This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: u+LegmSh/d9W7CTyRyevbfIeLy23bC1JoREk3cpPGrk= Subject key identifier: 1E:C1:DA:56:29:B8:8A:D1:5C:EC:AE:8C:B3:17:30:D0:CB:E2:FF:1F Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 05B3 Signing time: Thu 04 Dec 2025 21:47:48 +0000 Manifest this update: Thu 04 Dec 2025 21:47:48 +0000 Manifest next update: Thu 11 Dec 2025 21:47:47 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: JJU9f/ceZB6AtSlrTs8fTayG3UjNqY2FSAg9gngDb6c=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Dec 4 21:47:48 2025 GMT Not After : Dec 11 21:47:47 2025 GMT Subject: CN=69320184-5ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:e0:7a:58:9e:c1:70:94:84:d8:77:b1:d3: 81:d3:36:f3:94:78:7f:af:b1:ba:09:aa:9e:eb:9a: 7e:d9:68:a5:30:5c:88:b0:4c:be:c1:61:e2:46:b1: 45:f5:35:44:f3:44:bf:b0:d6:72:0b:5a:b4:00:5e: 37:63:3e:50:38:04:59:ad:76:6f:80:a5:45:d9:b7: 94:7a:63:6a:e8:8f:45:9c:ac:c0:2f:f6:21:f0:b4: f5:cc:af:34:2b:91:fa:55:63:91:a5:33:f2:3d:34: 50:17:e2:92:d4:2a:67:f5:ff:5d:57:ae:79:48:7a: 2b:7e:4e:ae:0b:2e:8f:b0:7a:11:e5:d6:59:28:37: c8:05:7e:24:af:44:c0:2b:49:9e:a1:51:30:f3:f3: 1f:fe:7a:83:fe:50:b3:bf:dd:d8:14:9c:dd:d3:5d: b3:a0:26:3a:a7:64:71:bb:84:3f:6e:f7:93:aa:fc: 96:a5:0e:10:ff:89:d0:c8:ab:36:89:e2:e9:5c:56: 0f:28:3a:1a:52:1f:5a:9d:a3:32:a6:99:1e:80:8d: 49:c4:c7:ce:32:9a:93:6e:32:2b:59:c2:63:f1:0a: 8c:8d:64:18:ec:73:dd:d0:dd:3d:6a:76:4b:6a:11: 7e:f3:d0:f7:4b:91:cc:20:3f:77:7a:f8:e4:fe:22: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:DA:56:29:B8:8A:D1:5C:EC:AE:8C:B3:17:30:D0:CB:E2:FF:1F X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c8:ab:86:25:f2:3c:76:1e:c6:88:07:12:18:88:39:ab:a7: 51:4d:6c:b4:47:2c:55:a8:0e:94:da:70:bf:e8:92:c8:9e:a1: 13:1c:57:ec:7c:de:95:78:6c:e8:83:e3:af:36:ea:b0:84:e6: d1:08:29:9a:1b:95:d5:9b:89:b1:d1:1a:01:e3:e5:48:0f:37: 7c:d9:ae:ba:b6:f8:58:97:f4:b0:3a:4e:fa:68:45:d1:3f:99: 6a:20:35:c2:6f:bb:b4:cb:07:14:f9:c7:93:bf:cc:c2:7c:6e: 00:8b:76:c6:3c:ac:03:5e:09:35:ca:09:26:90:54:3a:ae:32: 48:7e:6b:7c:8d:40:9f:30:f1:63:37:59:fc:81:6a:29:07:11: 27:d7:eb:10:0e:7e:a6:8c:0f:9a:5c:05:4b:cf:04:77:81:93: 0c:c4:20:ca:2b:b2:a6:da:f1:d0:7c:15:f9:06:ab:01:5a:b5: d0:23:bd:05:0d:28:5e:82:14:d0:51:df:f8:95:ae:4d:0a:d1: 73:86:99:9c:1f:99:56:53:04:ac:4a:db:3d:6f:ec:f2:88:90: 6b:7d:60:cf:37:69:31:30:96:28:66:16:75:61:ce:67:9f:01: 35:f3:fb:9d:a5:4e:c1:b7:d9:80:e2:9f:a7:3f:f2:c7:46:c9: 7e:d4:1b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUxMjA0MjE0NzQ4WhcNMjUxMjExMjE0NzQ3WjAYMRYwFAYD VQQDEw02OTMyMDE4NC01ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr77geliewXCUhNh3sdOB0zbzlHh/r7G6Caqe65p+2WilMFyIsEy+wWHiRrFF 9TVE80S/sNZyC1q0AF43Yz5QOARZrXZvgKVF2beUemNq6I9FnKzAL/Yh8LT1zK80 K5H6VWORpTPyPTRQF+KS1Cpn9f9dV655SHorfk6uCy6PsHoR5dZZKDfIBX4kr0TA K0meoVEw8/Mf/nqD/lCzv93YFJzd012zoCY6p2Rxu4Q/bveTqvyWpQ4Q/4nQyKs2 ieLpXFYPKDoaUh9anaMyppkegI1JxMfOMpqTbjIrWcJj8QqMjWQY7HPd0N09anZL ahF+89D3S5HMID93evjk/iLIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7B2lYp uIrRXOyujLMXMNDL4v8fMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwyKuGJfI8dh7GiAcSGIg5q6dRTWy0RyxVqA6U2nC/6JLInqETHFfs fN6VeGzog+OvNuqwhObRCCmaG5XVm4mx0RoB4+VIDzd82a66tvhYl/SwOk76aEXR P5lqIDXCb7u0ywcU+ceTv8zCfG4Ai3bGPKwDXgk1ygkmkFQ6rjJIfmt8jUCfMPFj N1n8gWopBxEn1+sQDn6mjA+aXAVLzwR3gZMMxCDKK7Km2vHQfBX5BqsBWrXQI70F DSheghTQUd/4la5NCtFzhpmcH5lWUwSsSts9b+zyiJBrfWDPN2kxMJYoZhZ1Yc5n nwE18/udpU7Bt9mA4p+nP/LHRsl+1Bu9 -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:28 2025 by rpki-client