This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: ShDo3XDpv5Oycz9wC9JbKRUOsHa7BB0KMFBKAuDaayM= Subject key identifier: EA:4D:D9:50:AA:38:EF:21:77:B2:F4:04:4B:E3:EA:D3:DD:2B:64:35 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 08B5 Signing time: Sat 20 Dec 2025 19:54:53 +0000 Manifest this update: Sat 20 Dec 2025 19:54:53 +0000 Manifest next update: Sat 27 Dec 2025 19:54:53 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: Nt8pyCkuXJNsFcl41KhMI7t02KcGiXBAnxPvz25Sqi8=) 2: 097FE948B5D411F0B0C6A940C4F9AE02.roa (hash: KP2R1m2iHAsNa4Z3YCVwK/8wK6Mg0zZi0OmDMYURiVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Dec 20 19:54:53 2025 GMT Not After : Dec 27 19:54:53 2025 GMT Subject: CN=6946ff0d-9d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:14:bf:8d:8e:80:f7:c0:9d:1d:af:45:40: 4d:2b:c8:c5:89:01:9d:5d:9d:0c:ec:a7:86:b9:90: 86:fd:84:2d:ee:ee:9f:bd:37:3c:94:62:cf:2a:d4: f9:15:a5:71:00:47:ef:4a:65:69:20:a0:d0:6d:c7: 8e:cb:1f:60:6f:b9:0a:12:9f:86:e7:c1:f3:c6:89: 35:ab:dc:c9:35:4f:71:5d:ac:c1:c7:e1:c5:01:ea: a4:a6:34:8e:2a:41:e9:6f:2b:58:3f:f7:38:02:ef: 8a:52:33:9a:ac:4e:78:38:6b:d2:35:83:b3:35:6f: be:bf:13:c8:e7:2d:ad:71:40:55:0f:85:bc:89:89: 24:10:ee:4b:5e:85:87:fd:17:e7:5c:c5:ed:1c:3d: 01:bd:3f:9f:50:ec:de:c1:29:ae:53:df:77:55:89: 62:d6:89:bd:16:72:90:c0:11:fa:1d:03:9d:88:ef: cb:d1:99:47:72:2c:7c:d8:a4:66:33:e5:b0:dd:76: 94:03:4c:c9:6e:7d:82:91:20:3b:6d:b9:9a:9d:8b: d3:e9:ee:be:ba:d2:db:be:74:8c:ae:de:bb:68:7b: 16:fb:c1:a1:c6:b8:cd:de:b5:b1:29:72:0c:b4:06: 8a:9e:1f:75:04:1a:94:cc:5a:4e:57:27:da:80:7c: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:D9:50:AA:38:EF:21:77:B2:F4:04:4B:E3:EA:D3:DD:2B:64:35 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:81:12:89:ba:49:2e:ab:9d:88:4d:a5:e3:8a:e0:2d:82:e7: a0:e9:d1:19:cb:f0:b7:48:ad:ec:ba:50:59:b7:89:17:7e:72: 0b:46:f7:a0:c5:82:c8:d7:e5:5e:d6:ff:91:2a:23:86:9a:ac: 45:09:75:2b:e1:ff:25:a8:2d:eb:27:2c:a7:cf:ee:ce:b4:2f: c9:8a:dd:59:49:fd:11:9e:53:75:4a:1f:41:01:33:b3:58:83: 1b:ea:9e:2c:64:9c:76:78:4a:63:69:65:af:5b:bc:d1:96:04: 94:db:26:be:77:c3:66:24:98:2f:48:9e:56:fe:3a:27:cf:69: 84:70:cd:33:3c:bb:25:7e:71:b8:66:13:0d:aa:c9:5c:c8:ac: 24:9d:0d:56:b7:1c:6d:57:23:79:d5:a1:ee:14:00:a6:5d:3f: 0b:70:17:59:49:b1:39:94:b1:0d:28:40:0e:c1:57:9d:f1:99: 32:f4:30:52:f3:df:2e:b2:cb:98:df:5e:de:06:13:e3:17:e8: f1:a6:67:97:bb:6b:f7:b6:14:67:9a:c9:e7:ec:fd:70:96:2a: 8e:fe:fd:ff:d5:d1:bd:a6:89:47:75:6b:b7:f4:30:98:55:64: 11:c4:e7:49:ee:b4:49:8d:7f:b9:d9:e9:2a:ee:ba:e3:13:2b: 9d:8a:b6:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUxMjIwMTk1NDUzWhcNMjUxMjI3MTk1NDUzWjAYMRYwFAYD VQQDDA02OTQ2ZmYwZC05ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtkUv42OgPfAnR2vRUBNK8jFiQGdXZ0M7KeGuZCG/YQt7u6fvTc8lGLPKtT5 FaVxAEfvSmVpIKDQbceOyx9gb7kKEp+G58Hzxok1q9zJNU9xXazBx+HFAeqkpjSO KkHpbytYP/c4Au+KUjOarE54OGvSNYOzNW++vxPI5y2tcUBVD4W8iYkkEO5LXoWH /RfnXMXtHD0BvT+fUOzewSmuU993VYli1om9FnKQwBH6HQOdiO/L0ZlHcix82KRm M+Ww3XaUA0zJbn2CkSA7bbmanYvT6e6+utLbvnSMrt67aHsW+8GhxrjN3rWxKXIM tAaKnh91BBqUzFpOVyfagHwKmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpN2VCq OO8hd7L0BEvj6tPdK2Q1MB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsgRKJukkuq52ITaXjiuAtgueg6dEZy/C3SK3sulBZt4kXfnILRveg xYLI1+Ve1v+RKiOGmqxFCXUr4f8lqC3rJyynz+7OtC/Jit1ZSf0RnlN1Sh9BATOz WIMb6p4sZJx2eEpjaWWvW7zRlgSU2ya+d8NmJJgvSJ5W/jonz2mEcM0zPLslfnG4 ZhMNqslcyKwknQ1WtxxtVyN51aHuFACmXT8LcBdZSbE5lLENKEAOwVed8Zky9DBS 898ussuY317eBhPjF+jxpmeXu2v3thRnmsnn7P1wliqO/v3/1dG9polHdWu39DCY VWQRxOdJ7rRJjX+52ekq7rrjEyudiraC -----END CERTIFICATE-----Generated at Mon Dec 22 09:03:41 2025 by rpki-client