This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: RsoP/b4AmqQFxzynUwM/8jZxV7qteZoP+wks8gnVagc= Subject key identifier: 51:D7:29:E1:7D:65:02:FA:37:C0:A5:12:6E:D4:1A:F2:17:A7:A5:C0 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 067A Signing time: Sat 06 Dec 2025 21:26:02 +0000 Manifest this update: Sat 06 Dec 2025 21:26:01 +0000 Manifest next update: Sat 13 Dec 2025 21:26:01 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: stZXEWqIjAkLmfpnhrm6bpe2xXub8wjirQxA2Dht1Tw=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Dec 6 21:26:01 2025 GMT Not After : Dec 13 21:26:01 2025 GMT Subject: CN=69349f6a-2c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:2c:c7:14:e1:ae:5e:f8:28:b5:f4:2b:82: 2d:71:b9:23:30:d3:04:ef:ad:02:aa:d8:7d:aa:cf: fe:33:cd:29:b3:83:72:20:b2:fe:20:8b:3e:ea:7a: 97:4e:eb:09:a6:8d:d5:f9:1d:d1:39:9f:a3:15:6b: 87:08:71:db:9b:9c:ac:63:f2:b6:6f:85:86:43:e0: 1d:90:ac:1b:95:a6:1f:70:1f:43:bc:5a:23:7c:f0: 35:28:bf:01:0d:d2:64:c4:7b:77:d0:de:a7:77:d9: 83:73:65:b2:bb:9f:68:c9:7f:55:5d:53:9e:97:2e: 1c:76:f3:90:1d:cb:28:ec:e5:5f:c8:1e:2a:bb:42: 70:4d:e6:1b:8d:54:45:b0:da:b9:28:01:06:e6:4b: c7:80:de:29:ac:a7:22:00:48:1e:a0:bf:b3:6d:36: b3:82:1a:fc:7c:c8:99:bb:e4:9d:07:ba:0a:86:ad: bd:25:29:1f:ac:83:57:58:e1:5f:de:2e:a3:1a:f1: 78:b4:9c:6c:49:81:08:c4:97:8b:1b:de:93:b3:6f: 99:77:74:c9:64:93:af:ea:08:32:a3:fc:5d:93:15: dc:35:c5:95:ed:15:82:ad:92:0c:01:74:34:12:d0: 84:6a:9a:21:35:2f:f9:74:80:7d:5a:f6:cf:22:cb: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D7:29:E1:7D:65:02:FA:37:C0:A5:12:6E:D4:1A:F2:17:A7:A5:C0 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:52:23:82:8c:9d:dc:08:6e:28:88:5f:e2:e1:30:8c:d6:3e: 32:14:3f:c8:22:e5:74:84:ed:00:b7:9c:ea:47:e3:09:83:2e: b6:9d:5e:c3:9b:21:3a:7c:91:2d:b1:0e:fe:42:de:bc:8d:8a: 52:1d:2a:75:45:38:2d:3c:c3:01:db:79:b0:e0:2c:c3:27:83: 17:74:d0:c1:ba:5c:e7:71:15:94:bd:52:0c:9e:12:c9:bf:8b: 66:a0:9a:3f:09:f9:20:70:35:5b:1a:5d:88:27:0a:76:fb:4b: fb:b5:d9:77:47:bd:22:69:60:a7:c0:81:88:c2:d6:16:c3:e0: db:08:12:d6:be:4c:7c:3b:40:26:76:5e:90:e5:d2:10:38:a4: e5:59:2a:45:49:e6:6b:2a:22:47:ee:31:b7:6c:1c:3f:1e:2a: de:f1:01:5a:be:df:3f:d3:c7:09:54:7b:50:7f:e9:e9:a7:e4: 74:4d:45:38:8e:19:bb:ca:43:2a:e8:d1:e6:a5:45:a8:95:90: 51:c3:68:1a:fb:85:14:8c:7d:ba:51:fa:92:83:93:22:08:4f: f5:b2:c1:d7:4c:e1:2d:08:57:6c:c5:80:ab:25:a6:ad:8b:73: 8b:ce:4e:88:e4:4a:e1:77:9a:d1:fc:ea:79:7f:a0:43:e5:4d: 86:d9:c3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUxMjA2MjEyNjAxWhcNMjUxMjEzMjEyNjAxWjAYMRYwFAYD VQQDEw02OTM0OWY2YS0yYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MQsxxThrl74KLX0K4ItcbkjMNME760Cqth9qs/+M80ps4NyILL+IIs+6nqX TusJpo3V+R3ROZ+jFWuHCHHbm5ysY/K2b4WGQ+AdkKwblaYfcB9DvFojfPA1KL8B DdJkxHt30N6nd9mDc2Wyu59oyX9VXVOely4cdvOQHcso7OVfyB4qu0JwTeYbjVRF sNq5KAEG5kvHgN4prKciAEgeoL+zbTazghr8fMiZu+SdB7oKhq29JSkfrINXWOFf 3i6jGvF4tJxsSYEIxJeLG96Ts2+Zd3TJZJOv6ggyo/xdkxXcNcWV7RWCrZIMAXQ0 EtCEapohNS/5dIB9WvbPIsvRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHXKeF9 ZQL6N8ClEm7UGvIXp6XAMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGUiOCjJ3cCG4oiF/i4TCM1j4yFD/IIuV0hO0At5zqR+MJgy62nV7D myE6fJEtsQ7+Qt68jYpSHSp1RTgtPMMB23mw4CzDJ4MXdNDBulzncRWUvVIMnhLJ v4tmoJo/CfkgcDVbGl2IJwp2+0v7tdl3R70iaWCnwIGIwtYWw+DbCBLWvkx8O0Am dl6Q5dIQOKTlWSpFSeZrKiJH7jG3bBw/Hire8QFavt8/08cJVHtQf+npp+R0TUU4 jhm7ykMq6NHmpUWolZBRw2ga+4UUjH26UfqSg5MiCE/1ssHXTOEtCFdsxYCrJaat i3OLzk6I5Erhd5rR/Op5f6BD5U2G2cPn -----END CERTIFICATE-----Generated at Sun Dec 7 01:31:19 2025 by rpki-client