This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: miSnU60C0yZ/3CBwkVnT7HnHtcLMSjJugWlPM6wtJ7U= Subject key identifier: 8A:23:A2:55:D9:1A:59:CE:BF:2D:62:EE:29:F2:0D:4C:12:60:99:A0 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 21BB Signing time: Sat 06 Dec 2025 15:37:59 +0000 Manifest this update: Sat 06 Dec 2025 15:37:58 +0000 Manifest next update: Sat 13 Dec 2025 15:37:58 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: /m+YQd3D8fq8704W3UKofKLIcw4UHkyTBa7BAwsVYdw=) 2: 49CAEF64D07011F08EAB2929C4F9AE02.roa (hash: Dq1CKXIyNSfYIrpYzOR2XXicVsO2S1H/EK9/Tu0yc48=) 3: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 4: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) 5: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: ZKTM4IqqHXDwYNaYKhi6qetROiIF+dziZqdqeG6Vrkw=) 6: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 7: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 8: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 9: 49567968D07011F0A2852929C4F9AE02.roa (hash: PF1d1ziol4FXUWz4ISGS+v7Olmqbj3/UyDns6YPBaT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8699 (0x21fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Dec 6 15:37:58 2025 GMT Not After : Dec 13 15:37:58 2025 GMT Subject: CN=69344dd7-e23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:82:f7:cd:ed:dc:fa:8b:19:9f:2a:69:b7: 58:2d:7f:ff:1f:02:d3:f3:b9:64:09:91:2e:7b:6d: 0f:34:ac:0f:48:93:20:10:ae:4f:0e:60:69:06:ac: 65:a2:89:77:90:3e:a2:04:74:21:8d:52:af:1f:fc: a6:ad:b1:ce:8a:b7:fd:22:d3:c6:67:e7:bc:b8:39: 7d:2c:4a:74:d4:34:1a:6e:a8:bf:e9:ef:7d:26:26: b7:d4:c4:e0:2d:08:9a:2d:f4:ef:ef:b0:4c:13:ca: 30:3a:4b:8f:d3:dd:55:fc:3a:bb:5d:fd:5a:5b:46: 8f:dd:b1:be:b9:f1:77:74:1f:d0:37:96:1e:ce:88: 55:dd:26:f2:e4:7d:aa:1c:77:66:54:f0:dc:7a:4f: c6:07:03:e7:79:8f:f9:c0:69:f2:81:c9:4b:ac:76: 1b:d1:1f:46:06:fb:8e:26:98:49:86:2d:79:3a:55: 3c:80:88:56:bb:42:0b:75:82:6a:30:56:70:19:12: 7c:ed:af:ae:d0:7a:40:d4:80:46:5a:05:c9:99:2b: 97:29:6e:81:df:a0:e6:fc:97:a8:4b:a3:45:e9:52: b7:3c:64:51:ae:ba:9c:94:05:b7:72:bf:57:52:09: 19:6f:21:40:13:83:cb:ea:1a:06:e1:f9:9c:2c:70: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:A2:55:D9:1A:59:CE:BF:2D:62:EE:29:F2:0D:4C:12:60:99:A0 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:c1:df:86:c1:e5:9d:ed:73:94:f7:0c:da:11:90:8c:58: 79:b7:84:67:7f:f3:b6:3b:5b:b7:d6:e8:0c:1f:b3:0b:16:a0: 96:cf:13:6d:7a:36:16:71:2a:94:d2:85:8e:63:71:80:63:a6: 0b:68:6d:bb:db:bb:74:f8:3e:bb:dd:62:ad:04:b9:47:81:fb: 8f:0d:24:ae:24:cf:60:c0:39:19:b2:9c:36:5f:e7:6e:aa:cb: 2b:f3:53:19:04:5d:05:a8:c3:ab:34:2b:41:ed:87:1f:9c:40: 96:ed:ab:a2:ca:0b:e7:4b:5e:b8:27:a1:fe:83:36:1a:f2:7d: a2:8c:03:77:ab:c8:e8:79:e0:e4:ca:a8:6f:80:da:14:29:d9: 03:45:a6:9a:0d:ab:a5:cc:8c:ea:26:67:21:41:7d:0f:67:72: 38:a0:45:22:d5:bf:da:5c:f5:ab:fa:a3:57:d2:a7:cd:8a:3d: cc:fd:ce:e3:73:b8:96:57:c8:ac:3f:d3:db:a5:a5:51:e2:38: 51:cd:6a:aa:cb:e5:e9:b5:6a:98:b9:41:63:49:3d:5d:74:a7: 39:d5:5d:4c:ef:f0:7c:a3:29:be:5e:08:1b:d6:88:de:d8:f9: 07:d0:70:6e:2d:cc:c5:79:24:b1:71:44:aa:0a:cc:d0:8e:dd: 6f:50:81:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMjA2MTUzNzU4WhcNMjUxMjEzMTUzNzU4WjAYMRYwFAYD VQQDEw02OTM0NGRkNy1lMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05aC983t3PqLGZ8qabdYLX//HwLT87lkCZEue20PNKwPSJMgEK5PDmBpBqxl ool3kD6iBHQhjVKvH/ymrbHOirf9ItPGZ+e8uDl9LEp01DQabqi/6e99Jia31MTg LQiaLfTv77BME8owOkuP091V/Dq7Xf1aW0aP3bG+ufF3dB/QN5YezohV3Sby5H2q HHdmVPDcek/GBwPneY/5wGnygclLrHYb0R9GBvuOJphJhi15OlU8gIhWu0ILdYJq MFZwGRJ87a+u0HpA1IBGWgXJmSuXKW6B36Dm/JeoS6NF6VK3PGRRrrqclAW3cr9X UgkZbyFAE4PL6hoG4fmcLHCNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIojolXZ GlnOvy1i7inyDUwSYJmgMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5MHfhsHlne1zlPcM2hGQjFh5t4Rnf/O2O1u31ugMH7MLFqCWzxNt ejYWcSqU0oWOY3GAY6YLaG2727t0+D673WKtBLlHgfuPDSSuJM9gwDkZspw2X+du qssr81MZBF0FqMOrNCtB7YcfnECW7auiygvnS164J6H+gzYa8n2ijAN3q8joeeDk yqhvgNoUKdkDRaaaDaulzIzqJmchQX0PZ3I4oEUi1b/aXPWr+qNX0qfNij3M/c7j c7iWV8isP9PbpaVR4jhRzWqqy+XptWqYuUFjST1ddKc51V1M7/B8oym+Xggb1oje 2PkH0HBuLczFeSSxcUSqCszQjt1vUIEX -----END CERTIFICATE-----Generated at Sat Dec 6 18:55:13 2025 by rpki-client