This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: JwjI+XrWKfvZfXoem2M5YlL77PdVfKuKrAD6q8rb46c= Subject key identifier: 89:80:E8:B8:72:F5:9D:35:F5:04:F3:9E:B3:5A:B1:C7:46:30:EF:84 Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 1525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 19DA Signing time: Sat 06 Dec 2025 16:23:37 +0000 Manifest this update: Sat 06 Dec 2025 16:23:36 +0000 Manifest next update: Sat 13 Dec 2025 16:23:36 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: Bo0BnB41/EnJHg67bDYbBW1+xTXRUXbUfKpNxiPohEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5413 (0x1525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Dec 6 16:23:36 2025 GMT Not After : Dec 13 16:23:36 2025 GMT Subject: CN=69345889-b39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:53:cf:03:0f:6a:c6:64:eb:8a:fd:07:14: 58:53:06:27:d0:c8:2f:b4:0c:53:99:0c:4a:b5:6a: 15:ee:90:c9:a4:64:5a:de:56:71:f9:d1:01:41:a2: a7:d9:c4:58:48:b0:cc:6c:1a:b8:da:1c:0a:8c:16: ac:b3:13:73:e8:62:3b:61:1a:36:df:da:d9:8d:02: e8:74:36:23:8f:93:c1:7d:ed:e8:56:d7:bd:8b:b9: 60:ef:b4:37:9b:5d:21:3d:7d:55:b4:a2:88:18:73: 61:03:a8:84:34:a1:9b:68:17:9a:30:06:0f:a3:8e: ae:d8:b1:5c:6a:a8:59:9d:ba:01:eb:94:6b:8a:9c: 62:41:ea:5a:53:8c:26:d6:3f:35:84:5a:7b:d1:62: f7:f0:4a:ac:a9:eb:14:e0:ed:ef:97:62:e5:8a:6b: 37:07:52:89:48:b4:ad:f6:a2:11:9f:2f:6c:42:5a: 3c:98:33:bc:24:a6:d4:00:16:f9:3d:71:ed:bb:c5: fb:d1:17:50:22:4d:78:ea:a8:df:e7:7b:e0:5e:95: 50:0f:02:e9:92:95:5c:48:46:fc:0a:88:ee:44:59: ce:44:2a:d5:62:32:2d:b4:c1:f0:62:2d:63:d7:30: 27:f6:56:15:12:58:95:87:2a:b0:dc:da:39:ef:1d: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:80:E8:B8:72:F5:9D:35:F5:04:F3:9E:B3:5A:B1:C7:46:30:EF:84 X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:e5:ef:10:2c:ca:13:b1:f2:b2:aa:96:06:c7:b8:a8:d6: a9:13:b2:81:34:d7:c0:dc:9b:fe:8c:5b:b2:3c:f5:6e:df:ee: 62:31:4c:83:20:26:e5:a2:d7:e3:c9:29:a3:30:ca:ed:41:27: 5e:ca:5c:19:15:36:18:e4:1c:94:e3:dc:4c:65:71:ed:04:f3: c3:dc:9f:ae:8d:49:80:d5:c7:57:9e:9e:9f:a2:47:7d:6e:bc: f2:d0:29:3f:1e:0a:b7:af:c4:78:00:2f:17:60:73:6a:2a:62: bb:ce:bc:3a:3b:9e:5e:c2:db:40:26:6c:a0:8b:ae:f1:2a:98: ad:39:f8:9b:8a:ac:7a:97:7c:c6:3f:95:5c:95:e2:6f:9e:a3: 67:f2:ee:82:9a:8b:b9:9a:b6:3e:d1:d1:2d:d2:00:ee:24:17: 65:96:81:77:b3:06:fa:f1:8e:b6:b4:5a:22:b5:69:58:c1:8f: fc:0a:2a:3f:65:36:34:37:8d:10:a0:fa:10:5e:e8:37:2f:a5: 43:9f:8a:f6:0f:78:a1:78:70:fd:29:10:b6:26:50:ee:ba:22: 52:d1:cb:65:52:37:10:cf:fe:a7:a3:5c:52:36:08:4d:c5:4a: 99:7f:44:b7:be:1d:78:b6:4d:28:c5:d2:75:27:bd:06:13:8e: 33:a8:95:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUxMjA2MTYyMzM2WhcNMjUxMjEzMTYyMzM2WjAYMRYwFAYD VQQDEw02OTM0NTg4OS1iMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03tTzwMPasZk64r9BxRYUwYn0MgvtAxTmQxKtWoV7pDJpGRa3lZx+dEBQaKn 2cRYSLDMbBq42hwKjBassxNz6GI7YRo239rZjQLodDYjj5PBfe3oVte9i7lg77Q3 m10hPX1VtKKIGHNhA6iENKGbaBeaMAYPo46u2LFcaqhZnboB65RripxiQepaU4wm 1j81hFp70WL38EqsqesU4O3vl2Llims3B1KJSLSt9qIRny9sQlo8mDO8JKbUABb5 PXHtu8X70RdQIk146qjf53vgXpVQDwLpkpVcSEb8CojuRFnORCrVYjIttMHwYi1j 1zAn9lYVEliVhyqw3No57x3wkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImA6Lhy 9Z019QTznrNascdGMO+EMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEb+XvECzKE7HysqqWBse4qNapE7KBNNfA3Jv+jFuyPPVu3+5iMUyD ICblotfjySmjMMrtQSdeylwZFTYY5ByU49xMZXHtBPPD3J+ujUmA1cdXnp6fokd9 brzy0Ck/Hgq3r8R4AC8XYHNqKmK7zrw6O55ewttAJmygi67xKpitOfibiqx6l3zG P5VcleJvnqNn8u6Cmou5mrY+0dEt0gDuJBdlloF3swb68Y62tFoitWlYwY/8Cio/ ZTY0N40QoPoQXug3L6VDn4r2D3iheHD9KRC2JlDuuiJS0ctlUjcQz/6no1xSNghN xUqZf0S3vh14tk0oxdJ1J70GE44zqJWb -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:07 2025 by rpki-client