This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: dmimi5Zw++4WM5y4Fil0uyHCX/6mBHcTzNasyf4O88o= Subject key identifier: 71:3C:A3:6C:9C:5A:22:F9:36:18:1C:6E:48:F4:96:19:46:A1:94:ED Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 0618 Signing time: Thu 18 Dec 2025 22:11:32 +0000 Manifest this update: Thu 18 Dec 2025 22:11:31 +0000 Manifest next update: Thu 25 Dec 2025 22:11:31 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: 4Wp3F8IJOp7k+4YCMjkgkQbQ3OpVRnUcsrLMRr8t8V8=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: S5y137jYfy0MIB/O4qGenQWe0yCgY06a7wP6x5FBr7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Dec 18 22:11:31 2025 GMT Not After : Dec 25 22:11:31 2025 GMT Subject: CN=69447c14-bd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:20:2a:10:2e:62:d0:c7:58:7c:87:67:9d: 52:53:e3:24:08:38:62:bd:17:0b:57:58:f9:4d:06: 6c:2e:be:2e:75:ab:ca:88:72:8c:ea:28:61:07:9f: 9f:89:49:11:df:79:c8:70:59:61:9d:23:b7:d9:04: b4:4e:63:40:23:df:6b:98:4f:4f:34:a7:51:b2:48: 98:6c:df:30:ed:15:76:01:72:ef:e4:3b:bb:3d:ae: e7:76:cb:fb:87:a6:06:11:48:40:16:f7:9b:67:ea: e3:2b:c3:8b:71:28:39:16:88:d7:97:91:b2:79:1d: f6:31:e9:e9:bc:09:b0:22:1c:35:12:66:aa:78:72: 88:da:70:23:e4:ce:c4:cc:71:1f:6d:57:c5:0a:1a: 66:00:4b:bb:7c:e0:f0:82:79:e0:4f:58:ba:1e:58: d3:0a:79:2e:a0:c9:0b:a4:6c:e1:61:d4:d4:9a:1c: ce:ac:1c:6c:c9:6a:96:e3:76:c9:65:63:f7:58:5a: 09:fd:52:14:7d:99:bc:66:f0:5c:1b:8b:5c:85:11: d3:48:14:89:49:aa:82:40:7e:18:7b:21:22:be:69: 08:9c:70:9f:3e:b9:55:2b:13:52:ae:bf:ea:9b:02: 4c:42:e3:e2:d2:f0:3c:6c:af:60:c6:02:1e:fe:77: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:A3:6C:9C:5A:22:F9:36:18:1C:6E:48:F4:96:19:46:A1:94:ED X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8a:f3:24:b3:d6:96:5a:08:7d:2b:86:ba:a6:a9:33:9e:a4: 76:8e:33:c0:a5:1d:12:f7:34:fb:8d:09:f7:d2:10:2b:ea:2b: 64:26:65:76:48:42:09:ca:3c:b7:42:6f:07:c6:84:fb:22:d0: bb:ef:f9:fa:cf:d2:99:26:7e:a8:e8:81:c6:8d:d8:7b:2e:a2: 70:45:a8:d4:64:79:ac:bb:22:18:1c:b2:40:50:62:17:a3:37: 4e:48:2b:20:1f:63:44:5a:87:ef:f2:59:13:6a:02:6c:84:c1: 15:94:08:03:d9:1a:56:f9:3c:68:f3:b2:00:f4:9b:92:d8:e5: b0:ed:ee:53:6b:38:a2:2d:c1:c8:e5:f9:2f:47:df:ae:be:b7: 17:41:f5:b6:68:22:4d:e4:86:cb:e1:77:91:d0:65:8d:b4:21: 31:8b:65:3c:bb:9d:e9:c7:30:2b:29:39:84:53:20:44:ba:ae: cc:3b:59:b1:a5:6d:16:7e:d4:7e:84:db:7f:5e:1e:b4:d7:b2: 94:dc:3c:25:fa:8f:20:fa:8b:36:df:81:b6:aa:43:f7:22:84: c9:93:56:bf:94:cb:c0:f1:36:ae:7b:5d:e0:a9:a0:5c:8b:fa: f2:52:bc:86:22:bc:46:b7:49:3c:b9:d2:39:c6:f1:70:8b:05: 95:5d:a8:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUxMjE4MjIxMTMxWhcNMjUxMjI1MjIxMTMxWjAYMRYwFAYD VQQDDA02OTQ0N2MxNC1iZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqEgKhAuYtDHWHyHZ51SU+MkCDhivRcLV1j5TQZsLr4udavKiHKM6ihhB5+f iUkR33nIcFlhnSO32QS0TmNAI99rmE9PNKdRskiYbN8w7RV2AXLv5Du7Pa7ndsv7 h6YGEUhAFvebZ+rjK8OLcSg5FojXl5GyeR32MenpvAmwIhw1EmaqeHKI2nAj5M7E zHEfbVfFChpmAEu7fODwgnngT1i6HljTCnkuoMkLpGzhYdTUmhzOrBxsyWqW43bJ ZWP3WFoJ/VIUfZm8ZvBcG4tchRHTSBSJSaqCQH4YeyEivmkInHCfPrlVKxNSrr/q mwJMQuPi0vA8bK9gxgIe/nfQGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE8o2yc WiL5Nhgcbkj0lhlGoZTtMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpivMks9aWWgh9K4a6pqkznqR2jjPApR0S9zT7jQn30hAr6itkJmV2 SEIJyjy3Qm8HxoT7ItC77/n6z9KZJn6o6IHGjdh7LqJwRajUZHmsuyIYHLJAUGIX ozdOSCsgH2NEWofv8lkTagJshMEVlAgD2RpW+Txo87IA9JuS2OWw7e5TaziiLcHI 5fkvR9+uvrcXQfW2aCJN5IbL4XeR0GWNtCExi2U8u53pxzArKTmEUyBEuq7MO1mx pW0WftR+hNt/Xh6017KU3Dwl+o8g+os234G2qkP3IoTJk1a/lMvA8Taue13gqaBc i/ryUryGIrxGt0k8udI5xvFwiwWVXagK -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:41 2025 by rpki-client