This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: 6NfOF+Y06la/gbfRbWYtrgZGPrMfvn8fF4xaJUEGJrM= Subject key identifier: 1E:5C:BA:98:B4:D5:F4:49:06:B2:40:F7:49:DD:F1:DF:05:9B:80:43 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: CF Signing time: Fri 05 Dec 2025 03:51:40 +0000 Manifest this update: Fri 05 Dec 2025 03:51:40 +0000 Manifest next update: Fri 12 Dec 2025 03:51:40 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: VSb/BxHSb83EW4HvH76RW55wFQlr9G6ZKHrNMyYz2xk=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: 6mMgJQqrTt//DicYwifA+2B1HPeEaPw9MesPtrZauGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Dec 5 03:51:40 2025 GMT Not After : Dec 12 03:51:40 2025 GMT Subject: CN=693256cc-a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:6a:e8:6c:c2:ae:df:81:39:f4:4e:21:fc: 54:0c:30:13:02:9e:b1:61:14:de:b4:9d:96:35:11: 0c:1a:1b:2e:b2:77:41:b4:fd:11:57:66:9a:f8:c8: e6:01:9a:61:e2:d6:27:03:3b:c5:4c:da:8d:dc:f1: 63:dd:2a:05:5a:6c:99:ee:51:ef:5e:4f:ee:59:db: 50:7c:2b:92:2b:ae:e9:2c:14:af:5e:70:f2:17:a4: af:63:42:91:ba:1e:cf:34:a3:29:22:01:f0:64:60: 2a:7b:83:3a:2f:10:82:43:88:6e:38:53:46:85:a4: 07:d6:3e:cc:66:fa:d5:77:23:9b:79:b7:c2:23:36: 86:2b:34:7b:b5:bc:3c:2a:83:df:db:ac:90:d8:0a: 28:43:05:1a:89:fa:9e:04:e5:e1:1a:25:36:02:41: 75:71:17:e9:25:65:c9:f7:0d:6c:c9:be:8b:18:6a: 9e:54:9a:ad:21:a9:64:1d:2b:fc:06:ba:32:f8:eb: 52:fb:ec:82:07:89:ef:5a:0d:5e:04:b7:a3:4b:70: 1f:02:fb:73:d0:8b:73:d0:19:c4:fa:dd:47:a1:ae: 94:83:59:28:4c:37:6e:b2:02:8b:8b:7c:e9:b1:9d: 47:71:e6:65:ac:7c:22:31:f2:0c:3c:56:31:44:de: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5C:BA:98:B4:D5:F4:49:06:B2:40:F7:49:DD:F1:DF:05:9B:80:43 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:90:fd:1a:96:1d:e0:ad:b9:09:44:58:66:fa:72:0d:54:9a: 21:4b:68:e9:3f:86:2d:1a:15:91:ac:81:3c:20:47:17:7e:b7: f4:c6:c9:1c:57:fb:bc:cb:7e:94:60:71:76:fe:12:8f:6c:30: 7e:16:8a:fc:17:65:fb:85:66:b6:88:e7:7a:be:fd:88:0c:19: 59:b6:8e:4b:0f:54:0c:6a:2b:13:70:1d:0c:e4:0f:bc:d4:6c: 80:35:f8:4f:b5:86:dc:84:d6:04:8e:09:2a:39:43:b0:f0:e0: 47:36:6a:9a:f2:8a:c5:67:d3:bc:e6:18:d6:5a:23:1e:81:6f: d2:bb:85:33:eb:e7:91:74:eb:0b:76:5f:74:06:7c:8e:13:fd: 10:89:da:a4:c7:e5:9d:2f:b0:f9:c7:d7:d5:9d:8b:b9:4c:e9: ef:61:44:fa:c5:ec:3a:1c:f7:78:87:c4:28:8f:d6:c6:85:fa: c7:76:8b:9e:21:61:28:05:0f:f4:dc:ee:3a:9d:f8:e4:ef:e3: 8e:b3:20:9f:d5:81:b1:d4:51:72:47:e7:47:85:a0:c2:53:6d: f5:9f:f0:c1:03:fb:9b:4b:49:93:14:ec:f2:2f:06:69:ca:40: 3e:9d:20:06:51:1e:32:69:23:39:b2:3a:bc:ea:58:28:32:29: 1a:ef:b4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKDVBNTZDNERFOTQyM0I5RTJCODAwQUI3RTA0MERDQTNF MDlGMjM0NzUwHhcNMjUxMjA1MDM1MTQwWhcNMjUxMjEyMDM1MTQwWjAYMRYwFAYD VQQDEw02OTMyNTZjYy1hMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bdq6GzCrt+BOfROIfxUDDATAp6xYRTetJ2WNREMGhsusndBtP0RV2aa+Mjm AZph4tYnAzvFTNqN3PFj3SoFWmyZ7lHvXk/uWdtQfCuSK67pLBSvXnDyF6SvY0KR uh7PNKMpIgHwZGAqe4M6LxCCQ4huOFNGhaQH1j7MZvrVdyObebfCIzaGKzR7tbw8 KoPf26yQ2AooQwUaifqeBOXhGiU2AkF1cRfpJWXJ9w1syb6LGGqeVJqtIalkHSv8 Broy+OtS++yCB4nvWg1eBLejS3AfAvtz0Itz0BnE+t1Hoa6Ug1koTDdusgKLi3zp sZ1HceZlrHwiMfIMPFYxRN4+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5cupi0 1fRJBrJA90nd8d8Fm4BDMB8GA1UdIwQYMBaAFFpWxN6UI7niuACrfgQNyj4J8jR1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84M0ZENkIyRUE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVlSzRBS3QtQkEzS1BnbnlO SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVl SzRBS3QtQkEzS1BnbnlOSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAukP0alh3grbkJRFhm+nINVJohS2jpP4YtGhWRrIE8IEcXfrf0xskc V/u8y36UYHF2/hKPbDB+For8F2X7hWa2iOd6vv2IDBlZto5LD1QMaisTcB0M5A+8 1GyANfhPtYbchNYEjgkqOUOw8OBHNmqa8orFZ9O85hjWWiMegW/Su4Uz6+eRdOsL dl90BnyOE/0Qidqkx+WdL7D5x9fVnYu5TOnvYUT6xew6HPd4h8Qoj9bGhfrHdoue IWEoBQ/03O46nfjk7+OOsyCf1YGx1FFyR+dHhaDCU231n/DBA/ubS0mTFOzyLwZp ykA+nSAGUR4yaSM5sjq86lgoMika77SJ -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:30 2025 by rpki-client