This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: tER6a+Lc7zatpvXDwpg28ydj6yUlGvjjKVHz3RKnVUo= Subject key identifier: 11:88:FA:C2:13:D1:5A:73:28:9B:AB:1F:5C:95:2E:27:6E:E7:C2:F8 Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 0C Signing time: Fri 19 Dec 2025 01:52:29 +0000 Manifest this update: Fri 19 Dec 2025 01:52:29 +0000 Manifest next update: Fri 26 Dec 2025 01:52:29 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: /ggTOZwQ+Sljs9AG2zXJTka8HQRneqyTgqPwBke5cgo=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Dec 19 01:52:29 2025 GMT Not After : Dec 26 01:52:29 2025 GMT Subject: CN=6944afdd-3e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:71:51:33:7a:a9:7a:42:3c:77:c4:fd:24: 24:c8:4f:86:42:46:c3:6f:d9:0e:85:ab:3a:84:2d: 4c:ea:97:bc:ba:94:97:43:fc:81:84:60:d5:7a:cd: e5:b3:0f:95:ac:04:69:f2:7e:1a:fe:fc:b3:9b:20: 6c:b8:ed:1a:a6:9f:4b:cb:27:f0:08:2b:ac:64:a0: be:b8:f6:2e:63:75:33:12:ab:e9:d8:16:43:53:8a: 50:c0:42:23:5e:b6:c0:98:97:c7:f3:01:10:2e:cc: 63:33:ff:8a:c9:9f:d7:2d:f2:0c:f7:ae:da:8d:37: 01:bc:e2:cb:5a:b1:af:a8:0e:9f:d2:cd:d8:73:dd: 0e:c8:93:76:0f:62:2d:2a:f5:ca:57:f7:eb:49:0e: d4:db:70:47:56:ee:65:aa:19:e3:aa:e0:b5:56:ac: 0b:c1:76:96:56:8d:0d:17:2b:f6:9f:0e:ad:32:f7: 24:dd:76:dd:52:e1:18:de:02:91:4e:cf:e5:e6:2a: 21:8e:a9:b4:1b:a8:cd:c9:f1:06:3c:3a:c3:37:74: 90:fb:27:13:f3:b2:5b:49:93:f1:93:bb:be:04:58: ae:1a:d4:7e:d2:63:79:1b:b6:ef:73:8f:f5:62:03: ce:49:03:73:a1:38:f1:94:e1:a9:c2:bb:5e:6f:29: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:FA:C2:13:D1:5A:73:28:9B:AB:1F:5C:95:2E:27:6E:E7:C2:F8 X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:16:52:e2:68:ac:88:90:47:6c:99:6b:92:ec:67:fd:20:55: e1:da:1d:5b:3d:df:bd:17:d5:af:1e:35:6e:02:8c:df:07:d2: 9f:6a:cf:a9:ec:56:0b:fe:15:a8:47:52:75:93:aa:11:63:d4: 35:a8:33:81:ac:d5:a8:75:7b:14:ce:6d:86:32:9d:50:5c:68: ab:7e:7d:51:35:6e:54:e8:22:59:71:fb:2b:f2:64:f7:0a:64: 34:a3:0e:1f:d3:c7:64:e1:fc:fb:df:07:88:f9:15:cf:79:22: c2:31:20:7f:b7:bc:98:65:86:0e:ba:9b:21:d3:5b:60:34:56: fb:36:4f:55:f6:ee:89:53:97:05:dd:fe:0d:fe:37:40:5e:99: af:7e:37:7d:a4:fa:34:26:57:ea:66:72:10:b1:63:4f:21:26: 11:4b:7b:67:51:e4:f5:06:cc:6c:82:93:28:93:1b:b5:79:c8: ad:50:a4:60:54:06:fb:76:40:81:48:dc:d3:a5:2d:11:fb:b0: dd:44:8d:74:d0:4a:bd:db:8a:db:a4:e2:1d:a0:8e:4a:75:a6: d8:97:6f:0c:af:f4:92:59:28:dc:d5:72:6f:9b:a0:ac:0f:cc: e6:45:7c:70:f8:09:1f:0e:83:8f:dc:bc:99:c3:aa:e8:b5:32: 5e:f7:a9:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNTEyMTkwMTUyMjlaFw0yNTEyMjYwMTUyMjlaMBgxFjAUBgNV BAMMDTY5NDRhZmRkLTNlN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPtnFRM3qpekI8d8T9JCTIT4ZCRsNv2Q6FqzqELUzql7y6lJdD/IGEYNV6zeWz D5WsBGnyfhr+/LObIGy47Rqmn0vLJ/AIK6xkoL649i5jdTMSq+nYFkNTilDAQiNe tsCYl8fzARAuzGMz/4rJn9ct8gz3rtqNNwG84stasa+oDp/Szdhz3Q7Ik3YPYi0q 9cpX9+tJDtTbcEdW7mWqGeOq4LVWrAvBdpZWjQ0XK/afDq0y9yTddt1S4RjeApFO z+XmKiGOqbQbqM3J8QY8OsM3dJD7JxPzsltJk/GTu74EWK4a1H7SY3kbtu9zj/Vi A85JA3OhOPGU4anCu15vKVBDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEYj6whPR WnMom6sfXJUuJ27nwvgwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYWUuJorIiQR2yZa5LsZ/0gVeHaHVs9370X1a8eNW4CjN8H0p9qz6ns Vgv+FahHUnWTqhFj1DWoM4Gs1ah1exTObYYynVBcaKt+fVE1blToIllx+yvyZPcK ZDSjDh/Tx2Th/PvfB4j5Fc95IsIxIH+3vJhlhg66myHTW2A0Vvs2T1X27olTlwXd /g3+N0Bema9+N32k+jQmV+pmchCxY08hJhFLe2dR5PUGzGyCkyiTG7V5yK1QpGBU Bvt2QIFI3NOlLRH7sN1EjXTQSr3bituk4h2gjkp1ptiXbwyv9JJZKNzVcm+boKwP zOZFfHD4CR8Og4/cvJnDqui1Ml73qS4= -----END CERTIFICATE-----Generated at Sat Dec 20 00:38:49 2025 by rpki-client