This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: cYR97rq1fx9eINOWtI3nzzeB3gd9xTayWH7ZyadAve4= Subject key identifier: ED:70:D8:4A:4E:51:87:A7:93:73:98:97:4E:C6:00:43:DB:F2:1E:9D Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: 011C Signing time: Fri 05 Dec 2025 02:50:05 +0000 Manifest this update: Fri 05 Dec 2025 02:50:04 +0000 Manifest next update: Fri 12 Dec 2025 02:50:04 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: SplP6JU21WZnhBdbnOVXD6MQCEFBBK8o/PgX+kf0L4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Dec 5 02:50:04 2025 GMT Not After : Dec 12 02:50:04 2025 GMT Subject: CN=6932485d-50bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:08:21:e5:8a:49:59:ca:88:74:7a:7a:c6: 97:c0:d9:cf:af:9d:a5:bc:7f:6b:89:c9:24:d3:95: f0:24:8f:2e:ea:78:77:b7:fd:21:a8:1c:68:ee:02: f4:73:e1:a4:59:01:ab:5b:aa:73:82:29:40:2b:9c: 75:55:0a:bb:2e:71:9e:07:e5:cd:de:fd:93:2b:56: 1a:1b:fb:44:41:1a:eb:0b:3f:61:5e:2a:5d:90:71: 0c:fa:5e:3a:be:e4:0e:6e:36:b6:ad:11:ef:e9:86: e6:20:f0:5b:41:6a:28:67:2d:15:e8:b3:e7:c6:e4: 53:5c:21:54:d0:da:d7:7a:f6:83:21:ea:ec:c2:fa: 85:6c:50:a9:a6:78:46:52:75:4b:97:06:64:21:8b: b8:a1:06:48:e1:3f:cf:fa:52:5c:71:c5:70:d4:16: fa:10:6a:d2:89:c9:0b:91:99:53:f0:30:9d:2c:5b: 69:88:5e:07:ee:40:5a:41:93:83:48:8c:c8:ef:f7: 3c:48:92:6f:0e:3c:cc:a4:9c:65:e8:71:4f:97:d8: f2:19:d8:3b:d8:fc:35:2e:c7:05:bb:d1:e6:31:e4: 11:17:de:24:3d:7f:cf:3b:d7:b8:87:32:65:a8:49: a4:59:4c:77:e2:1a:8b:c8:a3:b4:18:43:20:6e:72: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:70:D8:4A:4E:51:87:A7:93:73:98:97:4E:C6:00:43:DB:F2:1E:9D X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:4a:6f:d7:21:05:36:0a:ed:b8:6b:42:66:d3:03:cb:fd: fc:b7:8a:f8:b8:1d:d8:54:61:a6:16:d0:b0:af:af:1d:a0:f1: 25:3b:4d:9c:7c:bc:41:ac:b7:1f:64:5d:14:73:b5:47:e8:45: 36:4f:f8:60:9a:6f:eb:af:22:04:c1:d6:70:f1:1e:22:e1:01: 15:28:14:bf:4a:7f:d9:ea:1e:62:5e:90:7d:54:dc:c8:fd:8b: 7c:42:42:7a:92:4c:03:08:49:39:20:78:f0:f4:0a:90:69:aa: 42:ea:ca:64:41:d2:1a:9f:ce:9d:d2:30:d0:60:35:f7:bc:93: b0:c5:7b:93:db:67:48:cd:aa:00:de:42:c6:2c:33:3f:f9:1f: 03:34:ba:f2:1c:4f:b6:dc:72:75:ac:1a:8d:26:4d:f5:0a:da: 94:78:d8:a9:ce:be:15:22:e3:92:a9:a9:99:24:eb:a8:29:56: 02:c0:54:1f:0b:b7:b7:76:f6:38:ae:b4:ea:79:d6:45:12:6a: ea:5d:13:75:97:90:93:83:f4:58:a7:f6:1a:0f:0b:91:29:fa: 1e:76:e1:95:a7:75:06:79:a6:24:02:52:dd:55:76:f4:ff:16: 52:f6:f8:c0:38:b4:f4:e4:b6:69:40:36:8b:11:8b:1e:21:47: 5b:61:3c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUxMjA1MDI1MDA0WhcNMjUxMjEyMDI1MDA0WjAYMRYwFAYD VQQDEw02OTMyNDg1ZC01MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY0IIeWKSVnKiHR6esaXwNnPr52lvH9rickk05XwJI8u6nh3t/0hqBxo7gL0 c+GkWQGrW6pzgilAK5x1VQq7LnGeB+XN3v2TK1YaG/tEQRrrCz9hXipdkHEM+l46 vuQObja2rRHv6YbmIPBbQWooZy0V6LPnxuRTXCFU0NrXevaDIerswvqFbFCppnhG UnVLlwZkIYu4oQZI4T/P+lJcccVw1Bb6EGrSickLkZlT8DCdLFtpiF4H7kBaQZOD SIzI7/c8SJJvDjzMpJxl6HFPl9jyGdg72Pw1LscFu9HmMeQRF94kPX/PO9e4hzJl qEmkWUx34hqLyKO0GEMgbnLCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1w2EpO UYenk3OYl07GAEPb8h6dMB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHy0pv1yEFNgrtuGtCZtMDy/38t4r4uB3YVGGmFtCwr68doPElO02c fLxBrLcfZF0Uc7VH6EU2T/hgmm/rryIEwdZw8R4i4QEVKBS/Sn/Z6h5iXpB9VNzI /Yt8QkJ6kkwDCEk5IHjw9AqQaapC6spkQdIan86d0jDQYDX3vJOwxXuT22dIzaoA 3kLGLDM/+R8DNLryHE+23HJ1rBqNJk31CtqUeNipzr4VIuOSqamZJOuoKVYCwFQf C7e3dvY4rrTqedZFEmrqXRN1l5CTg/RYp/YaDwuRKfoeduGVp3UGeaYkAlLdVXb0 /xZS9vjAOLT05LZpQDaLEYseIUdbYTx3 -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:38 2025 by rpki-client