This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: +qSfo4kNVa8GXatl7nTnDfEMkMKsXxIOewb+c0k7NuM= Subject key identifier: E4:B9:88:D4:01:A7:33:A3:B6:A5:84:83:39:6D:B9:8C:C0:6B:06:86 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 3045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 303B Signing time: Thu 04 Dec 2025 15:16:43 +0000 Manifest this update: Thu 04 Dec 2025 15:16:43 +0000 Manifest next update: Thu 11 Dec 2025 15:16:43 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: +8ivYfDfNtJdwohfstjDmfPItrH8UgM0fMXvtX449nQ=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: LEtlM4YuHVZO4hp1ekYsLvEULMY1rw4omfHoEthYUqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12357 (0x3045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: Dec 4 15:16:43 2025 GMT Not After : Dec 11 15:16:43 2025 GMT Subject: CN=6931a5db-672f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:76:a0:76:d7:ec:5f:59:85:ad:83:35:34: b5:a2:11:c7:cf:61:4a:82:09:fa:11:c6:d6:07:bb: 6f:a7:05:d1:1c:be:7d:74:60:ad:f9:e4:a8:7e:2a: 16:9c:2a:a3:00:44:a2:11:e9:8b:b5:27:a8:83:61: e6:24:d7:a7:fc:59:c2:d2:03:5a:02:62:c4:1e:38: 9f:e5:55:8e:32:57:58:c4:66:3c:96:b7:ce:66:52: 66:23:f9:7b:ff:e1:33:eb:00:b0:a1:f4:55:03:b2: fe:e2:c4:bb:f5:79:ef:bb:27:aa:01:ae:37:b9:de: e7:b0:cd:02:8c:cd:ca:8d:d6:a1:ec:9f:f7:a0:86: e1:38:bc:ed:c2:82:ed:7d:fa:79:10:35:b8:0e:7e: 64:2c:1c:f1:18:77:7e:10:9a:66:0f:fa:8c:0c:76: 25:f1:f2:33:f4:77:b8:f2:79:11:f8:11:b9:93:08: 33:68:5e:a2:b1:1e:d1:63:fb:92:e4:c5:7c:5c:b9: 7e:fc:df:1e:63:60:ae:6e:3e:19:88:ba:17:11:fc: 0d:77:5d:6f:10:8a:59:5f:5e:8a:a2:37:e1:d0:4b: f1:c7:96:07:29:53:87:7e:6f:7a:3f:bd:1c:ce:95: 84:6a:69:96:1c:20:13:09:7f:0e:08:28:76:06:cf: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:88:D4:01:A7:33:A3:B6:A5:84:83:39:6D:B9:8C:C0:6B:06:86 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:3e:55:46:b2:a2:46:44:c2:4c:54:8a:7b:28:d5:11:8c:e6: 3e:ae:bb:92:ed:42:bc:c8:eb:b5:84:ef:1b:d3:8e:dd:4e:bc: e5:46:6e:f0:be:07:f9:4a:93:ec:10:15:d9:ef:a2:aa:db:26: 8a:67:f6:1b:9c:df:40:c8:43:3c:e3:71:88:ee:4d:c1:34:ea: 11:ac:3f:ce:4a:6c:a5:20:e4:08:d8:ac:07:da:82:ed:de:c5: 34:6d:d3:4a:1f:04:51:69:b6:8d:7d:e0:ee:df:99:74:ee:f7: c5:3c:80:2e:4b:01:e6:57:4b:26:b8:94:24:af:27:90:bc:54: f4:25:76:8a:a2:bb:d8:4b:3b:4d:bc:1b:1e:ed:70:24:b5:02: 6b:ad:92:28:fe:4b:3b:9c:5d:12:ec:ee:d8:07:34:f3:df:05: 92:bd:54:bd:d1:a7:c1:9b:24:a4:5f:01:c4:d2:57:da:13:f2: 7b:2b:be:13:a0:8d:ce:ba:cb:8d:73:4d:5d:b5:61:43:0c:d6: f3:c0:2d:e1:34:fc:f1:73:a6:d3:0b:d9:17:0e:02:16:96:54: 00:a0:0d:18:0c:cb:ba:23:a7:0c:14:07:61:52:59:92:11:a2: 2d:14:3a:74:35:4d:46:5c:b9:d5:05:af:a0:12:c0:48:68:05: b8:55:36:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUxMjA0MTUxNjQzWhcNMjUxMjExMTUxNjQzWjAYMRYwFAYD VQQDEw02OTMxYTVkYi02NzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI52oHbX7F9Zha2DNTS1ohHHz2FKggn6EcbWB7tvpwXRHL59dGCt+eSofioW nCqjAESiEemLtSeog2HmJNen/FnC0gNaAmLEHjif5VWOMldYxGY8lrfOZlJmI/l7 /+Ez6wCwofRVA7L+4sS79XnvuyeqAa43ud7nsM0CjM3Kjdah7J/3oIbhOLztwoLt ffp5EDW4Dn5kLBzxGHd+EJpmD/qMDHYl8fIz9He48nkR+BG5kwgzaF6isR7RY/uS 5MV8XLl+/N8eY2Cubj4ZiLoXEfwNd11vEIpZX16Kojfh0Evxx5YHKVOHfm96P70c zpWEammWHCATCX8OCCh2Bs88owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS5iNQB pzOjtqWEgzltuYzAawaGMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBPlVGsqJGRMJMVIp7KNURjOY+rruS7UK8yOu1hO8b047dTrzlRm7w vgf5SpPsEBXZ76Kq2yaKZ/YbnN9AyEM843GI7k3BNOoRrD/OSmylIOQI2KwH2oLt 3sU0bdNKHwRRabaNfeDu35l07vfFPIAuSwHmV0smuJQkryeQvFT0JXaKorvYSztN vBse7XAktQJrrZIo/ks7nF0S7O7YBzTz3wWSvVS90afBmySkXwHE0lfaE/J7K74T oI3OusuNc01dtWFDDNbzwC3hNPzxc6bTC9kXDgIWllQAoA0YDMu6I6cMFAdhUlmS EaItFDp0NU1GXLnVBa+gEsBIaAW4VTao -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:17 2025 by rpki-client