This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: 0PJESCD9mEMMQx3+PEgMTIOgIBDQM5BmgifcJ758a14= Subject key identifier: 4E:9B:B0:09:6B:D8:6F:40:0E:10:C7:37:9D:EE:C8:4F:44:FB:1C:91 Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 15 Signing time: Fri 19 Dec 2025 02:32:58 +0000 Manifest this update: Fri 19 Dec 2025 02:32:58 +0000 Manifest next update: Fri 26 Dec 2025 02:32:58 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: grwb/AwY9s0aTiDHD0q57G53DQFte4Hj2QKbohQhlG4=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: APCWlv9KWNhsYVPgkQls3QyyU6JAY4toh5J0PYVgq2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Dec 19 02:32:58 2025 GMT Not After : Dec 26 02:32:58 2025 GMT Subject: CN=6944b95a-7561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:d4:8a:a1:5a:f9:00:a7:79:ee:a6:c8:46: 21:9b:f8:bf:e5:55:bd:2f:00:78:2e:94:a1:27:c6: 27:cb:1e:ce:a8:21:0e:d8:38:92:f4:ca:0e:7d:27: 8f:5a:6c:0d:a5:78:22:ff:9f:82:b7:17:88:d1:fa: 0d:ad:9a:b1:ff:63:2b:e9:2b:ef:31:a3:09:d9:55: 26:1d:0c:61:5f:13:51:b3:df:c9:06:c3:45:69:7a: 6b:db:f8:67:cd:ff:36:0a:ac:23:09:43:1a:18:5c: c6:9a:ec:a1:1d:1a:f3:bd:c6:26:6c:c2:59:08:87: 8a:22:02:e0:f5:0c:e8:30:61:e5:9c:d6:a2:42:c1: 9b:04:66:11:b8:72:e7:fa:7e:cf:86:8f:72:4c:6d: c7:fc:67:b0:f3:b2:6f:8d:d3:f7:39:83:c9:5a:25: 01:55:9f:44:86:83:cb:38:57:23:ef:7b:29:ca:06: 9f:75:8e:8f:3f:16:60:41:47:ce:03:77:02:c9:6a: e0:15:a7:4c:f1:0b:ea:11:54:cf:c9:a2:77:a6:1f: 9f:25:a2:7c:f0:e1:da:4d:a3:19:d5:b0:79:24:d0: 23:19:ab:52:39:fc:fe:3a:4c:e8:eb:ba:b8:6c:e1: 38:3b:47:91:a3:c8:56:4b:59:f6:98:9f:bc:73:3b: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9B:B0:09:6B:D8:6F:40:0E:10:C7:37:9D:EE:C8:4F:44:FB:1C:91 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b8:d2:7d:62:ed:cb:2f:2e:b8:29:b5:8c:73:43:a0:79:d5: f4:f7:ca:98:82:29:a4:ea:00:4b:90:1a:21:20:b2:a7:c7:9d: d8:56:80:d5:7b:9a:b3:f3:05:ed:56:25:c2:7c:25:23:1b:3f: 60:c2:4a:97:28:cc:f3:37:89:aa:6c:02:38:14:2e:06:ab:63: 16:a3:5c:0f:9c:c1:53:e6:3c:7a:6a:46:5f:23:4d:48:c2:37: 18:de:12:e8:38:f9:47:e3:a9:b2:f1:47:8b:7d:a4:6d:5e:a8: c2:35:6b:4a:37:ac:95:ec:72:d6:07:42:47:33:c6:5f:dd:bb: 6d:13:e6:d6:95:2f:3d:17:69:63:4e:47:d0:d3:18:9c:3c:c4: dd:71:df:df:14:68:1c:91:36:51:b1:c8:c6:89:93:ef:79:7f: 9a:2c:13:38:56:37:0d:78:99:64:10:b2:1a:a8:37:6e:9d:77: 05:09:7c:c9:34:2a:32:41:89:46:75:25:f1:a0:11:0c:2b:20: 7c:66:27:59:ed:25:d2:33:83:fb:ea:0b:91:21:76:6e:99:b0: d1:ff:95:08:da:a1:20:78:9b:d0:43:55:d5:bd:fc:e5:b6:92: 78:22:6c:85:1b:47:cb:9e:00:fb:63:b6:4d:fd:15:e2:a3:f4: 12:1c:ef:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNTEyMTkwMjMyNThaFw0yNTEyMjYwMjMyNThaMBgxFjAUBgNV BAMMDTY5NDRiOTVhLTc1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDStNSKoVr5AKd57qbIRiGb+L/lVb0vAHgulKEnxifLHs6oIQ7YOJL0yg59J49a bA2leCL/n4K3F4jR+g2tmrH/YyvpK+8xownZVSYdDGFfE1Gz38kGw0Vpemvb+GfN /zYKrCMJQxoYXMaa7KEdGvO9xiZswlkIh4oiAuD1DOgwYeWc1qJCwZsEZhG4cuf6 fs+Gj3JMbcf8Z7Dzsm+N0/c5g8laJQFVn0SGg8s4VyPveynKBp91jo8/FmBBR84D dwLJauAVp0zxC+oRVM/JonemH58lonzw4dpNoxnVsHkk0CMZq1I5/P46TOjrurhs 4Tg7R5GjyFZLWfaYn7xzO92jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTpuwCWvY b0AOEMc3ne7IT0T7HJEwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhB T3dnRkhUTS03VVllRDJXQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAK40n1i7csvLrgptYxzQ6B51fT3ypiCKaTqAEuQGiEgsqfHndhWgNV7 mrPzBe1WJcJ8JSMbP2DCSpcozPM3iapsAjgULgarYxajXA+cwVPmPHpqRl8jTUjC NxjeEug4+UfjqbLxR4t9pG1eqMI1a0o3rJXsctYHQkczxl/du20T5taVLz0XaWNO R9DTGJw8xN1x398UaByRNlGxyMaJk+95f5osEzhWNw14mWQQshqoN26ddwUJfMk0 KjJBiUZ1JfGgEQwrIHxmJ1ntJdIzg/vqC5Ehdm6ZsNH/lQjaoSB4m9BDVdW9/OW2 kngibIUbR8ueAPtjtk39FeKj9BIc7/Q= -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:50 2025 by rpki-client