This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: JC4qER4Ak05Z2kuk83vpRvsPFueBqmq2jMeqixbLfNw= Subject key identifier: 8A:DC:00:08:95:43:B2:5C:26:11:6C:D0:3D:54:D0:2C:1E:FA:72:85 Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 05BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 05B2 Signing time: Thu 04 Dec 2025 21:48:04 +0000 Manifest this update: Thu 04 Dec 2025 21:48:04 +0000 Manifest next update: Thu 11 Dec 2025 21:48:04 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: /dyq2VdQ7s/kcn6t16gd0dYt93l5ti81MLBhi6J/vrQ=) 2: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: Ut3CDtCW4yFtzwlmPVnhZOKBuebePtbtjUycMS+MqHI=) 3: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: mLPy6bt3CbNAncCWplQO85aBCAGnfrSY9rHYwr8JJfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Validity Not Before: Dec 4 21:48:04 2025 GMT Not After : Dec 11 21:48:04 2025 GMT Subject: CN=69320194-c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:22:f8:62:c6:9c:85:4c:d7:cf:53:b4:77: 7e:86:00:10:4f:00:74:d1:e6:0d:02:e4:d7:73:a2: 7f:01:68:7a:dc:c9:21:e3:58:a2:6c:4a:92:95:42: 1e:6b:64:c2:5e:26:44:71:7f:9d:d5:8d:7c:bf:da: ff:7c:d5:f2:a1:1a:1d:14:e4:32:7d:79:d3:47:eb: 1e:87:d6:4f:9f:14:75:45:da:e6:e9:90:8c:b7:9d: dd:f7:45:75:4c:74:71:40:f6:cb:7b:55:88:f0:62: f5:00:36:40:9f:6f:cf:ba:64:dc:67:ec:9e:41:ca: 37:8e:03:88:92:4a:f6:d4:46:cf:02:20:f5:78:62: dc:73:f6:3f:3f:de:29:5d:38:96:00:c8:89:c9:ea: 84:d7:00:17:8f:27:e3:d5:29:5e:52:2d:1c:f2:73: cd:09:a0:a0:17:b4:23:70:89:35:b5:1a:49:d7:e7: 21:0e:78:2f:8e:43:3d:e2:85:70:7b:c4:dc:73:2e: e2:f8:a2:29:93:5d:ce:c3:d8:5f:fd:a9:1c:6b:d7: 1d:2a:53:54:80:b7:e8:fe:82:00:22:33:fb:a9:d5: 1b:0c:94:38:db:9d:89:a2:42:55:5f:88:16:5d:a8: 21:62:1a:68:ed:0c:c8:56:de:33:1b:2d:a7:03:75: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DC:00:08:95:43:B2:5C:26:11:6C:D0:3D:54:D0:2C:1E:FA:72:85 X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:92:25:9d:11:90:ab:32:a0:af:24:01:9a:53:37:4e:59:8c: e3:91:00:b7:b0:04:ab:a9:c1:32:6d:55:9c:b5:fd:e4:82:d7: c5:b4:13:ac:eb:67:3f:1a:83:a9:a7:0a:eb:14:78:61:5a:c9: 1a:1c:15:96:d2:12:85:e9:1b:80:aa:94:ea:68:39:9f:83:24: 43:d8:94:6c:bb:b4:ca:62:6e:c4:e7:1c:d5:d0:2e:21:82:a9: 39:20:1b:41:e6:d1:b4:5d:21:ef:32:13:78:ad:6d:94:a2:a6: 24:3d:20:cb:02:61:ed:f7:9a:9e:39:d0:23:f9:52:80:ff:0a: 88:13:00:e1:28:5a:84:a8:21:d3:52:f2:fb:f8:44:81:9d:b3: fa:43:45:41:28:d1:43:ed:69:cb:eb:fe:d0:90:d5:b4:f9:14: b8:f8:36:b9:05:48:e8:26:d0:3e:28:17:27:37:f2:f9:b8:bf: df:29:fd:d5:38:87:dc:e4:0b:10:9e:01:10:b6:1d:f5:fc:33: 42:69:02:26:23:d5:cb:54:01:5b:f9:0d:64:61:8d:55:e2:2f: d9:4d:05:6f:c9:02:06:fe:ab:5e:da:77:df:fe:97:51:6a:07: bb:1e:bf:b6:d5:b3:da:e7:78:df:12:44:d9:98:0d:64:e0:f9: 34:41:26:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjUxMjA0MjE0ODA0WhcNMjUxMjExMjE0ODA0WjAYMRYwFAYD VQQDEw02OTMyMDE5NC1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ4i+GLGnIVM189TtHd+hgAQTwB00eYNAuTXc6J/AWh63Mkh41iibEqSlUIe a2TCXiZEcX+d1Y18v9r/fNXyoRodFOQyfXnTR+seh9ZPnxR1Rdrm6ZCMt53d90V1 THRxQPbLe1WI8GL1ADZAn2/PumTcZ+yeQco3jgOIkkr21EbPAiD1eGLcc/Y/P94p XTiWAMiJyeqE1wAXjyfj1SleUi0c8nPNCaCgF7QjcIk1tRpJ1+chDngvjkM94oVw e8Tccy7i+KIpk13Ow9hf/akca9cdKlNUgLfo/oIAIjP7qdUbDJQ4252JokJVX4gW XaghYhpo7QzIVt4zGy2nA3X30wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrcAAiV Q7JcJhFs0D1U0Cwe+nKFMB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLkiWdEZCrMqCvJAGaUzdOWYzjkQC3sASrqcEybVWctf3kgtfFtBOs 62c/GoOppwrrFHhhWskaHBWW0hKF6RuAqpTqaDmfgyRD2JRsu7TKYm7E5xzV0C4h gqk5IBtB5tG0XSHvMhN4rW2UoqYkPSDLAmHt95qeOdAj+VKA/wqIEwDhKFqEqCHT UvL7+ESBnbP6Q0VBKNFD7WnL6/7QkNW0+RS4+Da5BUjoJtA+KBcnN/L5uL/fKf3V OIfc5AsQngEQth31/DNCaQImI9XLVAFb+Q1kYY1V4i/ZTQVvyQIG/qte2nff/pdR age7Hr+21bPa53jfEkTZmA1k4Pk0QSbc -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:58 2025 by rpki-client