This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: 07pQ9D1MxkpwZgD9qsHpuB1ERiqB+APf1XG69ZQ8C1Y= Subject key identifier: C1:08:05:24:1D:D3:3A:F7:2D:64:46:0A:00:EF:2C:5F:63:FE:76:77 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 0156 Signing time: Fri 05 Dec 2025 02:02:31 +0000 Manifest this update: Fri 05 Dec 2025 02:02:31 +0000 Manifest next update: Fri 12 Dec 2025 02:02:31 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: /lmNGaKvsFxt9T1UDM9Zfvbics2JAQB+sYmYHk4ap3Q=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: vRb+yhb2srl8xWf7no5GmTVIZuGppjwK0W3JgKbtn6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Dec 5 02:02:31 2025 GMT Not After : Dec 12 02:02:31 2025 GMT Subject: CN=69323d37-b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:5c:3f:ee:27:de:22:8c:98:dc:be:6c:6b: 7b:ff:01:e2:40:f2:46:e5:76:b3:64:31:ed:33:1f: 2e:86:06:a9:5b:dc:e6:0f:e4:39:10:b6:8f:fd:37: b0:84:c3:8e:05:17:55:ce:35:46:4c:1e:de:32:98: 86:57:9e:0c:6b:3f:b1:c9:c9:df:9f:54:ed:cd:30: c7:4b:8d:6e:f1:8f:ab:79:9b:20:6b:de:bf:50:5d: a0:e8:b8:9d:f8:30:93:2a:b6:cf:47:a2:a9:0d:3a: 3f:b6:3c:dd:ae:1d:09:e9:aa:80:ce:e0:f2:04:6b: b5:75:89:fe:97:6c:9b:04:4f:73:32:3d:63:8f:67: bc:d8:68:55:19:39:76:3c:a2:d6:9d:9d:e8:19:7d: 8a:5d:f9:04:9d:4a:08:21:95:c5:83:ff:e2:b5:f5: 76:59:2d:9d:7b:4d:2e:c1:6d:24:02:61:7c:4f:9f: c9:88:37:ee:d4:d3:8b:fa:5c:2d:ce:dd:79:87:aa: d8:31:08:18:f8:84:14:03:af:12:6e:46:ea:11:61: 2e:00:07:5a:a0:ab:12:b8:17:a2:1c:4a:d8:7a:40: 2c:b7:b1:1b:33:69:24:a0:db:b5:a7:19:f8:cc:3a: ad:d9:9c:0f:a6:fb:76:cc:b5:de:e5:41:f9:5b:71: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:05:24:1D:D3:3A:F7:2D:64:46:0A:00:EF:2C:5F:63:FE:76:77 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f9:f0:22:13:7a:8b:cd:68:1a:22:bd:3c:3d:22:fd:06:03: a9:c2:d9:f7:02:59:ef:b3:9a:30:8a:ce:5a:6a:3e:ad:67:a5: 0f:6f:fb:16:a8:a0:3c:eb:03:77:cf:7a:c4:53:37:4d:59:0c: 58:a0:ee:54:a1:13:d8:0b:d0:73:d8:fc:1b:d7:fc:08:31:10: b0:e2:17:52:cf:dc:ca:d0:be:07:db:19:e0:a2:f3:15:2b:22: c4:ac:00:68:75:da:cf:fb:65:04:8b:01:25:15:4e:b7:b9:c8: 97:dc:0f:77:8a:82:93:6e:7b:1e:8b:2e:bf:67:7d:f2:59:4c: 5c:4f:67:3f:09:bc:16:c0:ad:7e:63:5c:bb:5d:fb:d7:03:f3: 7f:8c:80:2a:3c:fc:84:49:d7:ce:5d:84:28:fb:c5:ff:79:41: 77:8d:38:f5:61:50:0b:67:4a:86:76:e8:ce:2a:e8:dd:f7:fd: a2:94:bd:cf:e1:8d:66:50:2c:43:6d:df:8c:71:d9:c3:de:99: 31:ac:ae:3b:50:4e:87:b8:d3:63:ce:1d:4a:c0:e9:ab:43:4a: 78:db:11:58:a1:0b:b4:65:cb:76:27:82:dc:31:f2:94:2c:75: c7:cb:ed:20:2f:c3:db:a6:bd:97:c9:a4:4b:bc:01:93:53:a8: 7d:ed:7c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUxMjA1MDIwMjMxWhcNMjUxMjEyMDIwMjMxWjAYMRYwFAYD VQQDEw02OTMyM2QzNy1iODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviRcP+4n3iKMmNy+bGt7/wHiQPJG5XazZDHtMx8uhgapW9zmD+Q5ELaP/Tew hMOOBRdVzjVGTB7eMpiGV54Maz+xycnfn1TtzTDHS41u8Y+reZsga96/UF2g6Lid +DCTKrbPR6KpDTo/tjzdrh0J6aqAzuDyBGu1dYn+l2ybBE9zMj1jj2e82GhVGTl2 PKLWnZ3oGX2KXfkEnUoIIZXFg//itfV2WS2de00uwW0kAmF8T5/JiDfu1NOL+lwt zt15h6rYMQgY+IQUA68SbkbqEWEuAAdaoKsSuBeiHErYekAst7EbM2kkoNu1pxn4 zDqt2ZwPpvt2zLXe5UH5W3FQmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEIBSQd 0zr3LWRGCgDvLF9j/nZ3MB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+fAiE3qLzWgaIr08PSL9BgOpwtn3Alnvs5owis5aaj6tZ6UPb/sW qKA86wN3z3rEUzdNWQxYoO5UoRPYC9Bz2Pwb1/wIMRCw4hdSz9zK0L4H2xngovMV KyLErABoddrP+2UEiwElFU63uciX3A93ioKTbnseiy6/Z33yWUxcT2c/CbwWwK1+ Y1y7XfvXA/N/jIAqPPyESdfOXYQo+8X/eUF3jTj1YVALZ0qGdujOKujd9/2ilL3P 4Y1mUCxDbd+McdnD3pkxrK47UE6HuNNjzh1KwOmrQ0p42xFYoQu0Zct2J4LcMfKU LHXHy+0gL8Pbpr2XyaRLvAGTU6h97Xyt -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:58 2025 by rpki-client