This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: p2K0F2WzDRE5CgQFNLew9ZlZj59BXXhr9iPQVU9k+m4= Subject key identifier: 81:FE:28:9E:D0:67:BF:EB:BE:F1:F7:1E:1D:6C:76:B2:5A:A0:93:AC Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 01A5 Signing time: Sun 21 Dec 2025 02:35:20 +0000 Manifest this update: Sun 21 Dec 2025 02:35:19 +0000 Manifest next update: Sun 28 Dec 2025 02:35:19 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: ZYpVxD1KojDlWp1EsjGJAZYGy+eT20DXNxlUjzI6ccI=) 2: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) 3: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 4: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 5: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 6: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Dec 21 02:35:19 2025 GMT Not After : Dec 28 02:35:19 2025 GMT Subject: CN=69475ce8-d299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:7b:b7:2c:dc:e4:95:f8:01:f3:58:cd:40: 9b:1e:3f:d5:f3:95:2b:7d:23:ce:83:86:58:0c:94: 5c:fa:a9:3e:d9:38:e2:08:ec:06:be:9d:b0:91:da: 92:0b:41:87:60:cd:e3:7c:63:59:0b:62:bf:e7:5b: 60:94:cd:4e:39:0b:b8:89:d9:8e:7f:10:f8:f3:a0: 5a:bb:d8:ca:1e:73:01:80:e7:c6:82:11:70:ed:6d: 5a:3b:65:2d:df:61:67:1f:16:7f:7e:10:ef:a9:b8: bc:aa:13:1a:5a:60:d6:54:69:bf:b6:e2:63:b0:59: ba:a7:27:1d:6b:fe:a7:7e:82:88:60:bc:f9:89:be: a1:05:c2:7f:9c:b5:79:9d:54:cb:6b:1d:cb:44:72: 94:0f:ba:45:1e:ee:b3:84:f5:9b:93:a9:40:86:0d: 33:dd:8b:b9:c7:21:4e:5f:3f:b3:8f:d0:06:3c:b0: 7c:c5:f4:7d:68:7b:02:2c:0f:7a:12:da:f4:7a:5a: 36:67:4a:6f:25:21:05:63:7e:32:1e:b6:3b:f1:e8: 43:8b:3f:d0:3b:76:ca:e4:bf:c5:e6:a8:bc:89:1a: 4f:55:e5:02:25:67:98:92:27:f7:4d:9d:22:a9:a2: c9:e2:2f:db:ba:3a:f3:38:18:26:45:6b:17:6b:1f: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:28:9E:D0:67:BF:EB:BE:F1:F7:1E:1D:6C:76:B2:5A:A0:93:AC X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:67:e7:15:25:c7:87:42:80:54:39:24:7c:75:11:bc:f0: a4:a6:4f:f0:ca:e9:13:57:47:f4:6e:9e:04:42:a2:2e:e1:45: 7b:49:27:6a:cc:3b:63:62:0a:af:a5:51:d4:c4:57:7b:04:c5: f3:43:ae:1b:dd:75:94:29:4c:c4:72:f6:ff:32:45:1c:db:60: 5c:42:b8:0c:39:ba:24:c9:4c:8e:5a:d3:ae:9b:4a:f2:4a:1d: ea:44:4b:67:f8:89:64:75:40:dd:28:24:ce:9c:70:76:18:b7: c5:95:e8:45:e2:ac:4b:6f:6c:8c:1a:8f:83:57:03:7f:3a:f9: 34:7a:66:69:cf:07:34:62:79:0a:bc:b8:77:f5:28:27:9f:18: 05:16:1c:c1:20:6d:3d:7e:66:4d:84:1d:ee:09:1f:15:51:b3: 10:af:3b:36:77:66:15:3b:79:31:f4:39:0a:6e:7f:63:8f:fd: ed:56:a7:c8:9a:d3:11:fc:f0:e9:2e:a0:b0:ac:3b:91:21:2f: 3f:55:06:dc:40:57:f3:83:6b:03:6d:8e:df:d7:c1:de:50:85: 55:a5:00:ea:88:80:19:83:b4:5c:d2:d8:86:83:e2:f3:62:fa: db:3f:94:fd:33:bb:db:88:aa:2d:2a:d4:44:54:e9:4d:a4:2a: b4:f7:bc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUxMjIxMDIzNTE5WhcNMjUxMjI4MDIzNTE5WjAYMRYwFAYD VQQDDA02OTQ3NWNlOC1kMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU17tyzc5JX4AfNYzUCbHj/V85UrfSPOg4ZYDJRc+qk+2TjiCOwGvp2wkdqS C0GHYM3jfGNZC2K/51tglM1OOQu4idmOfxD486Bau9jKHnMBgOfGghFw7W1aO2Ut 32FnHxZ/fhDvqbi8qhMaWmDWVGm/tuJjsFm6pycda/6nfoKIYLz5ib6hBcJ/nLV5 nVTLax3LRHKUD7pFHu6zhPWbk6lAhg0z3Yu5xyFOXz+zj9AGPLB8xfR9aHsCLA96 Etr0elo2Z0pvJSEFY34yHrY78ehDiz/QO3bK5L/F5qi8iRpPVeUCJWeYkif3TZ0i qaLJ4i/bujrzOBgmRWsXax9NaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH+KJ7Q Z7/rvvH3Hh1sdrJaoJOsMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBprmfnFSXHh0KAVDkkfHURvPCkpk/wyukTV0f0bp4EQqIu4UV7SSdq zDtjYgqvpVHUxFd7BMXzQ64b3XWUKUzEcvb/MkUc22BcQrgMObokyUyOWtOum0ry Sh3qREtn+IlkdUDdKCTOnHB2GLfFlehF4qxLb2yMGo+DVwN/Ovk0emZpzwc0YnkK vLh39SgnnxgFFhzBIG09fmZNhB3uCR8VUbMQrzs2d2YVO3kx9DkKbn9jj/3tVqfI mtMR/PDpLqCwrDuRIS8/VQbcQFfzg2sDbY7f18HeUIVVpQDqiIAZg7Rc0tiGg+Lz YvrbP5T9M7vbiKotKtREVOlNpCq097wG -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:47 2025 by rpki-client