This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: XnhWI3U9Rh6s6TL/UZJ/kUO3gyahTnEbxxe6W++oSqs= Subject key identifier: 42:D7:96:66:90:E1:5E:85:83:6A:9F:8B:D1:9F:E8:DB:33:8A:A1:22 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 2202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 21C2 Signing time: Sat 20 Dec 2025 15:44:48 +0000 Manifest this update: Sat 20 Dec 2025 15:44:48 +0000 Manifest next update: Sat 27 Dec 2025 15:44:48 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: pWESrFUrfcrkWvS2WCyAEVm3+v7aIpOUPvHf23q77Xg=) 2: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 3: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 5: 49567968D07011F0A2852929C4F9AE02.roa (hash: PF1d1ziol4FXUWz4ISGS+v7Olmqbj3/UyDns6YPBaT0=) 6: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: Dq1CKXIyNSfYIrpYzOR2XXicVsO2S1H/EK9/Tu0yc48=) 7: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) 8: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 9: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: ZKTM4IqqHXDwYNaYKhi6qetROiIF+dziZqdqeG6Vrkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8706 (0x2202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Dec 20 15:44:48 2025 GMT Not After : Dec 27 15:44:48 2025 GMT Subject: CN=6946c470-8737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:a8:d5:0a:9b:12:09:2b:eb:46:1f:78:f6: 99:de:96:10:d4:c5:1f:31:fd:1e:40:a8:94:76:cb: 43:c0:a1:73:e4:dc:1a:66:62:6b:88:91:58:85:ef: e3:73:ef:db:d4:9b:08:5a:57:28:f8:92:c2:ee:1e: 08:21:48:47:80:10:aa:a1:12:af:b9:54:fe:d7:f7: f8:a3:f6:49:dc:0c:ec:41:3d:40:6d:69:ce:d1:21: 84:f9:8e:21:24:ed:f8:c1:a5:08:4f:45:6a:c1:e0: 81:ff:4a:ad:2a:f1:d3:62:c9:d7:82:4f:e7:9f:aa: d9:e9:03:c7:1d:ce:2a:ae:8b:3e:93:35:47:9d:e5: da:99:31:09:26:de:60:7d:8e:b8:61:91:63:32:e4: ac:13:b8:72:b4:50:40:ad:b1:81:68:e3:b4:98:ef: 0f:88:27:21:0f:a4:b4:8b:70:87:e1:56:a1:e4:35: 59:c1:be:7c:56:b5:85:27:c1:c0:f6:91:28:5f:61: ad:1a:52:4d:6d:bb:ef:d9:e0:ec:70:96:e2:d6:7a: 10:bb:47:b6:83:6d:35:7b:88:e0:92:bf:d8:87:4c: e9:6f:a9:29:dc:bf:88:1d:c6:4d:fa:47:88:17:e0: 1a:0e:25:dc:f3:c4:38:d4:27:fe:a4:1e:40:e6:17: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:96:66:90:E1:5E:85:83:6A:9F:8B:D1:9F:E8:DB:33:8A:A1:22 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9a:6c:d1:d0:3c:29:31:cf:13:35:33:ba:d9:a7:e9:6e:13: 8d:fa:a2:2f:04:6d:b9:8b:6b:0a:22:0b:2b:c8:7d:93:01:d5: c6:83:35:24:55:35:a8:f0:42:4b:d6:78:85:c0:1b:d8:c0:ce: 6a:31:be:9a:ca:e5:e8:27:ec:6d:c5:d1:39:d3:48:dd:7e:d8: be:d6:ae:6a:20:4c:71:1d:86:1a:9d:a4:2a:8f:db:c4:83:35: 9c:5f:ff:73:28:4c:d2:f0:29:eb:66:a7:93:1b:bd:5d:de:18: fc:c4:2d:ee:42:9d:40:62:db:68:01:2b:3b:39:c8:2f:89:23: 29:8b:8f:0f:c5:d6:40:ce:fa:86:9f:e1:be:0c:7f:63:bd:f6: 28:e7:a3:67:1e:24:f0:59:44:75:ca:78:f3:9d:7c:69:be:99: 28:72:fe:c8:fc:3c:0d:b6:18:a1:9c:68:29:bb:96:a5:7e:2a: 81:72:ee:31:ab:ae:24:05:4b:dc:db:6b:bb:41:bc:f9:51:ed: be:e8:3e:10:e5:93:8b:58:68:ff:fa:96:9f:b3:c5:17:5c:30: 78:21:a4:06:85:b9:b9:69:a5:a1:8d:24:6a:3b:ca:0f:2a:0c: fd:be:d1:1c:1e:55:d1:ac:3d:39:10:0b:e5:58:e6:ef:87:79: 46:e9:a8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMjIwMTU0NDQ4WhcNMjUxMjI3MTU0NDQ4WjAYMRYwFAYD VQQDDA02OTQ2YzQ3MC04NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8c6o1QqbEgkr60YfePaZ3pYQ1MUfMf0eQKiUdstDwKFz5NwaZmJriJFYhe/j c+/b1JsIWlco+JLC7h4IIUhHgBCqoRKvuVT+1/f4o/ZJ3AzsQT1AbWnO0SGE+Y4h JO34waUIT0VqweCB/0qtKvHTYsnXgk/nn6rZ6QPHHc4qros+kzVHneXamTEJJt5g fY64YZFjMuSsE7hytFBArbGBaOO0mO8PiCchD6S0i3CH4Vah5DVZwb58VrWFJ8HA 9pEoX2GtGlJNbbvv2eDscJbi1noQu0e2g201e4jgkr/Yh0zpb6kp3L+IHcZN+keI F+AaDiXc88Q41Cf+pB5A5hf3rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELXlmaQ 4V6Fg2qfi9Gf6NsziqEiMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0mmzR0DwpMc8TNTO62afpbhON+qIvBG25i2sKIgsryH2TAdXGgzUk VTWo8EJL1niFwBvYwM5qMb6ayuXoJ+xtxdE500jdfti+1q5qIExxHYYanaQqj9vE gzWcX/9zKEzS8CnrZqeTG71d3hj8xC3uQp1AYttoASs7OcgviSMpi48PxdZAzvqG n+G+DH9jvfYo56NnHiTwWUR1ynjznXxpvpkocv7I/DwNthihnGgpu5alfiqBcu4x q64kBUvc22u7Qbz5Ue2+6D4Q5ZOLWGj/+pafs8UXXDB4IaQGhbm5aaWhjSRqO8oP Kgz9vtEcHlXRrD05EAvlWObvh3lG6agx -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:39 2025 by rpki-client