This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft File: Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json) Hash identifier: KyU6VJ4xqpZtOlsDwJuZh2q0knKNmU1NuEF5U0a4W60= Subject key identifier: FC:36:EF:ED:48:3F:59:07:00:5F:DA:AA:EE:62:D7:97:BC:C3:14:01 Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft Manifest number: 023E Signing time: Sun 07 Dec 2025 00:31:41 +0000 Manifest this update: Sun 07 Dec 2025 00:31:40 +0000 Manifest next update: Sun 14 Dec 2025 00:31:40 +0000 Files and hashes: 1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: wYVlS6vn0IzQ6EblxNVmq6ZuXEMNiIDkWR7ayVHXwbA=) 2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=) 3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=) 4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=) 5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Validity Not Before: Dec 7 00:31:40 2025 GMT Not After : Dec 14 00:31:40 2025 GMT Subject: CN=6934caed-6c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:30:fd:fa:f9:d2:42:8e:37:1c:e8:35:4f: 72:6b:59:3a:53:04:22:00:36:2c:ef:76:ff:f2:b8: 01:f0:f0:1f:84:bd:27:0e:2d:71:88:31:00:c5:6e: a1:b2:d2:93:b8:1d:2b:07:23:c1:0a:0f:49:ce:36: 68:38:c0:99:42:58:b6:4a:35:05:f0:db:74:21:6e: 81:13:58:28:73:70:14:3e:79:46:e3:8a:7f:b9:22: fd:07:ac:1b:4c:df:32:93:d7:a4:6d:e2:01:e9:14: ca:8b:34:11:29:87:19:84:c0:0d:d5:4f:f0:ad:40: 88:2a:7d:8e:0a:0b:3f:d6:e4:bb:3a:c7:e4:0d:90: 39:ed:f1:7e:8f:96:68:b3:90:c4:dc:ac:34:95:ba: 57:8d:70:a1:96:cc:83:1f:f3:8b:3a:9f:e0:9c:fd: 9c:a6:20:3f:51:3b:dc:7d:0d:15:ac:9e:45:bf:f6: 48:36:26:37:ef:5b:f3:76:e6:b5:08:92:75:00:9e: e9:2a:39:42:f5:d1:a8:0d:c1:69:32:67:c0:15:50: d4:f8:6a:bb:bb:a0:12:c3:60:63:9a:c0:db:26:6d: 33:e1:97:74:84:93:4b:11:28:59:c2:78:24:b2:0f: 3f:26:00:0e:fe:a1:b9:e1:a2:b5:42:75:1a:0e:bd: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:36:EF:ED:48:3F:59:07:00:5F:DA:AA:EE:62:D7:97:BC:C3:14:01 X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:28:1d:9d:ad:fb:52:5b:b3:67:a4:0e:25:5d:cf:d2:59:68: 35:88:42:fb:0e:df:a5:21:80:dc:18:c4:77:d1:5d:9e:b2:9b: 67:63:53:6b:d5:c1:fd:a0:41:15:f9:80:09:de:0f:59:8f:86: d7:cd:ad:0e:84:45:e7:44:b6:f0:8e:f2:56:58:85:d6:6b:ae: d8:6e:e5:3f:b7:87:49:ac:35:f8:b0:72:61:17:be:bd:d4:80: 1e:7e:c0:ed:48:e7:c3:69:85:31:7e:3a:a1:58:3f:62:45:8c: c0:8d:96:0d:19:ed:4c:99:fd:94:f6:ce:c8:5e:a1:fb:be:16: cf:04:fe:18:3b:35:16:da:1f:98:ba:7a:ba:14:cb:84:fc:87: a8:93:11:98:1a:d0:17:e4:d8:12:ef:e7:6c:35:aa:a0:2f:f2: 78:95:ac:75:ff:7d:96:8c:44:d6:5e:87:e8:dc:ce:56:b3:70: bf:40:96:9c:dc:ba:5f:80:e7:f4:83:60:77:4f:28:1a:34:5c: a3:0d:36:ca:97:37:ff:ba:fa:52:e6:38:59:e5:ab:bd:67:f3: bd:09:91:7b:41:ba:8b:b6:c8:7f:fa:ce:4c:f4:06:c4:35:18: f6:1c:c4:7b:61:a4:cf:1c:4c:56:0b:3a:3a:ef:f8:d3:d0:ca: 25:f1:85:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUxMjA3MDAzMTQwWhcNMjUxMjE0MDAzMTQwWjAYMRYwFAYD VQQDEw02OTM0Y2FlZC02YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3How/fr50kKONxzoNU9ya1k6UwQiADYs73b/8rgB8PAfhL0nDi1xiDEAxW6h stKTuB0rByPBCg9JzjZoOMCZQli2SjUF8Nt0IW6BE1goc3AUPnlG44p/uSL9B6wb TN8yk9ekbeIB6RTKizQRKYcZhMAN1U/wrUCIKn2OCgs/1uS7OsfkDZA57fF+j5Zo s5DE3Kw0lbpXjXChlsyDH/OLOp/gnP2cpiA/UTvcfQ0VrJ5Fv/ZINiY371vzdua1 CJJ1AJ7pKjlC9dGoDcFpMmfAFVDU+Gq7u6ASw2BjmsDbJm0z4Zd0hJNLEShZwngk sg8/JgAO/qG54aK1QnUaDr0EswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw27+1I P1kHAF/aqu5i15e8wxQBMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi9GQkRGRkVDMDc2ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4 LTFvVlVvcWtvNUd2SXpmME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7KB2drftSW7NnpA4lXc/SWWg1iEL7Dt+lIYDcGMR30V2esptnY1Nr 1cH9oEEV+YAJ3g9Zj4bXza0OhEXnRLbwjvJWWIXWa67YbuU/t4dJrDX4sHJhF769 1IAefsDtSOfDaYUxfjqhWD9iRYzAjZYNGe1Mmf2U9s7IXqH7vhbPBP4YOzUW2h+Y unq6FMuE/IeokxGYGtAX5NgS7+dsNaqgL/J4lax1/32WjETWXofo3M5Ws3C/QJac 3LpfgOf0g2B3TygaNFyjDTbKlzf/uvpS5jhZ5au9Z/O9CZF7QbqLtsh/+s5M9AbE NRj2HMR7YaTPHExWCzo67/jT0Mol8YVp -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:21 2025 by rpki-client