This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json) Hash identifier: uA+PxpSlB6pTJDNaMBl6HhbGO19PhbJnK0zvYtLxIDw= Subject key identifier: E4:28:08:1D:48:63:DD:F2:E2:CB:E7:E0:21:18:D2:59:82:84:BB:80 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft Manifest number: 37 Signing time: Thu 04 Dec 2025 20:01:31 +0000 Manifest this update: Thu 04 Dec 2025 20:01:31 +0000 Manifest next update: Thu 11 Dec 2025 20:01:31 +0000 Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: Yrm18yPGoI0a8rVmKAFauaMUbhA+bAVfb/EbseNgF6A=) 2: 844A140AC5F111F08382761DC4F9AE02.roa (hash: Gx2kCxxEj3/RIVTnJMerfYLqRKpDP3Xj2fha+8LVQi8=) 3: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: lPYCcJwpQhTwYbnLcej2EE1L4oSnFREXIyfOYx7DkzU=) 4: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: oCw/U7EHZyY3epAeaKjuRj0uw2tokHOQeiiiuBTFKyU=) 5: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=) 6: 8DF67C6AC5EB11F0BC424964C4F9AE02.roa (hash: Jh4KCNzZjKqM4r3/qqC/nIIfiTNy+SLhz86KNl2loAY=) 7: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: r4LE1v/40b0WOCFXtWlsGTCc5sxQVvVVfzbmBEp1ue4=) 8: D8511C62C5F911F08390847DC4F9AE02.roa (hash: mPN4v6Wr0i53K2v54rMGBAtCPDW2RDtBsIS7kf2niPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Dec 4 20:01:31 2025 GMT Not After : Dec 11 20:01:31 2025 GMT Subject: CN=6931e89b-1725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:a4:ec:7f:28:0c:ea:db:30:02:31:76:62: f0:2c:f2:93:a3:8d:b6:d4:9b:5c:da:63:65:17:b6: 09:99:4b:cd:8b:4f:ff:02:2a:0b:0c:8a:6c:b6:9c: 4e:35:ce:78:c9:f4:8b:cd:e9:26:c6:d4:c8:1e:55: 2a:fe:26:6a:d2:8a:fb:41:43:76:0c:60:48:14:e0: e3:06:89:24:e9:fd:46:97:60:90:18:78:fc:2e:e5: 1e:78:d0:9a:66:b8:ca:25:f5:02:1b:9d:82:89:0a: 6f:f0:d5:de:b2:89:e1:16:c7:dc:f3:75:d0:4e:81: bf:9f:1a:a8:c7:31:92:d5:99:57:1b:2a:83:08:f5: 04:76:af:8a:e8:e0:0c:7a:a5:dc:37:52:5b:d3:ba: 71:70:34:d5:2a:f6:a4:76:27:ea:7d:e2:63:3b:17: 24:c3:17:11:37:89:de:b0:27:18:a5:5a:46:39:8d: dc:f3:e7:ed:23:15:40:25:bf:99:30:71:8f:bd:a4: 08:e7:16:89:77:16:3e:22:6e:3d:1a:c1:4c:a1:21: 01:43:82:ee:75:34:e7:af:72:47:cf:52:19:ea:cc: 03:5e:88:f3:aa:40:58:89:c3:ef:4a:3f:ad:44:65: ca:23:6a:09:9c:ae:1e:7b:e0:5f:a4:f7:1c:02:5f: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:08:1D:48:63:DD:F2:E2:CB:E7:E0:21:18:D2:59:82:84:BB:80 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d5:c9:35:92:43:fb:e4:5b:c8:65:7b:15:de:de:51:29:97: 56:ab:8e:cf:a4:63:5b:e4:13:e6:5b:32:37:1a:72:f6:a0:65: 1d:66:8a:b2:1b:71:93:2b:68:57:68:11:ca:a0:08:1f:29:48: 7d:7e:80:0e:50:3d:8e:79:b0:0d:8b:71:3d:ce:2b:9d:03:0b: 2b:69:0e:24:31:2f:ba:c4:9d:85:5a:ed:ba:53:ec:54:a7:6a: b9:70:95:1e:bd:89:0f:82:b2:e9:c1:97:4c:aa:c2:38:38:35: cf:7a:a0:a9:fe:5e:ea:ce:bf:ad:2c:bf:34:de:eb:ec:b9:59: 95:0b:f1:1a:af:24:7c:53:f6:e0:7c:bf:f0:85:7f:79:78:72: d7:83:26:aa:d9:95:35:dc:00:fb:e4:f0:32:52:c1:13:e2:14: d2:59:e8:59:0c:70:b4:6e:a5:2c:66:2e:af:03:ff:47:73:b3: 87:b2:60:73:85:bb:6a:2b:2c:03:d0:4b:b2:f8:2f:1c:a3:ee: 45:cc:5f:02:bb:b3:4a:74:84:c1:d0:e9:01:19:54:de:19:bb: eb:cf:8f:56:e6:58:4e:26:e9:25:52:06:4c:ab:d2:08:7a:77: 6b:c9:5b:b4:47:46:21:93:6f:1d:4d:35:7c:a5:58:3a:08:ec: 7b:20:b7:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTEyMDQyMDAxMzFaFw0yNTEyMTEyMDAxMzFaMBgxFjAUBgNV BAMTDTY5MzFlODliLTE3MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgNqTsfygM6tswAjF2YvAs8pOjjbbUm1zaY2UXtgmZS82LT/8CKgsMimy2nE41 znjJ9IvN6SbG1MgeVSr+JmrSivtBQ3YMYEgU4OMGiSTp/UaXYJAYePwu5R540Jpm uMol9QIbnYKJCm/w1d6yieEWx9zzddBOgb+fGqjHMZLVmVcbKoMI9QR2r4ro4Ax6 pdw3UlvTunFwNNUq9qR2J+p94mM7FyTDFxE3id6wJxilWkY5jdzz5+0jFUAlv5kw cY+9pAjnFol3Fj4ibj0awUyhIQFDgu51NOevckfPUhnqzANeiPOqQFiJw+9KP61E Zcojagmcrh574F+k9xwCX/ttAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5CgIHUhj 3fLiy+fgIRjSWYKEu4AwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0M2MkIyOTg2OTM0MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDht MWNQbnlYNXJkRHpkcHRONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDVyTWSQ/vkW8hlexXe3lEpl1arjs+kY1vkE+ZbMjcacvagZR1mirIb cZMraFdoEcqgCB8pSH1+gA5QPY55sA2LcT3OK50DCytpDiQxL7rEnYVa7bpT7FSn arlwlR69iQ+CsunBl0yqwjg4Nc96oKn+XurOv60svzTe6+y5WZUL8RqvJHxT9uB8 v/CFf3l4cteDJqrZlTXcAPvk8DJSwRPiFNJZ6FkMcLRupSxmLq8D/0dzs4eyYHOF u2orLAPQS7L4Lxyj7kXMXwK7s0p0hMHQ6QEZVN4Zu+vPj1bmWE4m6SVSBkyr0gh6 d2vJW7RHRiGTbx1NNXylWDoI7Hsgt4M= -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:13 2025 by rpki-client