This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: kIaIG1OF3DjkYAEbP2b0hw6w5nBcxWGSZIBiY4zylVQ= Subject key identifier: 3E:A0:10:D3:C3:3B:92:3B:69:91:02:89:54:57:FE:5A:3E:C8:E6:78 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 13DC Signing time: Sat 06 Dec 2025 16:30:10 +0000 Manifest this update: Sat 06 Dec 2025 16:30:09 +0000 Manifest next update: Sat 13 Dec 2025 16:30:09 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: T5JXqWA7dlXAlMm5LFfik11wLeDZLcg+A66TtZMEcMc=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5117 (0x13fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Dec 6 16:30:09 2025 GMT Not After : Dec 13 16:30:09 2025 GMT Subject: CN=69345a12-e91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:a0:0a:74:e8:b1:c2:4e:5e:72:f7:95:a0: 41:0e:9b:95:8f:71:db:ab:90:9e:fd:7b:d5:4b:6b: 73:36:53:3f:b7:e7:ea:54:5b:54:6d:eb:a7:7d:70: ab:f3:5f:a5:70:99:b2:14:04:0c:89:72:54:b8:5a: a5:5f:6d:51:c9:b6:7a:d7:5f:2c:0e:d9:b1:c8:fd: 39:a4:00:5c:cf:40:92:db:b2:60:5a:db:dc:cc:5f: 82:f4:0d:aa:00:14:38:64:d3:d8:d3:9b:2e:21:91: 9c:5e:bb:d1:a6:d9:d9:61:f5:45:bd:e3:b8:02:ee: e6:12:a9:0a:01:09:d1:45:70:f4:35:1f:18:60:34: 9a:82:88:77:fb:94:1b:08:3b:c8:59:74:99:96:af: 41:67:b7:29:15:5f:91:55:cf:0b:9d:69:df:87:a4: 9a:bf:04:b0:8a:4c:6e:ef:31:dd:b8:a9:2d:d6:17: 15:0f:42:6c:cf:56:fc:72:16:11:53:77:e4:18:60: e4:33:4d:de:ac:42:24:60:6a:71:4d:70:d6:b9:fa: 21:19:58:1f:1a:95:fa:48:18:ca:85:4a:d3:aa:f0: 2a:09:72:32:b2:db:e4:da:e5:e0:9e:07:82:0b:1e: 24:64:63:a8:d8:8c:d8:fc:dc:85:d7:77:34:95:32: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A0:10:D3:C3:3B:92:3B:69:91:02:89:54:57:FE:5A:3E:C8:E6:78 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5e:65:85:18:ad:37:39:92:ba:ad:33:3d:b4:06:c6:b5:35: 80:d6:db:66:0f:39:38:e5:b4:33:07:12:b0:dc:1b:40:87:ca: df:86:1d:8b:69:68:62:63:45:47:7b:aa:a4:87:c1:c4:9a:9b: 29:25:1d:ce:8e:91:94:f9:95:46:cc:89:ed:65:4d:e0:6f:d3: eb:cc:55:b0:5e:38:36:6c:5f:4f:3d:18:c9:68:8d:63:14:af: fd:b4:4c:76:56:f6:d3:76:4d:5a:b2:42:ab:82:d5:87:46:f1: c2:73:80:b6:84:bb:43:f6:ee:46:e1:b7:95:6e:9c:30:5b:cd: 08:b4:dc:8f:62:2b:de:5f:05:80:12:ae:5f:94:c6:1b:ab:51: 49:ac:f6:99:07:9c:c9:b3:ec:da:b8:32:d6:e9:e6:76:45:a6: 84:e5:59:ce:68:3e:1c:5d:50:6b:83:1e:9b:77:78:5f:4c:c3: fb:d3:41:31:1c:d6:be:22:bc:ba:73:b5:26:96:f3:e3:b1:e4: b0:ac:dc:82:9c:74:7a:cd:58:8a:ca:5f:a1:1e:7b:be:8d:fa: fa:47:70:64:2b:35:c7:e0:56:e9:82:f2:35:ea:3b:09:af:02: 72:17:15:df:e0:4e:73:fa:0b:f5:66:8f:58:6f:ae:46:2c:c1: dc:da:00:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUxMjA2MTYzMDA5WhcNMjUxMjEzMTYzMDA5WjAYMRYwFAYD VQQDEw02OTM0NWExMi1lOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8ygCnToscJOXnL3laBBDpuVj3Hbq5Ce/XvVS2tzNlM/t+fqVFtUbeunfXCr 81+lcJmyFAQMiXJUuFqlX21RybZ6118sDtmxyP05pABcz0CS27JgWtvczF+C9A2q ABQ4ZNPY05suIZGcXrvRptnZYfVFveO4Au7mEqkKAQnRRXD0NR8YYDSagoh3+5Qb CDvIWXSZlq9BZ7cpFV+RVc8LnWnfh6SavwSwikxu7zHduKkt1hcVD0Jsz1b8chYR U3fkGGDkM03erEIkYGpxTXDWufohGVgfGpX6SBjKhUrTqvAqCXIystvk2uXgngeC Cx4kZGOo2IzY/NyF13c0lTIreQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6gENPD O5I7aZECiVRX/lo+yOZ4MB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGXmWFGK03OZK6rTM9tAbGtTWA1ttmDzk45bQzBxKw3BtAh8rfhh2L aWhiY0VHe6qkh8HEmpspJR3OjpGU+ZVGzIntZU3gb9PrzFWwXjg2bF9PPRjJaI1j FK/9tEx2VvbTdk1askKrgtWHRvHCc4C2hLtD9u5G4beVbpwwW80ItNyPYiveXwWA Eq5flMYbq1FJrPaZB5zJs+zauDLW6eZ2RaaE5VnOaD4cXVBrgx6bd3hfTMP700Ex HNa+Iry6c7UmlvPjseSwrNyCnHR6zViKyl+hHnu+jfr6R3BkKzXH4FbpgvI16jsJ rwJyFxXf4E5z+gv1Zo9Yb65GLMHc2gD2 -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:16 2025 by rpki-client