This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: RD+TUv151Xt76i4Qma6ep+TcyUumyHR50tjpqyG1uSo= Subject key identifier: CF:ED:D9:A0:86:5C:1E:9C:C5:7F:CF:23:C4:11:8E:86:DB:86:34:64 Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 05 Signing time: Fri 05 Dec 2025 01:00:47 +0000 Manifest this update: Fri 05 Dec 2025 01:00:47 +0000 Manifest next update: Fri 12 Dec 2025 01:00:47 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: MNX8J3kWB7GSfLj3p/G1g71n0yj9ik/PzX7jJM+MKMM=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Dec 5 01:00:47 2025 GMT Not After : Dec 12 01:00:47 2025 GMT Subject: CN=69322ebf-d3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:cb:df:49:ef:5c:93:41:b2:0f:29:73:71: 31:da:62:6b:72:81:86:7c:b5:19:f7:ea:d8:df:ac: 37:04:dc:c3:7f:79:98:05:8a:fc:5b:1e:47:0e:04: 99:6f:ae:61:e6:e9:c6:f4:9e:a4:6c:c0:b4:5c:bf: 7c:e1:1b:04:4b:fa:da:b3:e5:fb:3b:36:6d:a8:28: 06:b9:6c:ae:3d:3c:35:6e:5e:6b:5b:85:41:dd:c8: 22:d7:85:8f:14:9f:db:3a:dd:32:8a:69:40:7a:fd: 34:c0:db:6f:61:32:a5:51:af:34:32:ec:cb:47:9b: f2:e6:2b:87:03:cb:ab:cd:5a:9a:db:45:26:c5:8f: aa:45:82:df:74:ce:db:78:05:ff:8e:86:d0:e5:32: 64:33:77:da:f5:07:32:35:2f:40:eb:69:e4:a9:60: 1d:a6:39:bb:aa:72:0e:15:57:09:21:8f:7b:b8:f8: c2:9f:ca:c7:1c:9a:f4:de:2d:ed:f2:3b:c6:53:16: 65:aa:25:08:f6:cc:be:2f:15:b8:9e:d5:64:12:6c: 07:78:24:e2:68:67:7f:d2:07:01:6f:9e:85:03:a9: 75:58:52:d5:38:83:cf:9b:7b:b0:95:75:15:99:cc: 68:09:61:1b:42:5d:fb:62:82:9c:0f:22:54:ac:c7: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:ED:D9:A0:86:5C:1E:9C:C5:7F:CF:23:C4:11:8E:86:DB:86:34:64 X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5a:c0:22:8f:73:07:36:39:69:8d:a7:c4:f7:49:d4:bc:2a: 70:e8:20:a5:bb:ee:cb:f6:57:ed:24:2e:23:f3:52:6b:7e:06: 1d:a1:bd:b1:db:03:3e:90:aa:71:10:27:27:7e:fa:92:fd:70: 2a:b8:16:a1:5c:89:9a:87:63:48:18:18:12:ce:97:1f:ab:9d: 8a:54:c9:5f:55:27:d3:6d:53:47:cd:31:87:47:d1:51:c3:ff: df:9d:e7:0f:3b:e2:51:25:18:fa:9f:66:d8:8f:67:bb:8c:1f: 9c:8b:9f:62:12:cb:4b:fe:4e:14:cc:b8:29:67:d1:83:a4:27: 7e:c1:8b:2c:88:5d:9c:65:0f:d7:b0:57:74:55:e7:07:33:a8: 06:31:69:7d:82:9c:a8:b0:94:4b:a3:49:65:6b:be:01:a1:d3: 9f:37:45:65:91:58:64:07:39:53:f3:97:ff:45:32:9c:5b:b7: d9:67:77:68:b6:d7:cc:04:6e:04:dd:10:f3:1c:a1:1b:f2:c2: 9a:fc:7e:61:1f:44:eb:2b:98:80:c7:bb:e8:f2:09:9a:44:fb: 2e:55:56:be:df:34:38:65:5f:77:ed:a7:38:65:9f:a5:a4:bc: 50:6f:7a:0f:4a:ec:1a:4e:d7:3b:0e:2d:17:e7:d4:81:1b:27: 7c:bc:e4:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNTEyMDUwMTAwNDdaFw0yNTEyMTIwMTAwNDdaMBgxFjAUBgNV BAMTDTY5MzIyZWJmLWQzZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmrMvfSe9ck0GyDylzcTHaYmtygYZ8tRn36tjfrDcE3MN/eZgFivxbHkcOBJlv rmHm6cb0nqRswLRcv3zhGwRL+tqz5fs7Nm2oKAa5bK49PDVuXmtbhUHdyCLXhY8U n9s63TKKaUB6/TTA229hMqVRrzQy7MtHm/LmK4cDy6vNWprbRSbFj6pFgt90ztt4 Bf+OhtDlMmQzd9r1BzI1L0DraeSpYB2mObuqcg4VVwkhj3u4+MKfysccmvTeLe3y O8ZTFmWqJQj2zL4vFbie1WQSbAd4JOJoZ3/SBwFvnoUDqXVYUtU4g8+be7CVdRWZ zGgJYRtCXftigpwPIlSsx7KrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz+3ZoIZc HpzFf88jxBGOhtuGNGQwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFawCKPcwc2OWmNp8T3SdS8KnDoIKW77sv2V+0kLiPzUmt+Bh2hvbHb Az6QqnEQJyd++pL9cCq4FqFciZqHY0gYGBLOlx+rnYpUyV9VJ9NtU0fNMYdH0VHD /9+d5w874lElGPqfZtiPZ7uMH5yLn2ISy0v+ThTMuCln0YOkJ37BiyyIXZxlD9ew V3RV5wczqAYxaX2CnKiwlEujSWVrvgGh0583RWWRWGQHOVPzl/9FMpxbt9lnd2i2 18wEbgTdEPMcoRvywpr8fmEfROsrmIDHu+jyCZpE+y5VVr7fNDhlX3ftpzhln6Wk vFBveg9K7BpO1zsOLRfn1IEbJ3y85AM= -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:15 2025 by rpki-client