This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: cdXxWDhchyLeueyf0LDO7lj00DTYCQQKmY7NhwGhfeU= Subject key identifier: 62:C2:70:24:00:E2:53:B2:25:B8:D4:10:E6:EB:B9:00:C0:59:5C:0E Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 097A Signing time: Thu 18 Dec 2025 19:37:30 +0000 Manifest this update: Thu 18 Dec 2025 19:37:29 +0000 Manifest next update: Thu 25 Dec 2025 19:37:29 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: hRToyyJhMvNQhd84zV7jjnmRBoUJgU5JTpxVLRgm2ko=) 2: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 3: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 6: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Dec 18 19:37:29 2025 GMT Not After : Dec 25 19:37:29 2025 GMT Subject: CN=694457f9-9fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:d7:8c:01:fc:a0:66:e7:22:b3:4b:1b:7c: 40:fa:6f:5f:20:53:a0:91:b6:ff:e5:6f:4c:b9:ef: 3b:34:e2:66:89:bd:b8:e4:b6:73:7c:c6:43:52:f4: 1d:83:0c:2a:81:dd:39:48:7f:76:f6:d5:26:fd:87: 8f:f1:67:7f:66:bf:a5:29:ee:73:b1:f2:05:dd:56: b9:60:b7:e1:d0:b0:02:cd:f5:89:f1:94:82:30:2e: 0f:78:7a:4e:b0:3b:52:66:31:ea:75:4d:66:94:a7: a1:2f:ff:25:a3:45:3f:e3:fb:a5:39:66:e2:e9:c7: 3c:06:d3:b5:1f:8e:32:41:a6:c3:f2:cf:eb:58:1f: bb:a8:8e:9b:f4:7e:f8:6c:8a:ea:7d:2c:bb:72:fd: 7c:2e:58:87:2c:cc:74:ca:54:26:2e:b3:bb:83:d3: c7:f3:fc:21:9f:bf:7b:93:ee:f1:ea:a9:11:66:c1: eb:62:d2:13:c1:cc:2f:fc:2d:65:e7:50:81:d5:1e: dc:ff:9c:db:23:5b:ea:c7:0f:10:e1:c4:ec:69:98: c1:04:52:05:5f:5d:d2:41:86:b3:0b:71:ac:bb:ba: fd:c3:ab:14:59:55:bb:70:e2:25:ff:a4:62:78:e3: 8a:80:40:0c:7d:5f:62:52:c0:7d:c3:fd:f5:db:90: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:70:24:00:E2:53:B2:25:B8:D4:10:E6:EB:B9:00:C0:59:5C:0E X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:27:cf:8d:6b:d4:59:18:8e:f3:4a:eb:1e:32:3b:2b:b4:41: 34:96:d4:9c:3f:d8:14:5c:90:0b:64:99:44:ac:d8:48:ca:e2: 95:b1:a3:9a:af:3d:0c:76:f8:8c:1c:52:00:2f:fa:95:05:5e: 46:d0:68:38:47:15:fb:48:7e:d1:ef:e0:91:9b:bb:2e:bb:d1: a9:5d:00:22:48:de:2b:33:d3:3e:1f:c2:10:f2:42:45:be:ed: 44:bb:e2:fd:d6:91:f0:0b:88:a2:bb:06:02:ad:57:fe:c0:28: a6:84:eb:37:38:bf:82:91:d0:32:d8:7e:03:27:08:df:7b:40: 1a:bf:08:29:3e:c8:f1:d4:2f:c9:50:86:39:34:30:67:34:94: e5:5d:4a:f2:a9:1c:24:8b:d6:03:b7:65:31:fe:1a:7d:f6:6d: bd:e0:92:4f:f2:04:fe:c4:5f:46:78:1c:a9:9e:8b:70:b3:c1: 5a:02:d8:3a:1f:16:d4:9c:1d:92:15:24:3d:0b:ad:e7:b0:ef: 25:bd:06:94:84:61:6d:e0:6e:01:e7:e8:8e:3d:05:08:8b:23: 96:21:d4:6c:0e:6c:a0:9c:72:48:81:29:16:e9:fe:d2:02:11: 77:db:3e:c4:f8:5f:32:45:1c:1b:a7:82:13:58:9e:58:04:0e: 3d:89:8c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUxMjE4MTkzNzI5WhcNMjUxMjI1MTkzNzI5WjAYMRYwFAYD VQQDDA02OTQ0NTdmOS05ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttPXjAH8oGbnIrNLG3xA+m9fIFOgkbb/5W9Mue87NOJmib245LZzfMZDUvQd gwwqgd05SH929tUm/YeP8Wd/Zr+lKe5zsfIF3Va5YLfh0LACzfWJ8ZSCMC4PeHpO sDtSZjHqdU1mlKehL/8lo0U/4/ulOWbi6cc8BtO1H44yQabD8s/rWB+7qI6b9H74 bIrqfSy7cv18LliHLMx0ylQmLrO7g9PH8/whn797k+7x6qkRZsHrYtITwcwv/C1l 51CB1R7c/5zbI1vqxw8Q4cTsaZjBBFIFX13SQYazC3Gsu7r9w6sUWVW7cOIl/6Ri eOOKgEAMfV9iUsB9w/3125C4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLCcCQA 4lOyJbjUEObruQDAWVwOMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlJ8+Na9RZGI7zSuseMjsrtEE0ltScP9gUXJALZJlErNhIyuKVsaOa rz0MdviMHFIAL/qVBV5G0Gg4RxX7SH7R7+CRm7suu9GpXQAiSN4rM9M+H8IQ8kJF vu1Eu+L91pHwC4iiuwYCrVf+wCimhOs3OL+CkdAy2H4DJwjfe0AavwgpPsjx1C/J UIY5NDBnNJTlXUryqRwki9YDt2Ux/hp99m294JJP8gT+xF9GeBypnotws8FaAtg6 HxbUnB2SFSQ9C63nsO8lvQaUhGFt4G4B5+iOPQUIiyOWIdRsDmygnHJIgSkW6f7S AhF32z7E+F8yRRwbp4ITWJ5YBA49iYx7 -----END CERTIFICATE-----Generated at Sat Dec 20 10:03:35 2025 by rpki-client