This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: jrKDiMVGMrBwohHummoE2NyWXvSbWuLsqvE8xCjSiQ0= Subject key identifier: C1:E8:FC:59:06:FE:66:46:D3:9D:78:45:C1:96:CD:65:E1:02:76:25 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 02F6 Signing time: Thu 04 Dec 2025 23:36:11 +0000 Manifest this update: Thu 04 Dec 2025 23:36:11 +0000 Manifest next update: Thu 11 Dec 2025 23:36:11 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: 3Kw9Zav2t2lfHwJLSqCP84+gAIeKmI4P6d/hMenjvm8=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: wZPPG2aGGXldL11r5unMH6Ru66NW1UIJskV7UNSU5h4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Dec 4 23:36:11 2025 GMT Not After : Dec 11 23:36:11 2025 GMT Subject: CN=69321aeb-1fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:b2:95:66:a4:77:6c:3c:fe:bb:5d:98:49: ca:d6:39:c7:fc:f2:9b:c7:4f:e4:92:9a:41:ed:3d: 4c:3d:75:4d:9a:0a:eb:ec:a3:5b:34:00:19:3e:b3: fa:4d:81:0f:83:49:bf:18:56:06:1b:ae:bd:3a:70: 48:09:8d:d7:1e:68:1b:cf:2e:9a:50:c7:6f:2d:63: cc:9f:11:81:d3:71:9d:b8:a1:8e:16:db:88:ec:d6: 56:f2:06:11:b4:02:52:2f:26:d4:f8:22:a2:6a:be: 75:64:81:de:4c:b6:a4:38:cd:da:2c:01:52:84:33: 2d:6d:42:69:b0:9a:2a:7b:67:3d:da:96:a8:1a:5d: bd:7c:15:0d:ca:ea:96:39:90:fc:b6:c5:51:08:be: d5:b2:58:0c:b2:6d:e0:fb:f2:c8:57:e8:17:85:16: 37:30:4e:27:6e:23:f5:b1:c2:52:14:c8:64:3a:05: 35:82:c3:02:e5:3c:85:07:9c:bb:52:90:f0:ac:ab: cd:4b:a4:07:97:3e:9a:4d:e5:59:fc:27:10:82:41: 55:d3:89:55:84:89:98:d3:e8:1f:03:33:2c:99:2b: 5b:4c:a3:ea:06:c2:7c:83:7e:26:12:d2:31:73:82: ff:f4:89:f8:d3:b1:cd:e7:d7:ed:b4:13:33:54:48: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E8:FC:59:06:FE:66:46:D3:9D:78:45:C1:96:CD:65:E1:02:76:25 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c9:b7:f6:e5:b1:43:97:56:34:be:31:f7:4a:89:56:b4:cd: 08:10:13:1a:aa:0c:7e:5e:8a:0d:80:57:42:53:f7:06:bd:54: bc:6f:1e:dd:3a:32:98:68:0a:b7:c0:a8:7a:ce:1f:f7:01:ca: 20:3c:e4:f4:97:cc:a0:4b:82:a3:31:4e:e9:3f:f5:05:78:0c: c2:80:3c:7a:fe:86:b5:d2:e2:2e:b4:c7:a6:be:76:30:c2:bd: 1b:66:f3:ac:05:65:c5:60:38:d0:e9:96:a9:ca:7e:ca:e5:8b: 28:0f:ff:9a:1e:b6:7c:9e:27:21:e2:8d:d8:9d:66:ac:a4:36: b3:c9:e8:66:bf:ed:39:da:5b:ee:c6:c6:29:cf:b4:35:c8:43: 48:94:51:0f:43:49:75:f5:85:bd:d4:ef:3a:f3:42:d3:74:b7: 6b:46:b8:03:83:30:1c:6e:e7:e5:25:7d:e7:6f:bd:58:31:fd: 75:a3:22:7d:63:66:f1:1b:b4:08:9f:01:56:a0:c3:0a:ef:f1: 21:c0:e4:33:ea:18:21:70:33:c6:12:8d:3c:08:44:15:77:d9: 60:d9:74:ba:22:a2:b2:16:40:f3:fd:52:e3:05:05:ad:25:a2: a3:63:8f:ca:a3:eb:87:04:6f:5e:dc:0d:29:92:3c:61:e3:f7: 44:4a:b8:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjUxMjA0MjMzNjExWhcNMjUxMjExMjMzNjExWjAYMRYwFAYD VQQDEw02OTMyMWFlYi0xZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6WylWakd2w8/rtdmEnK1jnH/PKbx0/kkppB7T1MPXVNmgrr7KNbNAAZPrP6 TYEPg0m/GFYGG669OnBICY3XHmgbzy6aUMdvLWPMnxGB03GduKGOFtuI7NZW8gYR tAJSLybU+CKiar51ZIHeTLakOM3aLAFShDMtbUJpsJoqe2c92paoGl29fBUNyuqW OZD8tsVRCL7VslgMsm3g+/LIV+gXhRY3ME4nbiP1scJSFMhkOgU1gsMC5TyFB5y7 UpDwrKvNS6QHlz6aTeVZ/CcQgkFV04lVhImY0+gfAzMsmStbTKPqBsJ8g34mEtIx c4L/9In407HN59fttBMzVEhCJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHo/FkG /mZG0514RcGWzWXhAnYlMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeybf25bFDl1Y0vjH3SolWtM0IEBMaqgx+XooNgFdCU/cGvVS8bx7d OjKYaAq3wKh6zh/3AcogPOT0l8ygS4KjMU7pP/UFeAzCgDx6/oa10uIutMemvnYw wr0bZvOsBWXFYDjQ6Zapyn7K5YsoD/+aHrZ8nich4o3YnWaspDazyehmv+052lvu xsYpz7Q1yENIlFEPQ0l19YW91O8680LTdLdrRrgDgzAcbuflJX3nb71YMf11oyJ9 Y2bxG7QInwFWoMMK7/EhwOQz6hghcDPGEo08CEQVd9lg2XS6IqKyFkDz/VLjBQWt JaKjY4/Ko+uHBG9e3A0pkjxh4/dESrjJ -----END CERTIFICATE-----Generated at Sat Dec 6 13:17:57 2025 by rpki-client