60:f3:ba:1d:fb:73:3b:d7: 45:e4:25:5d:a9:82:ab:a0:5f:bc:34:6b:d5:3f:e1: 8a:c8:b6:b5:6f:0b:a1:e8:d5:b7:07:c6:8d:fe:81: b6:cc:a1:37:f2:6b:a2:70:00:98:27:1a:12:6f:5e: df:37:3c:70:c1:2a:32:54:26:a2:74:30:e2:30:c5: 03:e0:4e:f6:50:3b:f0:a6:7b:fa:46:62:92:64:a4: c7:15:7e:c2:83:32:04:75:11:af:5c:a1:25:20:7c: 6e:fa:dc:3f:a9:75:bb:b4:13:e8:7f:48:8a:43:19: 65:e9:d0:2a:10:5b:df:74:b6:6f:20:8e:d1:74:0e: 9b:d6:7d:af:bc:ec:d7:ef:c3:31:2e:17:41:fc:45: 9c:db:d8:da:17:7b:9c:a1:5a:5f:b8:20:3d:46:77: 6b:54:51:36:1d:4a:3b:e1:23:95:49:04:4e:f2:9f: 37:46:fc:11:97:0c:3b:54:38:db:50:34:cc:37:76: f8:57:fa:81:0f:31:74:4b:72:18:5c:ef:eb:3c:c7: 34:53:7c:20:10:ab:0e:a9:c6:9d:c9:c0:a5:2a:7e: 2c:fa:94:02:c5:e8:8c:86:2d:a0:14:53:77:28:8a: cb:21:d9:d7:be:82:6f:bf:8c:68:bb:4f:6f:00:ca: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:25:39:8A:92:F4:FC:2F:3E:2B:28:63:F8:DC:98:FD:06:EC:5A:E1 X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9d:1d:6b:a8:f0:24:83:d7:97:77:a3:41:21:1c:09:34:10: 55:b9:ae:01:75:f6:e2:dd:d8:76:38:c1:50:30:4f:6f:dc:8d: 4e:99:ca:01:dd:5f:2c:ae:a3:40:75:1b:f6:52:6d:90:70:c8: 64:39:ac:1f:73:5b:04:76:fd:63:51:76:c4:2b:da:c1:fa:f2: 9b:ed:c3:72:f5:6c:ef:07:0a:df:1a:4f:b6:f6:92:03:2b:04: f3:05:e3:10:f7:b0:62:7d:53:2f:ca:ac:c6:df:a6:34:db:77: 3f:e8:f3:ee:aa:69:68:d6:4c:c7:85:c3:9a:66:9f:bc:3b:01: 05:e5:99:64:6a:e4:ca:72:de:aa:76:fd:55:c6:26:5e:f7:d8: 2a:99:8c:6b:59:88:8d:f9:8e:20:75:49:e9:2c:aa:8b:08:e0: c2:2c:55:b8:05:97:04:ed:c7:f5:d7:31:32:4c:57:92:94:fb: 9e:d9:c7:3d:72:32:19:d5:fa:38:60:fa:e2:3d:be:32:45:59: a4:10:33:9c:d2:a2:c1:04:1b:aa:ba:23:16:70:a7:52:1b:c4: 22:5c:59:e3:7c:b3:68:d3:c3:4d:e9:33:b8:eb:64:13:a7:44: b0:13:14:64:b8:78:5b:a6:b3:03:78:6a:bc:3e:4d:58:b2:c5: e1:2a:79:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjUxMjMwMTkzNzMxWhcNMjYwMTA2MTkzNzMxWjAYMRYwFAYD VQQDDA02OTU0MjlmYi1jYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaK57QO7YPO6HftzO9dF5CVdqYKroF+8NGvVP+GKyLa1bwuh6NW3B8aN/oG2 zKE38muicACYJxoSb17fNzxwwSoyVCaidDDiMMUD4E72UDvwpnv6RmKSZKTHFX7C gzIEdRGvXKElIHxu+tw/qXW7tBPof0iKQxll6dAqEFvfdLZvII7RdA6b1n2vvOzX 78MxLhdB/EWc29jaF3ucoVpfuCA9RndrVFE2HUo74SOVSQRO8p83RvwRlww7VDjb UDTMN3b4V/qBDzF0S3IYXO/rPMc0U3wgEKsOqcadycClKn4s+pQCxeiMhi2gFFN3 KIrLIdnXvoJvv4xou09vAMovOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYlOYqS 9PwvPisoY/jcmP0G7FrhMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBunR1rqPAkg9eXd6NBIRwJNBBVua4Bdfbi3dh2OMFQME9v3I1OmcoB 3V8srqNAdRv2Um2QcMhkOawfc1sEdv1jUXbEK9rB+vKb7cNy9WzvBwrfGk+29pID KwTzBeMQ97BifVMvyqzG36Y023c/6PPuqmlo1kzHhcOaZp+8OwEF5ZlkauTKct6q dv1VxiZe99gqmYxrWYiN+Y4gdUnpLKqLCODCLFW4BZcE7cf11zEyTFeSlPue2cc9 cjIZ1fo4YPriPb4yRVmkEDOc0qLBBBuquiMWcKdSG8QiXFnjfLNo08NN6TO462QT p0SwExRkuHhbprMDeGq8Pk1YssXhKnkg -----END CERTIFICATE-----Generated at Wed Dec 31 00:28:45 2025 by rpki-client